Re: [PHP] Re: Displaying HTML safely

2005-07-17 Thread Lauri Harpf
> Something like this (you might like to check the syntax, I'm working from > memory here) might work: > > header('Content-Disposition: attachment; filename=somefile.html'); Thanks, I'll have to try that. As for security, looks like I will need to watch out for the extensions. Turns out that th

Re: [PHP] Re: Displaying HTML safely

2005-07-16 Thread Jasper Bryant-Greene
Dotan Cohen wrote: On 7/16/05, Lauri Harpf <[EMAIL PROTECTED]> wrote: I've been thinking of limiting this problem by preventing the direct displaying of the code (ie. only allowing "Save As.." for the link to the user-submitted HTML). I guess a bit of JS could prevent accidental left-clicking on

Re: [PHP] Re: Displaying HTML safely

2005-07-16 Thread Dotan Cohen
On 7/16/05, Lauri Harpf <[EMAIL PROTECTED]> wrote: > > Well, unless you have set your server up to execute PHP or CGI scripts in > > .html files, which is a very bad idea, the only thing you need to worry > > about is client-side scripting. You could just filter out all > > tags if client-side scr