Welcome Guest, Not a member yet? Register   Sign In
[SOLVED]How can I stop xss_clean from turning Html comment tags into entities thus displaying in the browser
#6

[eluser]bobbob[/eluser]
So I solved this myself I think.
It has not been widely tested but seems to make sense.

Code:
<?php
$body = stripslashes($body);
  $body = str_replace('<!--','<!--',$body);
  $body = str_replace('-->','-->',$body);
  
  echo $body;
?>
That would be & l t ; ! - - and - - & g t ; without the spaces as that function is being done on my post too!


Messages In This Thread
[SOLVED]How can I stop xss_clean from turning Html comment tags into entities thus displaying in the browser - by El Forum - 06-17-2009, 11:46 PM



Theme © iAndrew 2016 - Forum software by © MyBB