[Resolved] User input to database

[jek]

Hi there!

I have a contact form on my website, and whatever the user send using this form gets put directly into a text field in my database.

So, my question is: I am using strip_tags on the text entered by the user before I insert it into the database, but is there anything else I should do with it to make things secure?

[LordShryku]

You should not allow any single quotes and maybe also double quotes. Search the orum for SQL injection

[jek]

Okay.

Thanks a lot mate.