Dont display <div><a> tags in content

PHP
1

hi all

this is the “content” stored in the database with <div><a> tags


<div style="font-size:14px">lorem ipsume lorem ipsume lorem ipsume lorem ipsume lorem ipsume lorem ipsume lorem ipsume <a href="http://yahoo.com">lorem ipsume</a> <div>

If i use


htmlspecialchars($content)

then content is displayed as it is with <div style=“font-size:14px”><a> tags.

i dont want to show these tags <div style=“font-size:14px”><a> while displaying content on my page to client.

I dont want to remove/strip these tags and want these tags to only be visible when we click on “view source” browser option.

what should i use

vineet

2

If you want the <div> and <a> tags to be handled by the browser as tags, then don’t use htmlspecialchars. Just echo the content as you get it from the database.

If there are any tags (<script> for example) you want to strip, use strip_tags. But really you should have eliminated any tags you don’t want to have before you stored the data in the database.

3

hi guido

if i use


strip_tags($content,"<div><a>");

Then will it protected me against XSS or not ?

vineet