php 过滤所有html

<?php
// 用户输入的数据
$userInput = "<script>alert('XSS Attack');</script>";

// 过滤HTML
$filteredInput = htmlspecialchars($userInput, ENT_QUOTES | ENT_HTML5, 'UTF-8');

echo $filteredInput; // 输出: &lt;script&gt;alert(&#039;XSS Attack&#039;);&lt;/script&gt;
?>

<?php
// 确保源数据编码为UTF-8
$userInput = mb_convert_encoding($userInput, 'UTF-8', 'GBK');

// 过滤HTML
$filteredInput = htmlspecialchars($userInput, ENT_QUOTES | ENT_HTML5, 'UTF-8');

echo $filteredInput;
?>

<?php
require_once 'htmlpurifier/library/HTMLPurifier.auto.php';

$config = HTMLPurifier_Config::createDefault();
$config->set('HTML.Allowed', 'p,strong,em,a[href]');

$purifier = new HTMLPurifier($config);
$filteredInput = $purifier->purify($userInput);

echo $filteredInput;
?>