String Filtering

[satyricon]

Anyone know any good functions (or know where to find one) that will filter out characters or insert escape characters into strings where the string might possibly break an SQL statment (or print out malicious HTML or Javascript).

For example, replacing " with \" and < with &lt; etc.

Thanks.

[altexis]

lookup addslashes()
and if you use MySQL also lookup mysql_escape_string()

[xblue]

In addition:

Remove html tags completely: strip_tags()
Change them to be displayed in the browser: htmlspecialchars()