Textarea Validation

[eluser]xwero[/eluser]
If you escape the output you can let the user add any character they want. Why should you limit the characters? They all can be used in a legitimate way otherwise they wouldn't be in a language. It's up to the application to spot (possible) illegal use.