Please check my new project

[marksie1988]

function strip_clean($strip_clean) {
$search="/alert();/";
$search.="/document.title();/";
$search.="/prompt();/";
$search.="/confirm();/";
$replace="";
return preg_replace($search,$replace,$strip_clean);
}

[darkfreaks]

why do you need to escape  everything, there's your most likely problem 

[marksie1988]

why do you need to escape  everything, there's your most likely problem 

 

what do yea mean escape everything? the only change i made to the script was the / which everywhere i looked said you need but obv that didnt work

[darkfreaks]

why it works fine without escaping it ???

[marksie1988]

i have the code like this now and still get errors

 

function strip_clean($strip_clean) {
$search="alert();";
$search.="document.title();";
$search.="prompt();";
$search.="confirm();";
$replace="";
return preg_replace($search,$replace,$strip_clean);
}

[darkfreaks]

what errors?

[marksie1988]

Warning: preg_replace() [function.preg-replace]: Delimiter must not be alphanumeric or backslash in /home/marksie/blconline/mileagedemo/inc/DbConnector.php on line 215

Warning: preg_replace() [function.preg-replace]: Delimiter must not be alphanumeric or backslash in /home/marksie/blconline/mileagedemo/inc/DbConnector.php on line 215

Warning: preg_replace() [function.preg-replace]: Delimiter must not be alphanumeric or backslash in /home/marksie/blconline/mileagedemo/inc/DbConnector.php on line 215

Warning: preg_replace() [function.preg-replace]: Delimiter must not be alphanumeric or backslash in /home/marksie/blconline/mileagedemo/inc/DbConnector.php on line 215

 

below are lines  209 to 216

 

function strip_clean($strip_clean) {
$search="alert();";
$search.="document.title();";
$search.="prompt();";
$search.="confirm();";
$replace="";
return preg_replace($search,$replace,$strip_clean);
}

[darkfreaks]

Fix:

<?php
function strip_clean($strip_clean) {
$search="[^A-Za-z0-9]"; //stripping ()/\.
$replace="";
return preg_replace($search,$replace,$strip_clean);
}?>