sanitizing html user inputs in php codeigniter

Question

I have a user form where users can post comment on articles. i need to allow strong, em and span tags for user inputs. I know this can be achieved through strip_tags function but i also want the other tags not to stripped but be changed using say htmlspecialchars function so that tags can be seen in the page. I hope it made sense.

Frank Farmer · Accepted Answer · 2010-05-05 16:48:51Z

2

Strip tags isn't safe. It'd allow a tag like <strong onmouseover="alert('xss');">mouse over this lol</strong> through. Use HTMLPurifier

answered May 5, 2010 at 16:48

Frank Farmer

39.6k12 gold badges73 silver badges90 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Eric LaForce · Accepted Answer · 2010-05-05 16:55:25Z

0

I think what you are looking for is the prep_for_form validation rule found here. Additionally you probably want to use xss_clean.

answered May 5, 2010 at 16:55

Eric LaForce

2,15115 silver badges24 bronze badges

Collectives™ on Stack Overflow

sanitizing html user inputs in php codeigniter

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related