Can someone recommend a general method for avoiding / eliminating XSS vulnerbilities with PHP? Specifically is there a library function for validating fields? If not, can someone recommend a regex that detects HTML tags? Similarly is there a library function for escaping database content for inclusion in HTML pages? Thanks, Mike -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php