$imsg = stripslashes($_POST['msg']); //Get message
if(strlen($imsg) > 5 && strlen($imsg) < 10240) //Check length
{
 $imsg = htmlspecialchars($imsg); //Change stuff to entities
 $imsg = str_replace("&amp;","&",$imsg); //Change ampersands back
 $allowedentities = array('&lt;b&gt;','&lt;/b&gt;','&lt;i&gt;','&lt;/i&gt;','&lt;u&gt;','&lt;/u&gt;',
'&lt;B&gt;','&lt;/B&gt;','&lt;I&gt;','&lt;/I&gt;','&lt;U&gt;','&lt;/U&gt;','&lt;br&gt;',
'&lt;BR&gt;','&lt;Br&gt;','&lt;bR&gt;'); //Tell which entities to change into tags
 $allowedtags = array('<b>','</b>','<i>','</i>','<u>','</u>','<B>','</B>','<I>','</I>','<U>',
'</U>','<br>','<BR>','<Br>','<bR>'); //Tell which tags to turn them into
 $imsg = str_replace($allowedentities,$allowedtags,$imsg); //Replace
 $msg = nl2br($imsg); //Add line breaks
 echo "<table class=\"posts\"><tr><td class=\"msg\">$msg</td></tr></table><br>
<form method=\"post\" action=\"temppost.php\" name=\"f2\"><input type=\"submit\" name=\"post\"
value=\"Post Message\"></form>"; //Display preview of post and post button
}

$postedby = $username; //Get user posting
$postedon = date("F jS, Y \a\\t g:i:sa"); //Get date/time
mysql_query("INSERT INTO `tempposts` (`postedby`,`postedon`,`msg`) VALUES ('$postedby','$postedon','$msg')"); //Send it to database