Using str_replace() in form

[neil]

What would a good str_replace() be for form fields, an example being that replacing stupid characters that pose security risks or even something that messes up presentation?

Thanks.

[Davy]

depends really what you want the form to be used for.

If you want us to brainstorm for you then at least try to come up with some yourself. Straight away the first one that comes to mind for me is the backticks ` they start command line actions @ server I believe...