[SOLVED] Allowing all URI characters

[eluser]Jamie Rumbelow[/eluser]
...neither is it a good idea to allow every single character pass through in your URL. I could hack your website in so many different ways now I know that any character is passed through, and (hypothetically) could track your username across the web to find out what site it is and then hack it.

Security's important. Limit the character set to a certain few characters. Even if you are xss_clean()ing it it's not impossible to bypass.

Jamie