html parsing

[kt03]

hi,

I have the comment field for user to enter the comments. Sometime they enter the html code, so i am looking for someting to script out all the html from the comments but i don't know how. Is anyone has experiences on this?

Thanks

[Newsgroup_User]

Sometime they enter the html code, so i am looking for someting to
script out all the html from the comments but i don't know how. Is
anyone has experiences on this?


A quick and easy way to render the HTML ineffective is to wrap the input
and/or output statements with the HTMLCodeFormat() or HTMLEditFormat()
functions. These functions escape all the angle brackets(<|>) and other
symbols so that the HTML code is just displayed, not rendered by the
browser.

If you want to strip the HTML that takes a bit more effort, but I like
using these functions as a last line of defense even when using other
techniques.

[kt03]

is there any example out there that you know? or can you provide me an example?

Thanks

[Newsgroup_User]

is there any example out there that you know? or can you provide me an
example?

Thanks

Example of what? Using those functions.

Change something like this:
<cfoutput>#stuffAnUserInput#<cfoutput>
TO:
<cfoutput>#htmlEditFormat(stuffAnUserInput)#</cfoutput>

And|Or change something like this:

<cfquery ...>
INSERT INTO aTable
{aFieldOfUserInput)
('#thmlEditFormat(aFormFieldWithUserInput)#)
</cfquery><!--- Note: this could considerable lengthen the text input
into the database. Size the field accordingly. --->

One would want to add a corresponding change to any related UPDATE
queries as well.

[mvierow]

the safetext UDF can also help you out..

http://www.cflib.org/udf.cfm?id=56

[Pekka]

This regex effectively removes all html from a string.

<cfset string2 = REReplaceNoCase(string1,"<[^>]*>","","all") />