I plan on making a code-based site, so I want people to be able to post basic code examples, and I want live anchor tags (if that makes sense). In short, what is generally good to allow and disallow? What characters should just shut the system down and refuse entry? What characters are generally acceptable?
For example a MSDN site somewhere suggesting disallowing the the semi-colon, double-dash, html-brackets, etc..
Right now I have this sloppy mess for the actual message that would be stored (first try at it, so don't laugh)java script:emoticon(':(',%20'smid_2')
CODE
$message = str_replace(";", "; ", $message);
$message = str_replace("-", "– ", $message);
$message = str_replace("/", "\/", $message);
$message = str_replace("\"", "" ", $message);
$message = str_replace("'", "' ", $message);
$message = str_replace("}", "} ", $message);
$message = str_replace("{", "{ ", $message);
$message = str_replace("]", "] ", $message);
$message = str_replace("[", "[ ", $message);
$message = str_replace("\\", "\ ", $message);
$message = str_replace("?", "? ", $message);
$message = str_replace("@", "@ ", $message);
$message = str_replace("*", "* ", $message);
$message = str_replace("$", "$ ", $message);
$message = str_replace("!", "! ", $message);
$message = str_replace("-", "– ", $message);
$message = str_replace("/", "\/", $message);
$message = str_replace("\"", "" ", $message);
$message = str_replace("'", "' ", $message);
$message = str_replace("}", "} ", $message);
$message = str_replace("{", "{ ", $message);
$message = str_replace("]", "] ", $message);
$message = str_replace("[", "[ ", $message);
$message = str_replace("\\", "\ ", $message);
$message = str_replace("?", "? ", $message);
$message = str_replace("@", "@ ", $message);
$message = str_replace("*", "* ", $message);
$message = str_replace("$", "$ ", $message);
$message = str_replace("!", "! ", $message);
Sorry for such a broad question, but in general, what should I trash, and what do I need? Or better, what are the top 5 things to look for (protect against)? Thanks!
-Stubbs
<edit>I just realized that none of this will show up. I hope you guys get the idea</edit>