How can i block HTML code in string for profile page

Asked May 22 '18 at 19:49

Active May 22 '18 at 19:49

Viewed 28 times

i've got i little question. i'm trying to block all html code for my profile page for my website, so people cant break the whole system, and mostly so they cant put url's in their profile quote this is my code

function block_html($string) {
  $find = '/\<(.*?)\>/';
  $replace = '';
  return preg_replace($find,$replace,$str);
}

thanks already

asked May 22 '18 at 19:49

Michaaatje

Consider using PHP's [filter_input()](http://php.net/manual/en/function.filter-input.php) function. – Octopus May 22 '18 at 19:52
how should i use that to block html code? – Michaaatje May 22 '18 at 20:03
Use FILTER_SANITIZE_STRING, but read the docs! – Octopus May 22 '18 at 20:05
Possible duplicate of [What's the best method for sanitizing user input with PHP?](https://stackoverflow.com/questions/129677/whats-the-best-method-for-sanitizing-user-input-with-php) – hungrykoala May 23 '18 at 00:22
Why recreate the wheel? – hungrykoala May 23 '18 at 04:40

How can i block HTML code in string for profile page

0 Answers0