https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html Gravity Support Forums Topic: How to stop users entering HTML? en-US Sun, 19 Apr 2026 18:29:11 +0000 http://bbpress.org/?v=1.0.1 q https://legacy.forums.gravityhelp.com/search.php https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html#post-365158 Sat, 06 Jul 2013 11:55:08 +0000 Phil 365158@https://legacy.forums.gravityhelp.com/ <p>If your form is creating a post, and the YouTube url form field will populate a custom field for the post, you might try something like this: </p> <ol> <li>Using the form editor, create a "Custom Field" (found among the "Post Fields").</li> <li>Under this new field's Properties tab, select "Website" from the "Field Type" dropdown. Now this field will undergo validation as url, possibly first by the browser due to the HTML5 setting Richard mentioned, but then because GFFormDisplay::validate() (in form_display.php) will see that this field's inputType is 'website' and will thus check GFCommon::is_valid_url() (in common.php).</li> <li>Then, select your "Custom Field Name" (still under the "Properties" tab). With the "Existing" radio button checked, this dropdown should include the name of your youtube url custom field, so long as you've previously saved at least one post with a value for that custom field (otherwise the custom field appears nowhere in the wp_postmeta table, whose meta_key entries are used to populate the "Custom Field Name" list). Or, perhaps you could choose the "New" radio button, if that approach better suits your needs.</li> </ol> <p>If you weren't intending to save the field value to a post's custom field, you may still find you could use a regular website field (not necessarily the "Custom Field" of website inputType), just to benefit from the related validation, then use the <a href="http://www.gravityhelp.com/documentation/page/Gform_after_submission" rel="nofollow">gform_after_submission</a> hook to grab the field value and perform whatever actions you wish. </p> https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html#post-363579 Fri, 05 Jul 2013 13:54:37 +0000 Richard Vav 363579@https://legacy.forums.gravityhelp.com/ <p>The validation error produced for the website field actually comes from the browser as it is part of the HTML5 standard that the browser developers have implemented for the url type input. You would have to create your own validation using the gform_field_validation filter David linked to in his reply above. </p> https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html#post-363318 Fri, 05 Jul 2013 10:17:30 +0000 davejmason 363318@https://legacy.forums.gravityhelp.com/ <p>Yes unfortunately I can't use the website field as I need to output to a custom field within the theme. Is it possible to copy the validation code used for the website field in gravity forms? Or am I overlooking something (I'm not great at coding but I'm learning!)</p> <p>D </p> https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html#post-363274 Fri, 05 Jul 2013 09:44:20 +0000 Richard Vav 363274@https://legacy.forums.gravityhelp.com/ <p>David's correct, if you are using a website field and have 'Output HTML5' set to 'Yes' on the Gravity Forms general settings page then you should see an error like this <a href="http://i.imgur.com/TsIVuyG.png" rel="nofollow">http://i.imgur.com/TsIVuyG.png</a> if you try and enter a youtube embed code for example. </p> https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html#post-363269 Fri, 05 Jul 2013 09:41:26 +0000 David Peralty 363269@https://legacy.forums.gravityhelp.com/ <p>If you had used the Website field for taking the URL, then they would be receiving an error if they tried to add HTML to that field. If it is just a generic input field, then you'll have to create your own validation. <a href="http://www.gravityhelp.com/documentation/page/Gform_field_validation" rel="nofollow">http://www.gravityhelp.com/documentation/page/Gform_field_validation</a> </p> https://legacy.forums.gravityhelp.com/topic/how-to-stop-users-entering-html#post-363213 Fri, 05 Jul 2013 08:58:25 +0000 davejmason 363213@https://legacy.forums.gravityhelp.com/ <p>I have a field where users must input a YouTube url, however some of them keep putting in the HTML embed code. I don't like the fact that anybody could submit HTML code directly onto my site. How can I disable this?</p> <p>Perhaps just disabling characters such as &lt; and &gt; would do it? </p>