deathadder559
-
Posts
2 -
Joined
-
Last visited
deathadder559's Achievements
Newbie (1/5)
0
Reputation
-
Disabling Php Input Without Disabling Html
deathadder559 replied to deathadder559's topic in PHP Coding Help
im using ckeditor, and when i input php it shows up in the page source as a html comment so that isn't a problem but i would still need to use mysql_real_escape_string(); to prevent sql injection wouldn't i? while im on the subject does real escape protect against all sql injection? ik there is different types but im not too sure -
hi i am working on a project and for it i need users to be able to input html, but not php tags for obvious reasons, how would i remove <?php, <? and ?>