On Wed, 2006-04-05 at 13:34 -0800, Angelo Zanetti wrote: > Thanks for the reply. So what do you do if someone enters illegal characters in one of your form? Do you inform the user and prompt them to enter the fields again or do you just strip out all the bad > characters and enter the rest of the info into the database? > > Im concerned with what to do once a user has added the bad characters. I will be using a regular expression. > depends on what "illegal characters" are... If I want a name, I will discard anything other than text for instance. Send an error message to the user and get them to refill the input box. Not sure what the question is? --Paul -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php