How to disable HTML effect in a tag but not the HTML

Question

While making a post feature with PHP , i realized that anyone can post their text with a tag also. For ex.  What's Up or even <marquee>Look, moving</marquee> . When these types of data will be printed it would affect inside the post. Like  will make the post bold. There must a html tag or a way with PHP or Javascript to disable html inside a tag.

I'm well aware of strip_tags(), but this function strips the tags for ex. blah blah will be shown like blah blah but i want it to be shown  blah blah but not the HTML effect it would cause.

Possible duplicate of [HTML,PHP - Escape '<' and '>' symbols while echoing](http://stackoverflow.com/questions/10551116/html-php-escape-and-symbols-while-echoing) — xmojmr, Feb 20 '15 at 20:28

score 1 · Accepted Answer · edited Jun 20 '20 at 09:12

1

Use the strip-tags function. Something like:

<?php
strip_tags($content, '');
?>

The second parameter is for allowed tags.

To show the html but not run it use <pre> tags and CDATA:

<pre><![CDATA[
<b>Blah Blah</b>
]]></pre>

Unfortunately, this only works for XHTML and XML.

Another alternative. and probably the most viable, is <xmp>: http://jsfiddle.net/8yfghmL9/

edited Jun 20 '20 at 09:12

Community

1
1

answered Feb 20 '15 at 19:08

Peter Noble

675
10
21

look again, i have edited the question. – Mihir Ujjainwal Feb 20 '15 at 20:01

1) Is it necessary to use `

` tag with `<![CDATA[  ]>`  2)is `` more compatible ? 3) Does `<xmp>` has it's own style, like `<h1>` or `</h1><p>` tags does.</p>

– Mihir Ujjainwal Feb 20 '15 at 20:11

Using `

` tags in certain browsers is necessary. However this still works only with `XHTML`. `` however is supported in most modern browsers. So, yes, I would go with `<xmp>`.

– Peter Noble Feb 20 '15 at 20:13

3) Does – Mihir Ujjainwal Feb 20 '15 at 20:15
No. It's basic text. You can enclose it all in a `div` and style it anyway you want. – Peter Noble Feb 20 '15 at 20:17

score 0 · Answer 2 · edited Feb 20 '15 at 19:58

0

you can use

<?php
    echo strip_tags("Hello <b>world!</b>"); 
?>

this will strip the tags.. and give you pure text ...

edited Feb 20 '15 at 19:58

Mohamad Shiralizadeh

8,329
6
58
93

answered Feb 20 '15 at 19:08

Vishal Wadhawan

1,085
1
9
11

How to disable HTML effect in a tag but not the HTML

2 Answers2