hmmm...

that's slightly better - in that you used more than one line to explain your
problem.
I'm still having trouble figuring out what you want to do though - try
explaining problems a bit clearer next time.

If you want to be able to use <script> tags in forum posts, then just go
ahead and get rid of all checking you're doing on user input.
Of course, I'd strongly advise against letting anyone just enter random
HTML - you must remember that the majority of people visiting your site will
be using IE >= 5, therefor they will be able to run client-side VBScript -
which can do much nastier things than JavaScript can.

perhaps a good idea would be to implement a system where trusted users (ie
those who have been members for X months, or those with more than Y form
posts) can enter HTML code directly, all others get the strip_tags()
treatment.

You should _always_ _at least_ run mysql_escape_string() or equivalent on
_any_ text you enter into your database which has been entered by a user.

If that's not what you're talking about, then perhaps come back with a bit
more information.

Thanks,

Matt

"Mike" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Sorry guys, let me rephrase my question.
>
> I want to insert some javascript code into the code for my forum (vB) not
as
> a post, but as a forum post, but as code within the php file.
>
> Sorry about the confusion
>
>
> "Mike" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > How would I implement Javascript into a vB code?
> >
> >
>
>



-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to