Restricting Certain Characters From Input

[ShoeLace1291]

I was wondering how I would be able to keep users from putting certain characters such as <,>,\,/?, etc in text inputs in forms?

[teng84]

if(ereg('(\<(/?[^\>]+)\>)',$string))

{

action here

}

 

i think its something like that

[JasonLewis]

i think you could use htmlentities or one of those functions.

 

http://au.php.net/manual/en/function.htmlentities.php

 

that allows them to enter them but it makes them non-html...

 

 

[ShoeLace1291]

So if I used htmlentities($_POST['username']); what would that do?

[JasonLewis]

did you read the manual? lol... that would help...

 

taken from manual:

$str = "A 'quote' is <b>bold</b>";

// Outputs: A 'quote' is <b>bold</b>
echo htmlentities($str);

// Outputs: A 'quote' is <b>bold</b>
echo htmlentities($str, ENT_QUOTES);
?>

 

basically. it would appear as it as written. so if you were to write a link, it would appear as the html and not as the link. i think that makes sense. lol.

 

the < b > tags would appear as that on the screen. so they wouldnt work in making the text bold.

[teng84]

if(ereg('[\<+|\>+|\\+|\/+|\?]',$string))

{

echo 'mali';

}

 

that wont accepr ?<>/\