1 reply to this topic

[liamzebedee]

I have my own custom yet unsecure (probably vulnerable to XSS) Content Management System and I am looking to make it more secure. Currently when making a new post you are allowed to use only specific html tags(such as hyperlinks). After viewing this site-

http://sla.ckers.org/forum/read.php?2,5017,5021

I have realised even hyperlinks are dangerous and am seeking to implement another way of posting html. I have come to the conclusion that I need to use something like BBCode.

My question is, how do I implement this(BBCODE script) into my existing code (PHP/SQL)?

[Mark Wylde]

PHP comes with a built in BBCode parser. You can find more information about it at the address below:
PHP BBcode Parser