serverman Posted June 17, 2008 Share Posted June 17, 2008 ok I am working on a tutorial system and users can submit tutorials... i want for when you view the tutorial it will not to execute the any sever side scripts or client side but i want it to still allow html to work inside the tutorials i hope i made sence in this post im half asleep oh i dont have any scripts to share on the viewing part because we haven't started writing it Link to comment https://forums.phpfreaks.com/topic/110530-blocking-scripts/ Share on other sites More sharing options...
xtopolis Posted June 17, 2008 Share Posted June 17, 2008 Just make sure the scripts that people enter into your forms are escaped correctly. Also make sure they are presented/escaped? correctly when shown on the page. Look into things like mysql_real_escape_string, htmlentities, html_specialchars, as well as str_replace. That should get you started. Link to comment https://forums.phpfreaks.com/topic/110530-blocking-scripts/#findComment-567056 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.