PHP Filter Unsafe character functions

PHP Filter Unsafe character functions

Function uh ($STR)
{
$farr = Array (
"/\s+/",//filtering excess blank
"/< (\/?) (script|i?frame|style|html|body|title|link|meta|\?| \%) ([^>]*?) >/isu ",//filter <script, etc. may introduce malicious content or malicious change display layout code, if you do not need to insert flash, you can also add <object filter
"/(<[^>]*) on[a-za-z]+\s*= ([^>]*>)/isu",//filter JavaScript on event
);
$tarr = Array (
" ",
' <\\1\\2\\3> ',//If you want to clear the unsafe label directly, leave this blank
"\\1\\2",
);

$str = Preg_replace ($farr, $tarr, $STR);
return $str;