[snip] I am wondering how to prevent that users can post html through a form. I process the form with php and save the date to a db. There are a couple of sites I have already seen such thing. No matter what you do, it is not possible to submit html commands. Thats exacly what I want to do for my site.
Can anybody point me into the right direction on how to "disable" that? [/snip] You will want to use regular expressions and functions associated with regex (such as ereg) to match the tags and remove them from the posts. Start here http://us2.php.net/manual/en/ref.regex.php Have a productive and positve day -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php