escaping html tags for a textarea

[cooldude832]

I'm trying to escape html tags so I can put them in a textarea with out having a </textarea> stop the text area

example

<?php
$var = "<P><textarea name\"var1\">Blah</textarea>";
echo "<textarea name=\"update\">".$var."</textarea>";
?>

 

But because $var has a </textarea> in it it breaks the textarea there instead of later

[cooldude832]

beyond doing

$var  = str_replace("</textarea>","[/textarea]",$var);

 

[Third_Degree]

Functions you could use:

 

strip_tags

htmlentities (with ENT_QUOTES parameter) <- MY RECOMMENDATION

str_replace/ereg_replace/preg_replace

[teng84]

ignore  ???

[Third_Degree]

Oh, I see what you mean. I guess not then...

[Naez]

<?php
function textarea ($str) {
    $open = '<textarea>';
    $close = '</textarea>';

    // Count the opening tags
    preg_match_all ('/\[textarea\]/i', $str, $matches);
    $opentags = count($matches['0']);

    // Count the close tags
    preg_match_all ('/\[\/textarea\]/i', $str, $matches);
    $closetags = count($matches['0']);

    // reiterate through loop to close all the open tags, there's probably a more elegant way of doing this
    $unclosed = $opentags - $closetags;
    for ($i = 0; $i < $unclosed; $i++) {
        $str .= $close;
    }

    // Do replacement
    $str = str_replace ('[textarea]', $open, $str);
    $str = str_replace ('[/textarea]', $close, $str);

    return $str;
}
?>

[Third_Degree]

<?php
function textarea ($str) {
    $open = '<textarea>';
    $close = '</textarea>';

    // Count the opening tags
    preg_match_all ('/\[textarea\]/i', $str, $matches);
    $opentags = count($matches['0']);

    // Count the close tags
    preg_match_all ('/\[\/textarea\]/i', $str, $matches);
    $closetags = count($matches['0']);

    // reiterate through loop to close all the open tags, there's probably a more elegant way of doing this
    $unclosed = $opentags - $closetags;
    for ($i = 0; $i < $unclosed; $i++) {
        $str .= $close;
    }

    // Do replacement
    $str = str_replace ('[textarea]', $open, $str);
    $str = str_replace ('[/textarea]', $close, $str);

    return $str;
}
?>

 

You could still end up with

 

<textarea>stuff blah</textarea>hahahaahahahah<textarea></textarea></textarea>