Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #12875

Re: Help with regex

Show all headers | View raw

On Wed, 19 Feb 2014 07:17:17 -0800 (PST), knal wrote:

> I am aware of the security issues, but the users are part of a
> restricted group submitting to a restricted part of the website. I do
> however filter the input for SQL injections etc, just to be sure.

Okay, if they're part of a limited and presumably trusted group, just
let 'em loose to write whatever HTML they want. Or don't give them any
at all.

The core point is that the thing that you're asking to do is a Very Hard
Problem. It's so hard, in fact, that most places that would otherwise
allow limited markup, like you're proposing do, tend to do it by using
their OWN markup tags, invalidating actual HTML (a la htmlentities();),
and then parsing for their own tags and substituting real HTML tags on
the output side. Because that's WAY LESS WORK and a lot more reliable
than what you're hoping to do.

-- 
10. I will not interrogate my enemies in the inner sanctum -- a small 
   hotel well outside my borders will work just as well.
        --Peter Anspach's list of things to do as an Evil Overlord

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Help with regex knal <knalpiap@gmail.com> - 2014-02-19 01:18 -0800
  Re: Help with regex Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-02-19 15:20 +0100
    Re: Help with regex knal <knalpiap@gmail.com> - 2014-02-19 06:45 -0800
      Re: Help with regex Christoph Michael Becker <cmbecker69@arcor.de> - 2014-02-19 16:11 +0100
        Re: Help with regex knal <knalpiap@gmail.com> - 2014-02-19 07:17 -0800
          Re: Help with regex Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-02-19 16:37 +0100
            Re: Help with regex Christoph Michael Becker <cmbecker69@arcor.de> - 2014-02-19 21:32 +0100
              Re: Help with regex Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-02-19 22:28 +0100
                Re: Help with regex Christoph Michael Becker <cmbecker69@arcor.de> - 2014-02-20 22:43 +0100
                Re: Help with regex Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-02-21 02:25 +0100
                Re: Help with regex Christoph Michael Becker <cmbecker69@arcor.de> - 2014-02-23 17:57 +0100
          Re: Help with regex Jerry Stuckle <jstucklex@attglobal.net> - 2014-02-19 13:48 -0500
          Re: Help with regex "Peter H. Coffin" <hellsop@ninehells.com> - 2014-02-20 00:29 -0600
      Re: Help with regex Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-02-19 16:30 +0100
    Re: Help with regex The Natural Philosopher <tnp@invalid.invalid> - 2014-02-19 17:42 +0000
      Re: Help with regex Scott Johnson <noonehome@chalupasworld.com> - 2014-02-19 15:38 -0800

csiph-web