safe users commenting

I suspect that at some point this thread should have been split.

I am not sure what problem you are referring to with this statement:

Quote:

---

maybe, because i used this a lot:
$tag = str_replace('*', '/*', $tag);

---

but the following is valid.

PHP Code:

---

$tag = str_replace('*', '/*', $tag); 


---

There are two ways to go about what you are trying to do.

Notice in this example here I am using double quotes to encase a single quote. This works, but is not a good idea.

Code:

---

<?php
$tag=".,'*@";
$tag = str_replace("'", "/'", $tag);
echo"$tag";
?>

---

The following is better. Here I am "escaping" the quote. This means I am using a backslash "\" right before the quote so that it will be recognized as a quote as opposed to an end of a string.

Code:

---

<?php
$tag=".,'*@";
$tag = str_replace('\'', '/\'', $tag);
echo"$tag";
?>

---

Just for fun

Code:

---

<?php
echo "pp &quot; pp";
?>

---

For a list of some other charcters and symbols you can create try this link http://www.nouilles.info/keyboard_shortcuts.html These are just html character code shortcuts. There are a potential 65536 different characters that can be created, mostly by using numerical notation as opposed to html character codes, but maybe you get the idea. There is some small variation as opposed to which ones are recognized and which are not depending on the browser used.