This function will strip the string provided as $text from all HTML symbols, making it into plain text.
stripinput
Docs
PHPFusion Development
Core Functions verify_image uncompressIPv6 trimlink theme_exists stripslash stripinput stripget showdate set_admin_pass redirect profile_link preg_check phpentities parseubb parsesmileys parsebytesize make_captcha makepagenav makefileopts makefilelist isnum highlight_words hide_email groupaccess getuserlevel getusergroups getgroupname formatcode displaysmileys descript dbrows dbresult dbquery dbcount dbconnect dbarraynum dbarray cleanurl check_captcha check_admin_pass checkrights checkgroup censorwords cache_smileys cache_groups cache_bbcode addslashTheme FunctionsOther FunctionsMail FunctionsComments and RatingsPhoto Gallery FunctionsInfusions FunctionsOutput HandlingForum FunctionsBBCodesCustom includesJavascript Functionsstripinput
Quote
stripinput ( mixed $text )
Parameters
text
Mixed subject to be stripped, this can be a string, numeric or an array.
Return Values
The given string decoded as non HTML text
Example
Code
<?php
$text = "<a href='www.example.com'><strong>Here is a site</strong></a>";
echo stripinput($text);
?>Here we will prevent the text to be stored as HTML
Output from the example above
Quote
<a href='www.example.com'><strong>Here is a site</strong></a>
Changelog
7.01.00 - stripinput() will now also strip arrays
Notes
Using this on entries to the database which is supposed to be HTML will make the HTML to malfunction.
Use this for all submitted entries to the database to prevent injections.