FUDforum: comp.lang.php » Help with regex

Home » Imported messages » comp.lang.php » Help with regex

Show: Today's Messages :: Polls :: Message Navigator

Re: Help with regex [message #184965 is a reply to message #184954]

Thu, 20 February 2014 06:29

Peter H. Coffin
Messages: 245
Registered: September 2010

Karma:

Senior Member

On Wed, 19 Feb 2014 07:17:17 -0800 (PST), knal wrote:

> I am aware of the security issues, but the users are part of a
> restricted group submitting to a restricted part of the website. I do
> however filter the input for SQL injections etc, just to be sure.

Okay, if they're part of a limited and presumably trusted group, just
let 'em loose to write whatever HTML they want. Or don't give them any
at all.

The core point is that the thing that you're asking to do is a Very Hard
Problem. It's so hard, in fact, that most places that would otherwise
allow limited markup, like you're proposing do, tend to do it by using
their OWN markup tags, invalidating actual HTML (a la htmlentities();),
and then parsing for their own tags and substituting real HTML tags on
the output side. Because that's WAY LESS WORK and a lot more reliable
than what you're hoping to do.

--
10. I will not interrogate my enemies in the inner sanctum -- a small
hotel well outside my borders will work just as well.
--Peter Anspach's list of things to do as an Evil Overlord

Report message to a moderator

[Message index]

		Help with regex By: knal on Wed, 19 February 2014 09:18
		Re: Help with regex By: Thomas 'PointedEars' on Wed, 19 February 2014 14:20
		Re: Help with regex By: knal on Wed, 19 February 2014 14:45
		Re: Help with regex By: Christoph Michael Bec on Wed, 19 February 2014 15:11
		Re: Help with regex By: knal on Wed, 19 February 2014 15:17
		Re: Help with regex By: Thomas 'PointedEars' on Wed, 19 February 2014 15:37
		Re: Help with regex By: Christoph Michael Bec on Wed, 19 February 2014 20:32
		Re: Help with regex By: Thomas 'PointedEars' on Wed, 19 February 2014 21:28
		Re: Help with regex By: Christoph Michael Bec on Thu, 20 February 2014 21:43
		Re: Help with regex By: Thomas 'PointedEars' on Fri, 21 February 2014 01:25
		Re: Help with regex By: Christoph Michael Bec on Sun, 23 February 2014 16:57
		Re: Help with regex By: Jerry Stuckle on Wed, 19 February 2014 18:48
		Re: Help with regex By: Peter H. Coffin on Thu, 20 February 2014 06:29
		Re: Help with regex By: Thomas 'PointedEars' on Wed, 19 February 2014 15:30
		Re: Help with regex By: The Natural Philosoph on Wed, 19 February 2014 17:42
		Re: Help with regex By: Scott Johnson on Wed, 19 February 2014 23:38

Previous Topic:	Career Opportunities in Singapore (PHP Tech Lead)
Next Topic:	PHP script to get name of file which houses the script?

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Nov 27 23:54:24 GMT 2024

Total time taken to generate the page: 0.06218 seconds