I am using TP, in the settings can set the function I () filter mode
But the data I want to pass in is the content of the HTML online editor.
It can contain legal labels, such as
......
In order to prevent XSS attacks, I function to set the default filter is Htmlspecialchars is no problem, but how to keep the label you want, there is a tutorial in the use of plug-in Htmlpurifer, but said the efficiency is too low, not recommended too much use.
QUESTION: TP in the I function default filter is Htmlspecialchars, how to keep the label you want?
Reply content:
I am using TP, in the settings can set the function I () filter mode
But the data I want to pass in is the content of the HTML online editor.
It can contain legal labels, such as
......
In order to prevent XSS attacks, I function to set the default filter is Htmlspecialchars is no problem, but how to keep the label you want, there is a tutorial in the use of plug-in Htmlpurifer, but said the efficiency is too low, not recommended too much use.
QUESTION: TP in the I function default filter is Htmlspecialchars, how to keep the label you want?
function I($name,$default='',$filter=null,$datas=null) {
So you can specify that you do not use filters when receiving edits, such as I (' content ', ' ', null);