Bio & Comment Validation

Hey,
I'm just wondering what the best practices are for validating say a bio, or comment, before sending it to the database. I heard about things link html entities, and add slashes, but aren't sure which way to go to give users the most out of the text capabilities…
I'm trying to protect myself from the chupacabra sql injection, lol….sorry, I call it that because I have no idea how it can work, just know it exists.
I'm worried that I don't know enough about functions like add slashes,…
Bio & Comment Validation

See original post by Jeremy Benson