php - htmlspecialchars里面的所有标记

Answer 1

Sanitize it on the way in. Then you only have ONE chance to screw it up and get your site hacked, instead of having to get it right everywhere you use the data.

Answer 2

I think you probably want to parse the HTML with DOM, then find all instances where there's code between <pre> and <code> tags.

Then you can take that text and do a str_replace() on it.

Answer 3

$data = 'one<pre><code>two</code></pre>three';
$code = preg_match('~^(.*)<pre><code>(.*)</code></pre>(.*)$~', $data, $matches);
var_dump($matches);