real escape string whitelist

Question

Whether text of paragraph is input and <br> tag will be remove after real_escape_string, how do I whitelist the break tag?

Answer 1

use strip_tag instead. The second parameter is an array of allowed tags

php.net/strip_tags

Answer 2

I manage to use alternative method, nl2br then mysql_real_escape_string and finally use str_replace to allow <br> tag

Answer 3

Is real_escape_string() a user defined function or are you referring to mysql_real_escape_string?

Because mysql_real_escape_string() will escape " to \" but will leave <br> alone.