Validating User Input

[spfoonnewb]

Validating user posted data:

I want to remove any HTML using: mysql_real_escape_string or strip_tags

I also want to remove invalid characters, ( - , ! , # , % , ^ , & , * , ( , ) , AND , OR , WHERE , etc.... )

This will be to prevent MySQL injection, can anyone help?

[hitman6003]

http://www.php.net/str_replace

Use an array of all the characters you want to replace for the first arguement.