spfoonnewb Posted August 29, 2006 Share Posted August 29, 2006 Validating user posted data:I want to remove any HTML using: mysql_real_escape_string or strip_tags I also want to remove invalid characters, ( - , ! , # , % , ^ , & , * , ( , ) , AND , OR , WHERE , etc.... )This will be to prevent MySQL injection, can anyone help? Quote Link to comment Share on other sites More sharing options...
hitman6003 Posted August 29, 2006 Share Posted August 29, 2006 http://www.php.net/str_replaceUse an array of all the characters you want to replace for the first arguement. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.