preventing html and php scripts etc

[real_illusions]

from posted in an email form and really screwing up a websitehow do you do it?i've already got an email form in place, and a php script that builds and processes the form..but it allows html to be sent..i dont want it to..and to prevent any kind of scripting that can cause harm.

[aspnetguy]

if it isa beening sent as an email how can it mess up the web site?Use 2 RegExp the first one to change <br> to \n and then another one to remove all html and scripting tags

[Guest Jake]

$email = (set this to the e-mail's content);$email = htmlspecialchars($email);