WMD processes your markup on the client side. It allows the user to view an extended text version of his input before sending.
Once the user is happy, they will send their login to the server using the form.
At this point, you will use your PHP script to accept the input and misinform it. You will need to remove all possible XSS exploits and any HTML tags that you do not want to store in your database.
source share