Q695 Posted March 13, 2014 Share Posted March 13, 2014 Does anyone know why the following code is stripping everything, instead of nothing until I turn off what I don't want people to use: $html5 = ' <menu> <command> <summary> <details> <meter> <progress> <output> <keygen> <textarea> <option> <optgroup> <datalist> <select> <button> <input> <label> <legend> <fieldset> <form> <th> <td> <tr> <tfoot> <thead> <tbody> <col> <colgroup> <caption> <table> <math> <svg> <area> <map> <canvas> <track> <source> <audio> <video> <param> <object> <embed> <iframe> <img> <del> <ins> <wbr> <br> <span> <bdo> <bdi> <rp> <rt> <ruby> <mark> <u> <b> <i> <sup> <sub> <kbd> <samp> <var> <code> <time> <data> <abbr> <dfn> <q> <cite> <s> <small> <strong> <em> <a> <div> <figcaption> <figure> <dd> <dt> <dl> <li> <ul> <ol> <blockquote> <pre> <hr> <p> <address> <footer> <header> <hgroup> <aside> <article> <nav> <section> <body> <noscript> <script> <style> <meta> <link> <base> <title> <head> <html> '; $_________=$_POST['_____']; $__________=strip_tags($_______, '$html5'); Quote Link to comment Share on other sites More sharing options...
Ch0cu3r Posted March 13, 2014 Share Posted March 13, 2014 Remove the single quotes around '$html5' . Variables are not expanded within single quotes Quote Link to comment Share on other sites More sharing options...
requinix Posted March 13, 2014 Share Posted March 13, 2014 Why the heck are you naming your variables and inputs with underscores? Quote Link to comment Share on other sites More sharing options...
Q695 Posted March 13, 2014 Author Share Posted March 13, 2014 So it keeps the tags that I don't list? Quote Link to comment Share on other sites More sharing options...
.josh Posted March 14, 2014 Share Posted March 14, 2014 Why the heck are you naming your variables and inputs with underscores? lol I was trying to figure that out too.. I can't decide whether he's just masking for posting purposes or if it's part of some kind of weird template system or what.. Quote Link to comment Share on other sites More sharing options...
Q695 Posted March 14, 2014 Author Share Posted March 14, 2014 I mask for posting purposes that way you can put in whatever you want for the var names. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.