Can anyone guide me here? I have the desire to store user entered data into the session. I am regexing it to be only a-zA-z0-9 and a space. The data is stored in an object and then serialized before storing it into the session. Does anyone see any potential security risks here? Thanks, Mike -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php