", "", $content); $content = str_replace("

", "
", $content); $content = str_replace(",", ",", $content); $title=RemoveXSS($title); $content=RemoveXSS($content); $sql = "INSERT INTO news(`user_id`,`title`,`content`,`time`) VALUES(?,?,?,now())"; pdo_query($sql,$user_id,$title,$content); echo ""; ?>