--- "CPT John W. Holmes" <[EMAIL PROTECTED]> wrote:
> Heh... my turn to disagree again. You can do a simple str_replace()
> to convert "&lt;b&gt;" back into "<b>", but you're going to have to
> do it for each case. Also by doing that blindly, you can end up with
> orphaned tags affecting the rest of your page (making it all bold,
> for example).

How does bbcode make this easier or even different? It seems to me that
&lt;b&gt; and [b] are a lot alike; they're both specific strings that you
want to be converted to <b>. The difference is relying on the user to
learn a markup language specific to your application. With no real benefit
in doing so, this is an unnecessary complication.

Slash uses regular HTML, and unlike any of our PHP equivalents
(unfortunately), it is actually a nice CMS that isn't plagued with
security vulnerabilities. So, my opinion isn't unique. Maybe I'm just the
only non-Perl guy who thinks this way. :-)

> Your turn. :)

Heh. :-) I don't think taking turns will help. We're probably both too
stubborn to yield our respective positions. This isn't a new topic to me,
and unless someone can bring up a point I haven't considered before, my
opinion was made long ago.

Chris

=====
Chris Shiflett - http://shiflett.org/

PHP Security Handbook
     Coming mid-2004
HTTP Developer's Handbook
     http://httphandbook.org/
RAMP Training Courses
     http://www.nyphp.org/ramp

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to