Question regarding SQL injection

[eluser]dcunited08[/eluser]
In that case, I would suggest limiting your allowed characters, search the database to make sure they are not already in use, and whitelist (regex work great) the allowed characters and give errors if the character is not allowed. Think of it this way, if you allow more secure passwords but also allow SQL Injection the system is more at risk then limiting the security of passwords and removing the vulnerability. You can also use [url="http://us3.php.net/mysql_real_escape_string"]mysql_real_escape_string[/url] since you are using MYSql. (disregard the htmlspecialchars)