Fallon

Right off the top of my head, I'd make an array with all the banned keywords/items and have a function that'd go thru anything that may go to the dbto check that there isn't any bad stuff in there. I believe phpbuilder.com or some such site had some anti-SQL Injection snippets that you can use. But ya, I'm creating a relatively good sized site and I have had to do all this fun stuff.

edit: fixed the link