[SOLVED] str_replace() help

[quickstopman]

im trying to make it so in my users edit profile page

the user can't put PHP, or Javascript in it.

i have a basic knowledge of what to do

here is what i think would work

if($aboutme) {
$aboutme = str_replace('<?', '...', $aboutme);
$aboutme = str_replace('?>', '...', $aboutme);
}

but thats probly wrong.

thanks!

[quickstopman]

ok on second thought i now what i did wrong

sorry guys

[warewolfe]

Hi,

 

Just in case you come back to check this thread.

 

   
$some_string = htmlentities($some_string,ENT_QUOTES);

  would be more secure than a string_replace.