about highlight_string

[vividona]

I used highlight_string() function to color my php codes

but I got output like this:

 

<?php echo "hi"; ?>

 

I am using htmlspecialchars() + nl2br()

how can I put [< , >, ""] without destroy my data

[teamatomic]

Dont convert the html characters.

 

 

HTH

Teamatomic

[vividona]

Dont convert the html characters.

 

 

HTH

Teamatomic

 

Hi teamatomic

 

but this may cause security issue later on

[teamatomic]

You can convert the data BEFORE it goes inside of tags.

$user = htmlspecialchars("$_POST['user']);

 

HTH

Teamatomic

[vividona]

You can convert the data BEFORE it goes inside of tags.

$user = htmlspecialchars("$_POST['user']);

 

HTH

Teamatomic

 

of course I did that

 

 

 

[vividona]

After I clean my data using htmlspecialchars

I used this code to insert come html tags

public function bb_php($string)
{
	$string = str_replace ( '&', '&', $string );
        $string = str_replace ( ''', '', $string );
        $string = str_replace ( '"', '', $string );
        $string = str_replace ( '<', '<', $string );
        $string = str_replace ( '>', '>', $string );
	$match = array('#\[php\](.*?)\[\/php\]#se');
	$replace = array("'<div>'.highlight_string(stripslashes('$1'), true).'</div>'");

	return preg_replace($match, $replace, $string);
}

 

is this will cause security issue in future???

 

[attachment deleted by admin]

[vividona]

any comment?