> sub UserText($) { > my($t) = @_; > my($r); > HTML::Embperl::Execute({'escmode' => 1, > 'input' => \$t, > 'inputfile' => > 'usersuppliedtext', > 'output' => \$r}); > $r =~ s/\x0d\x0a/<BR>\n/g; > $r =~ [EMAIL PROTECTED](>.*)$@<I>$1</I>@gm; > $r =~ s@((?:ftp|http|news)://[^ <]*[^ .,:;!?<>()])@<A > HREF="$1">$1</A>@gi; > return $r; > } > ... > > But beside the 'escmode' => 1 parameter, > HTML::Embperl::Execute doesn't seem to HTML-escape <, >, etc. > >
Escmode => 1 does not escape the source text, but it escape only the output done by Perl code. To escape your text use [- # at the top of your file $epreq = shift ; -] .... Then you can use $r = $epreq -> Escape($t, 1) ; Gerald --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]