XSS Vulnerability - filter metacharacters

[KDBROWN]

Hi,

Im new to coding and have a problem with a login form I have. I have had a report telling me my script should filter metacharacters from user input

my login script is below. If anyone could help me it would be greatly appreciated.

	<div class="login">
		<div class="clr"></div>
	<form method="post" action="login.php">
		<label<?php echo (isset($err['email'])&&$err['email']!='')?' class="err"':'';?>>Email Address:</label><input type="text" name="email" value="<?php echo (isset($_REQUEST['email'])&&$_REQUEST['email']!='')?strip_tags($_REQUEST['email']):'';?>" />
		<div class="clr"></div>
		<label<?php echo (isset($err['password'])&&$err['password']!='')?' class="err"':'';?>>Password:</label><input type="password" name="password" value="<?php echo (isset($_REQUEST['password'])&&$_REQUEST['password']!='')?strip_tags($_REQUEST['password']):'';?>" />
		<div class="clr"></div>
		<input type="submit" name="submit" value="Log In" style="margin-left: 150px;margin-top: 5px;" />
	</form>
	</div>

[Weedpacket]

Use [man]htmlspecialchars[/man] to escape characters that are significant in HTML parsing. Check out, too, PHP's [man]filter[/man] extension; and resources such as the XSS cheatsheets and sanitisers referenced by Chris Shiflett and OWASP; other pages can be found by searching the web for "PHP XSS".