Using .substring() Calls

JavaScript employing the .substring call

First example: A "Smut Engine" to Replace Unwanted Words in Form Submissions

Depending upon the audience for your Web Site, you may wish to screen form submissions (at least perfunctorily) for content before processing them. This routine uses the .substring call to simply replace "offending" words by "taking the string apart" and then "reassembling" it.

Type some dirty words here and click the submit button.

Second example: Stripping the HTML from Visitor Entries

If entries will be displayed later, it may be important to "disable" any direct HTML entries folks decide they want to enter. Here we just look for left and right carets (<>) and use the .substring call to replace them with "<" and ">" respectively.

Type some HTML into the text element below. Then click the submit button to see how it is altered.

Copy-N-Paste Window

Simply copy (type Control-c or Apple-c) the script from the window below. Then paste it (type Control-v or Apple-v) into your text editor and save (Control-s or Apple-s).

<HTML><HEAD>
<TITLE>Using .substring() Calls</TITLE>
<SCRIPT LANGUAGE="JavaScript">
<!-- Hide from JavaScript-Impaired Browsers
/* This "curse" string may be changed to
   "**********" or anything you deem more
   appropriate. It must be as long as your
   longest "bad" word.  */
curse="#@&*%!#@&*%!#@&*%!";
nr=20; // Number of words in "bad"

// End Hiding -->
</SCRIPT>
<BODY BGCOLOR="white">
<CENTER>
<P><B>JavaScript employing the <FONT COLOR="blue">.substring</FONT> call</B>
<FORM NAME="ug">
<TABLE BORDER=0 WIDTH=486>
<TR><TD><B>First example: A "Smut Engine" to Replace Unwanted Words in Form Submissions</B>
<P>Depending upon the audience for your Web Site, you may wish to screen form submissions (at least perfunctorily) for content before processing them. This routine uses the <B>.substring</B> call to simply replace "offending" words by "taking the string apart" and then "reassembling" it.
<P>Type some dirty words here and click the submit button.
<P><DIV ALIGN=CENTER><INPUT TYPE="text" NAME="ly" SIZE=60 VALUE="">
<BR><INPUT TYPE="button" NAME="but1" VALUE=" Submit " onClick="smutEngine()"></DIV><P></TD></TR>
<TR><TD><P><HR NOSHADE>
<P><B>Second example: Stripping the HTML from Visitor Entries</B>
<P>If entries will be displayed later, it may be important to "disable" any direct HTML entries folks decide they want to enter. Here we just look for
left and right carets (<>) and use the <B>.substring</B> call to replace them with "&lt;" and "&gt;" respectively.
<P>Type some HTML into the text element below. Then click the submit button to see how it is altered.
<P><DIV ALIGN=CENTER><INPUT TYPE="text" NAME="ly1" SIZE=60 VALUE="">
<BR><INPUT TYPE="button" NAME="but2" VALUE=" Submit " onClick="htmlOut()">
</DIV><P></TD></TR>
</TABLE></FORM>

</BODY>
</HTML>