check comment for html

Posted on 16th Feb 2014 07:03 pm by admin

hi, I just wanted to check if a comment a user posts contains HTML, and if it does, to not allow it to be posted.

this is my current php, any help would be very much appreciated! thanks.


Code:
<?php

$comment=$_POST['comment'];
$name=$_POST['name'];
$email=$_POST['email'];
$website=$_POST['website'];
$date=date("y/m/d h:i:s");

if($name && $email && $comment){

$sql="INSERT INTO `comments` (`name`, `email`, `website`, `articleid`, `comment`, `datetime`) VALUES ('$name', '$email', '$website', '$id', '$comment', '$date')";
$result=mysql_query($sql) or die(mysql_error());


if($result){


echo "Your comment was posted succesfully on the article n";
echo $rows['title'];
echo '<p><a href="view_article.php?id=';
echo $id;
echo '">Click here to go back to the article.</a></p>';
}else {
echo "Sorry, your comment could not be posted. Please make sure you fill in all the fields marked with *.n";

}
}else {
echo "Sorry, your comment could not be posted. Please make sure you fill in all the fields marked with *.n";
}
?>

Your Answer:

Login to answer

Other forums

Greek characters in php
Hi,

I'm making a script and I m using for first time greek characters.
I started to write

small inaccuracies
I have this code to convert fractional base 10 into base 2:

while($num > 0)

How to get exact 3 moths post date from today date using javascript
How to get exact 3 moths post date from today date using javascript
Please help

Trying to add functions to table
I have this list of characters and I'm trying to figure out what I have to do to put the results of

Login page problems
I developed a website a few months ago and I am now having an issue with logging into it. The place

please help me in this update statment
hi every one

if I have table and this data in it

id name
10

blank page.... nothing is happening.
I'm new to a lot of this but in the last 24hrs have learned a lot.
Installed latest version of my

Show message after entering data
Hello Colleagues

I would like to display messages after entering the data example: "
dat

printing links
Hi every1

i am connecting to a table in sql and the looping through with a while ($ var = my

What makes a script your own?
If someone finds a login script online, and changes some variable names around and some other minor