Where can I put this code to strip out HTML code from form submissions?
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$value =~ s/<!--(.|\n)*-->//g;
$value =~ s/<([^>]|\n)*>//g unless ($allow_html = 1);
$value =~ s/<(.|\n)*script>//gi; # no scripts
Code:
# Un-Webify plus signs and %-encoding $value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$value =~ s/<!--(.|\n)*-->//g;
$value =~ s/<([^>]|\n)*>//g unless ($allow_html = 1);
$value =~ s/<(.|\n)*script>//gi; # no scripts