Storing HTML in MySQL

[eluser]ehicks727[/eluser]
This is very common, actually. I have used FCKEditor, mainly. I like it because it allowed me to specify what tags I want to allow.

You still have to check the text before you store it. In my most recent system I'm building, I'm stripping out everything except H, P, A, B, Strong, I, and EM tags. There are CI and PHP functions that are useful in stripping out illegal chars... you can use all sorts of regex checks as well.

I haven't used TinyMCE, but I would guess it's similar to FCKEditor. So to answer your question.... why not use both? An editor AND backend processing. You can't be too safe.

While you're at it, either use authentication, or a CAPTCHA to stop the form spammers.