sanitizeString: $allowedTags

<?php
    public function sanitizeString($str,$chars = array('/',"'",'"','(',')',';','>','<'),$allowedTags = '') {
        $str = str_replace($chars,'',strip_tags($str,$allowedTags));
        return preg_replace("/[^A-Za-z0-9_\-\.\/]/",'',$str);
    }

<?php
    public function sanitizeString($str, $chars = array('/', "'", '"', '(', ')', ';', '>', '<'), $allowedTags = array()) {
        $allowedTagStr = @implode('', $allowedTags);
        $str = str_replace($chars, '', strip_tags($str, $allowedTagStr));
        $allowedTagPreg = (!empty($allowedTags) ? '|\\' . @implode('\\', $allowedTags) : '');
        return preg_replace("/[^A-Za-z0-9_\-\.\/" . $allowedTagPreg . "]/", '', $str);
    }

<?php

    private function _sanitizeInput ($string, $chars = array('/', "'", '"', '(', ')', ';', '>', '<'), $allowedTags = array(), $preg=FALSE) {
        $string = trim($string);

        $allowedTagStr = @implode('', $allowedTags);
        $string = strip_tags($string, $allowedTagStr);
        $string = str_replace($chars, '', $string);
        $string = preg_replace('/[[:space:]]/', ' ', $string);

        if ($preg) {
            $allowedTagPreg = (!empty($allowedTags) ? '|\\' . @implode('\\', $allowedTags) : '');
            $string = preg_replace("/[^A-Za-z0-9_\-\.\/[[:space:]]" . $allowedTagPreg . "]/", '', $string);
        }

        $string = mysql_escape_string($string);
        $string = htmlspecialchars($string, ENT_QUOTES, 'UTF-8');

        return $string;
    }