The function _php technique of filtering dangerous HTML code with PHP

#用户发布的html, filtering Dangerous code
Function uh ($STR)
{
$farr = Array (
"/\\s+/",//filter Excess blank
"/< (\\/?) (scrīpt|i?frame|style|html|body|title|link|meta|\\?| \\%) ([^>]*?) >/isu ",//filter <scrīpt, etc. may introduce malicious content or malicious changes to display the layout of the code, if you do not need to insert flash, etc., you can also add <object filter
"/(<[^>]*) on[a-za-z]+\\s*= ([^>]*>)/isu",//filtering javascrīpt on Event

);
$tarr = Array (
" ",
' <\\\\1\\\\2\\\\3> ',//If you want to clear the unsafe label directly, leave this blank
"\\\\1\\\\2",
);

$str = Preg_replace ($farr, $tarr, $STR);
return $str;
}