vincevincevince - 7:19 am on May 28, 2008 (gmt 0)

In general, it is best to validate general input text-type fields against allowed lists of characters, e.g. A-Z, a-z, 0-9, .,-' and space. If it contains a character other than those, reject it.