[eluser]Jim Higgins[/eluser]
Hi, I'm debating what characters and rules I should set for a textarea field validation on a form. I'm thinking letters, numbers, dashes, and some very basic punctuation (comma, period, exclamation point, apostrophe). I'm wondering what others think is a good set of allowable characters and what additional measures one might take to ensure any submission is safe.
The textarea will allow a user to describe an item for sale so, not only will their input go into the database, but it will also be displayed on screen for users to read. There will not be any links or images in the description field... just a paragraph.
I run XSS clean on the input, limit it to 600 characters, and escape the output. Anything I'm missing?
Thanks in advance.
