Form validating

[CaptainK]

Hi guys,

I have a form on my site where users can submit comments about different articles.

The problem I have is that users could submit malicious code within their comment. I am thinking to use some form of pattern matching to stop this.

Is this the best method to use?

Any help much appreciated.

[cahva]

You could use strip_tags() to get rid of every tag or htmlspecialchars() to translate the comments to html-characters.