htmlspecialchars not working?

[bluwe]

Hiya,

I'm trying to stop html being entered into my database. I'm checking what is being posted with the following script:

<?
foreach ($_POST as $field => $value)
{
$value = htmlspaecialchars;
$value = strip_tags;
$value = trim;
}
foreach ($_POST as $field => $value)
{
echo "$field = $value<br>";
}
?>
</body></html>

strip tags seems to be working but i can still put html in the form and the script echoes it back to me. Any ideas?

Cheers

[AndyB]

htmlsp[b]ae[/b]cialchars is spelled wrong in your code

[haaglin]

You can also try using this:

$value = htmlentities(strip_tags($value));
echo $value;

[bluwe]

That worked a treat haaglin, cheers!!!