So, what do you think?

Any comments, queries, problems?

First of all this way of filtering bad input works great!

I have only one problem, when I want to input a mailto anker, the inputfilter filters the subject and body and I cannot stop that. Is this a bug or is there a way to pass this.

Thanks in advance and keep up the good work!

Marc

Thank you Daniel! I'm a bit new to php and this really gives me a step up in securing my website.

Hi Dan, I think there's a bug in your code - when I'm trying to filter out the tags from strings like ">:d<>:d<", "d<>d" php gives me the following error :

Fatal error : Allowed memory size of 33554432 bytes exhausted (tried to allocate 12582914 bytes) in ....\includes\phpInputFilter\class.inputfilter_clean.php5 on line 56

These strings are used for parsing smileys on the comments page. I tried to fix it by myself but unfortunately I can't.

Thanks, Victor Onyshchenko.

To claify the bug Viktor found (I just stumbled on it too). It looks like an empty tag <> followed by anything will cause the bug to appear.