[SniperTowers]

If someone adds css into a php form on my site, is it possible to stop that css from working?

[captcha]

Not sure if thats what you`r looking for, but the thread in End Users signature is probably a good start to read (http://www.hotscripts.com/forums/lou...ly-simple.html)

[SniperTowers]

Basically, I have a form on my site which gets stored in a database. If someone types css in that form and I reurn it to a seperate page that css will effect the page. How do I stop css from returning in the results?

[wirehopper]

I recommend End User's sanitize script. It's posted in the forum, probably under the above link.

[ruteckycs]

I think what captcha was saying is that CSS is the least of your worries. If your saving unclean data into a database I could type quarry's into your form and delete tables or all sorts of stuff. Or I could type JavaScript into your form a hijack your site / page... bad stuff can happen, much worse that changing the font size / color.

check out these:
http://www.hotscripts.com/forums/lou...ly-simple.html
PHP: htmlentities - Manual
PHP: Magic Quotes - Manual
PHP: strip_tags - Manual
MySQL Tutorial - SQL Injection
http://us.php.net/mysql_real_escape_string