strip_tags() or .htaccess

[al3x8730]

I have the problem as defined: http://www.milw0rm.com/exploits/3758

 

It says I can either make a .htaccess file to disallow people going to the file (/forum/shoutbox.php In my case) or I can "Add code to perform strip_tags() on $shout in shoutbox.php" How would I go about doing either, or both?

[Stryves]

for the strip tags,

 

$messfilter=$_POST['message'];

$message=strip_tags($messfilter);

 

$message will be your stuff inserted into the db.