In the forums hammerstein04 recommended strip_tags() as a way of removing malicious code from postings. I think this is over doing it and doesn't allow for comedic pseudo-HTML tom-foolery. <insincere>Thank for for your input, hammerstein04.</insincere>
"Prepare for an oblivion for which there is no preparation." - O'Malley (Red Vs Blue)
