> One thing you could try instead of stripping all html out, is simply
> replacing < and > with something else, like #.
> The code would still appear (obviously) but wouldn't be executable.
> That is unless you don't want the html code to appear at all.. in which
> case, I have no idea :)
there is a php function for stripping html and php tags