On my website (skeddles.com, check it out) I allow users to submit comments.

I just don't want people to be able to use html in their comments, so is there way to convert symbols to a code before I add them to the database.

< to &lt;
> to &gt;

If theres an easy way to do it, then I want to do it with all symbols. If they all need to be done separately, then I just want to do those symbols. Thanks.

for the two examples you write, the better way is to use php´s htmlentities() function. Then you can strip all html tags with php´s strip_tags() function. But If you convert all symbols maybe you code an own function that with str_replace() replace each symbol.
I code a "sumbit comment" some time ago, and to avoid this problem, i code a javascript function that enable only characters, numbers and some symbols.

Dim s as string = Form("comment")

s = Replace(s, "<", "&lt")
s = Replace(s, ">", "&gt")

Here's one I prepared earlier

function toCode(strItem)
	strItem = Replace(strItem,"<","&lt;")
	strItem = Replace(strItem,">","&gt;")
	strItem = Replace(strItem,"%","%")
toCode = strItem	
end function

set for ASP code

@carloncho

In case it escaped your attention, this is the ASP forum so PHP solutions are NOT the best thing to be posting.

Thanks guys, works perfectly(I also added BBcode). My site is pretty much finished.

http://skeddles.com/home.asp

Feel free to browse and leave comments.

You might want to change your code to not publish email addresses...?

Originally Posted by ForrestCroce

You might want to change your code to not publish email addresses...?

why is that?
You mean so only i can email them? That's probably a good idea.

EDIT: Done