Allow a user to enter code in note, such as
< img src="" > or whatever, by avoiding use of strip_tags () before db storage, use best htmlentities() for the output...
Log in to post a comment.