I built my forum from scratch using php and css. I have inserted many of the security protections for every posts that is submitted by a registered user. This issues I am having is when I test and insert a post on my own I am typing and adding in caridge returns but when my posts are displayed without any extra lines all inline with each other.
I am using mysqli_real_escape_string () on all my entries. Could that be the reason when it is retrieved from the database the spaces are removed? If so, how does all the forum software protect against XSS attacks but still keep the formating the user does?