How can I allow my user to insert HTML code, without risks? (not only technical risks)

后端 未结 10 840
一生所求
一生所求 2020-12-09 05:41

I developed a web application, that permits my users to manage some aspects of a web site dynamically (yes, some kind of cms) in LAMP environment (debian, apache, php, mysql

10条回答
  •  甜味超标
    2020-12-09 06:01

    I use this php strip_tags function because i want user can post safely and i allow just few tags which can be used in post in this way nobody can hack your website through script injection so i think strip_tags is best option

    Clich here for code for this php function

提交回复
热议问题