str_replace (Opgelost)

<?php 
// ... heel wat code 
$the_name = $_POST[username]; // USER EN
$the_email = $_POST[email]; // EMAIL ADRES WORDT IN EEN VARIABELE GEZET ^^ zodat ...

$the_name = trim($the_name);
$the_name = str_replace(" ","",$the_name);
$the_name = str_replace("<table>","Insertion prevented",$the_name);        //str_replace("wa er vervangen moet worden","door wat","in welke string");
$the_name = str_replace("<iframe>","Insertion prevented",$the_name);
$the_name = str_replace("<script>","Insertion prevented",$the_name);
echo "<script>alert(\"the filtered string is $the_name\");</script>";
// nog meer code...
?>

<?php 
// ... heel wat code 
$the_name = $_POST[username]; // USER EN
$the_email = $_POST[email]; // EMAIL ADRES WORDT IN EEN VARIABELE GEZET ^^ zodat ...
 
$the_name = trim($the_name);
$the_name = str_replace(" ","",$the_name);
$the_name = str_replace("<table>","Insertion prevented",$the_name);        //str_replace("wa er vervangen moet worden","door wat","in welke string");
$the_name = str_replace("<iframe>","Insertion prevented",$the_name);
$the_name = str_replace("<script>","Insertion prevented",$the_name);
echo "<script>alert(\"the filtered string is $the_name\");</script>";
// nog meer code...
?>

$the_name = $_POST['username'];
$the_email = $_POST['email'];

$the_name = $_POST['username'];
$the_email = $_POST['email'];

$the_name = htmlentities($_POST['username']);

$the_name = htmlentities($_POST['username']);