Unsupporting HTML in a Textbox

[Jerzxu]

Not sure exactly where this goes, I tried googling it, but unfortunately I'm not sure how one would word this question.

 

Okay anyways, my question is this:

I am storing text in a mysql database, and since its text, how would one stop it from using HTML codes? Because putting iframe in it just kills the layout.

 

Also for that regard, how would one add something like BBC codes to it?

[Michan]

htmlspecialchars($string); converts your HTML characters into readable format.

[Jerzxu]

That helps me with that one. Could one use this to create a sort of BBC code esque type thing?

[marcus]

What Michan said will work which will convert " to " and < to < etc...

 

If you just want to remove like bold, italic and other forms of HTML use strip_tags()

 

for your BBCode you would have to use a form of preg replace or str replace

 

for bold it would be something like

 

$find = "/\[b\](.*?)\[\/b\]/is";
$replace = "<b>$1</b>";

$bold_test = "hello my name is [b]marcus[/b]";
echo preg_replace($find, $replace, $bold_test);

[Jerzxu]

Ok works for me, THANKS for your guy's quick replies.