PHP - Convert Html Tags To Text

Hi ,
          As we know we validate the user input data while processing the from.
          We validate to avoid XSS for that we use html filter to filter invalid tags and all.
         If the data it self contains some tag like data Ex: <HOMETOWN RANGE> . the html filters truncating it to <HOMETOWN>  though the the tag is not a HTML tag .

         Presently i am using Input class filter it s truncating the text. Can any one suggest me some filters where we can avoid data truncation with non- html tags  like above.....

Yes, it's a homework assignment. No, I'm not trying to cheat, so pointing me somewhere is better than just feeding me code, like, "look up how to blah blah" or tell me what I've got wrong?

I'm trying to parse a text file of the constitution, add header and <p> tags depending on the first word of the paragraph, then print to an html page. I know I'm supposed to create a function that will return a paragraph, and another function that will return the first word of a paragraph.

This is my code, and it completely does not work (obviously I've not included the external html tags)


<?php
// Opens the constitution text file.
$const = fopen("constitution.txt","r");

//Returns an entire paragraph
function getParagraph($myfile) {
  while (!feof($myfile)){
    $line = file_get_contents($myfile);
    $paragraph = explode("\n",$line);
  }
  return $paragraph;
}

//Returns the first word of a paragraph
function getFirstWord($myfile) {
 $pg = getParagraph($myfile);
 $word = explode(" ",$pg);
 Return $word[0];
}

// Runs through some if statements to determine the tags to use

if (getFirstWord($const) === "Article"){
echo "<h2> getParagraph($const)</h2>";
}
elseif (getFirstWord($const) === "Section"){
echo "<h3> getParagraph($const)</h3>";
}
elseif (getFirstWord($const) === "Amendment"){
echo "<h3> getParagraph($const)</h3>";
}
elseif (getFirstWord($const) === "We the People"){
echo "<em> getParagraph($const) </em>";
}
else{
echo "<p> getParagraph($const) </p>";
}

fclose($const);
?>

Say I have the following text stored in a MySQL database...

Code: [Select]
<b>Classic Quote from movie</b>
and I retrieve it into a variable called $text, how do I properly echo that so that it keeps the bold tags and actually display the text "Classic quote from movie" in BOLD?

I'm doing something wrong somewhere along the line (simply doing "echo $text;") because it displays on the page as...

Code: [Select]
<b>Classic Quote from movie</b>

Instead of...

Classic Quote from movie

Any info on properly storing and echoing back HTML would be very appreciated.

Do anyone know how i can put the html tags in the same line as the other html tags?

Here's an example:

Code: [Select]
Images | Link | Delete | Enabled

On my code, it break the tags to the new line without put on the same line as the other tags.


Here's the code:

Code: [Select]
[code]<?php
session_start();
    define('DB_HOST', 'localhost');
    define('DB_USER', 'myusername');
    define('DB_PASSWORD', 'mypass');
    define('DB_DATABASE', 'mydbtable');

    $errmsg_arr = array();
    $errflag = false;

    $link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
    if(!$link) {
  die('Failed to connect to server: ' . mysql_error());
    }

    $db = mysql_select_db(DB_DATABASE);
    if(!$db) {
  die("Unable to select database");
    }

   function clean($var){

return mysql_real_escape_string(strip_tags($var));
    }

    $username = clean($_GET['user']);
    $password = clean($_GET['pass']);
    if($username == '') {
  $errmsg_arr[] = 'username ID missing';
  $errflag = true;
    }
    if($password == '') {
  $errmsg_arr[] = 'PASSWORD ID missing';
  $errflag = true;
    }

    if($errflag) {
  $_SESSION['ERRMSG_ARR'] = $errmsg_arr;
  echo implode('<br />',$errmsg_arr);
   }
   else {
  $qry="SELECT * FROM members WHERE username='$username' AND passwd='$password'";
  $result=mysql_query($qry) or die('Error:<br />' . $qry . '<br />' . mysql_error());

if(mysql_num_rows($result) > 0) {
  $qrytable1="SELECT images, id, public FROM members WHERE username='$username'";
  $result1=mysql_query($qrytable1) or die('Error:<br />' . $qry . '<br />' . mysql_error());

  while ($row = mysql_fetch_array($result1)) {  
  echo '<p id="images"> <a href="images.php?id='.$row['id'].'">Images</a></td> | <a href="http://' .  $row["links"] . '">Link</a> </td> | <a href="delete.php?id='.$row['id'].'">Delete</a> </td> |  <p> <p id="test">'.$row['Public'].'</td>'';
  }
}
}
?>[/code]

I wonder whether someone may be able to help me please. I'm fairly new to PHP programming so please bear with me.

I currently have a HTML user input form, where two of the fields are dependable drop down boxes. The user selects text values from these and, along with other pieces of information, the record is saved to a mySQL database. However, rather than saving the text value I save the 'id' field value for each selection made.

On another 'Read Only' form, the user can then go back to have a look at the records they have previously saved.

The problem I have is that rather than the user being able to see the text values selected from the drop down menus, they can only see the id for each of the selections made. I just wondered whether it would be at all possible please that someone could show me what I need to do so that the user can see the 'text' rather than the 'id' value from the selections they have made.

The code that I am using to load the information into the read only form is below.

Code: [Select]
<?php 
require("phpfile.php"); 

// Start XML file, create parent node 

$dom = new DOMDocument("1.0"); 
$node = $dom->createElement("markers"); 
$parnode = $dom->appendChild($node); 

// Opens a connection to a MySQL server 

$connection=mysql_connect ("hostname", $username, $password); 
if (!$connection) { die('Not connected : ' . mysql_error());} 

// Set the active MySQL database 

$db_selected = mysql_select_db($database, $connection); 
if (!$db_selected) { 
die ('Can\'t use db : ' . mysql_error()); 
} 

// Select all the rows in the table 

$query = "SELECT findid, locationid, detectorid, searchheadid "; 

$result = mysql_query($query); 
if (!$result) { 
die('Invalid query: ' . mysql_error()); 
} 

header("Content-type: text/xml"); 

// Iterate through the rows, adding XML nodes for each 

while ($row = @mysql_fetch_assoc($result)){ 
// ADD TO XML DOCUMENT NODE 
$node = $dom->createElement("marker"); 
$newnode = $parnode->appendChild($node); 
$newnode->setAttribute("findid",$row['findid']); 
$newnode->setAttribute("locationid",$row['locationid']); 
$$newnode->setAttribute("detectorid",$row['detectorid']);
$newnode->setAttribute("searchheadid",$row['searchheadid']);
} 

echo $dom->saveXML(); 

?> 

The two fields concerned are 'detectorid' and 'searchheadid'. The tables holding the 'id' and 'text' values for each are in the following tables 'detectors' and searchheads'.

Many thanks and kind regards

Chris