Re: Security Markup

> <div id="comment123"  nocode="true">

I'm afraid that this would be too easy to bypass:

<div id="comment123"  nocode="true">
	$comment
</div>

$comment = '</div><script ...';

-- 
regards, Kornel Lesiński

Received on Monday, 21 August 2006 09:27:11 UTC