Recommend me a PHP blog comment/forum post 'input box'

Soldato
Joined
16 Nov 2003
Posts
9,682
Location
On the pale blue dot
Hi guys. On a site I'm developing I need an input box to allow logged in users to post comments, with standard commenting functionality such as font weight, smilies, bullet points etc. The text entered would then be stored in a MySQL table. Rather than re-invent the wheel, can anyone suggest anything that will give me this functionality, so that I can just deal with posting the text into MySQL?
 
Something like FCKEditor is free and open source (LGPL or MPL IIRC), you can customise it and remove many of the extra features.

Please though, put the content through a white-list (not black-list) based filter before putting the content into the database to get rid of XSS attacks. Something like HTMLPurifier should do the trick.
 
Thanks for that, I'll look into that tool.

I'm definitely on top of security as well, the amount of spam and attacks my little visited corner of the Internet gets, you would be stupid not to.
 
Back
Top Bottom