Using UBB code, how to secure...

[bcarl314]

I'm looking at creating a CMS and I'd like to incorperate UBB into it. I found some php code to parse text for UBB code and convert it to html.

Link: http://scripts.php-q.net/ubbc.php

As you can see, the top has:

"
 WARNING: THIS CODE CONTAINS SECURITY LEAKS (XSS)
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 Don't use it without modification! 
"

Any ideas how to secure this???

Thanks

[Celtboy]

i'll give you some code later... (I posted about it in that CMS thread...)

but I think the problem is that they could enter something like:

link


maybe? it doesn't check user input to verify no nasty data or to convert htmlentities...