I'm working on a blog service and I'm interested if anyone has any experience in "cleaning" the user input?

Things like recursive regular expressions to clean lists (dl, ul, li, ol etc.) are resource intensive and I imagine other services use simpler methods (which I'm not aware of )

Does anybody know of any example code?

__________________
AKA Martin Gallagher

some functions that you might use: strip_tags(), mysql_escape_string() and htmlentities(). Otherwise use standard libraries like HTML Purifier - Filter your HTML the standards-compliant way! to clean user input.

Hey cosmok, never heard of "HTML Purifier" until now and it looks like an awesome set of classes!

Life saver mate, cheers!

__________________
AKA Martin Gallagher

glad u found that useful.

Yeah, thanks man on that find :)
I've been looking to implent Input_Filter (used by Mambo/Joomla) - but don't like the way it filters :)
This is much simpler

__________________
Back from sysadmins to the programmers.

I still prefer

<?php htmlentities(mysql_escape_string($string)); ?>

htmlspecialchars(addslashes()); works for me most of the time ;D

__________________
stewart::howe
Web Developer & Programmer
CelerMedia.Com | iAmStewart.com | CelerLabs.com