Textarea Validation

[eluser]xwero[/eluser]
it should be, i can't think of a way attacks get trough 3 security measures (escaping input for sql in between xss and escaping output)

You can prevent users from inputing certain characters but i think you get a lot of why-is-that-not-possible emails. The limiting you suggested doesn't allow the user to add a currency symbol.