serverman Posted June 17, 2008 Share Posted June 17, 2008 ok I am working on a tutorial system and users can submit tutorials... i want for when you view the tutorial it will not to execute the any sever side scripts or client side but i want it to still allow html to work inside the tutorials i hope i made sence in this post im half asleep oh i dont have any scripts to share on the viewing part because we haven't started writing it Quote Link to comment Share on other sites More sharing options...
xtopolis Posted June 17, 2008 Share Posted June 17, 2008 Just make sure the scripts that people enter into your forms are escaped correctly. Also make sure they are presented/escaped? correctly when shown on the page. Look into things like mysql_real_escape_string, htmlentities, html_specialchars, as well as str_replace. That should get you started. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.