Validation function not working properly ...

[nvee]

I want to send all my posted variables to my POSTVAR() function to strip_tags and also run a htmlspecialchars() - It appears to complete strip_tags(), but still passes html special characters. Any ideas on why it wont work?

 

function POSTVAR($varname) {
$postname = $_POST["$varname"];
$strip = strip_tags($postname, '<p><a><ul><li>');
$return = htmlspecialchars($strip);
return $return;
}

[rarebit]

The manual is your friend: http://uk2.php.net/manual/en/function.htmlspecialchars.php

 

 

$new = htmlspecialchars("<a href='test'>Test</a>", ENT_QUOTES);