problems with using explode("t", $string) from form_textarea

[eluser]Aken[/eluser]
You can't change the config item for it on the fly, because of when global xss_clean is performed (after the config file is loaded, before the controller is loaded, and no hook in between).

My advice would be to add logic to your config file to determine the current URL, and to disable global XSS on that particular URL. Then you'd need to add xss_clean to your individual POST items.

Another option is change the way you're handling the input. Maybe do a file upload instead of a textarea. Just a thought.