jignesh posted

strip_tags, allow PHP tags?

ravi
answered Apr 26 '23 00:00

By default, the strip_tags () function in PHP removes not only HTML tags, but also PHP tags from the input string. Therefore, it is not recommended to allow PHP tags using the strip_tags () function, as it can pose a security risk to your application.

If you want to remove HTML tags but retain PHP code in a string, you can use regular expressions to achieve this. For example, you can use the preg_replace () function to remove all HTML tags, while retaining any PHP code within the string. Here's an example:


$string_with_tags_and_php = "<p>This is some <strong>text</strong> with <?php echo 'PHP code'; ?> and <a href='#'>HTML</a> tags.</p>";
$stripped_string = preg_replace('/<[^>]*>/', '', $string_with_tags_and_php);
echo $stripped_string;

Output:


This is some text with <?php echo 'PHP code'; ?> and HTML tags.

In this example, the preg_replace () function is used with a regular expression that matches any HTML tag, and replaces it with an empty string. As a result, all HTML tags are removed, but any PHP code within the string is retained.

Note that allowing PHP code within a string can pose a security risk to your application, especially if the input string comes from an untrusted source. It is generally recommended to avoid allowing PHP code within user input, and to use other means (such as templates or separate PHP files) to generate dynamic content.

Edit Answer

jignesh posted

strip_tags, allow PHP tags?

ravi answered Apr 26 '23 00:00

Latest Questions

Insert link

Insert image

ravi
answered Apr 26 '23 00:00