check comment for html

Posted on 16th Feb 2014 07:03 pm by admin

hi, I just wanted to check if a comment a user posts contains HTML, and if it does, to not allow it to be posted.

this is my current php, any help would be very much appreciated! thanks.


Code:
<?php

$comment=$_POST['comment'];
$name=$_POST['name'];
$email=$_POST['email'];
$website=$_POST['website'];
$date=date("y/m/d h:i:s");

if($name && $email && $comment){

$sql="INSERT INTO `comments` (`name`, `email`, `website`, `articleid`, `comment`, `datetime`) VALUES ('$name', '$email', '$website', '$id', '$comment', '$date')";
$result=mysql_query($sql) or die(mysql_error());


if($result){


echo "Your comment was posted succesfully on the article n";
echo $rows['title'];
echo '<p><a href="view_article.php?id=';
echo $id;
echo '">Click here to go back to the article.</a></p>';
}else {
echo "Sorry, your comment could not be posted. Please make sure you fill in all the fields marked with *.n";

}
}else {
echo "Sorry, your comment could not be posted. Please make sure you fill in all the fields marked with *.n";
}
?>

Your Answer:

Login to answer

Other forums

Sales orders ans reservations not taken into account on MPS / MRP
Hello,

I am implementing the MPS / MRP and I have the following problem:

I ha

Price in PR
Dear Experts,
Why we have to enter the price in the PR, and why there is no free goods indicato

Recognising Revenue daily
Hello.
Has anyone come across daily recognition of deferred income?
We want to implement R

str_replace help
I am thinking str_replace is my only option to filter outputs from my database to convert them to sa

How to get all server headers like Live http Headers does
Hey all, like many of you I use the Firefox addon "Live http Headers". I'm trying to write

Uploading/Downloading files stored in MySQL database
Hey all,

This problem just came up in my website and I'm having a hard time figuring out what

i need help with php header and footer
I have designed a header and footer for my site and they seem to be ok when they are running individ

delete comma
HI,

How to delete "," at the end of the string.
Code: $match = 2009/02/03/a2corr

Time-based image rotation script
I'm trying to write a PHP script that rotates an image based on what time of day it is. I want the

some questions
Hello,

I am looking for the answers for following questions:

1) Does PHP support overl