Disabling HTML In user input

[RaythMistwalker]

Ok so I got BB Code working. Now I want to prevent Users from inserting HTML into Posts. I have the following:

 

    $PostText = mysql_escape_string($_POST['replytext']);
    $Replace = Array ('/(<)(.+)(>)/','/(<\/)(.+)(>)/');
    $ReplaceWith = Array ('&LT;\\2&GT;','&LT;/\\2&GT;');
    $PostText = preg_replace($Replace, $ReplaceWith, $PostText);

 

Now If I were to input

<a href=http://phpfreaks.net>Php Freaks</a>

Into a forum reply it would return:

<a href=http://phpfreaks.net>Php Freaks

 

When Checking the database it has:

&LT;a href=http://phpfreaks.net>Php Freaks</a&GT;

 

Any help on solving this?

[MasterACE14]

strip_tags()

[RaythMistwalker]

Does that work if I still want the tags to display on the page AS the user typed them?

[Pikachu2000]

htmlentities()

 

Keep in mind though, most browsers will render a url like http://www.domain.com as a clickable link even without the <a> tags.