I have a html form on my website, where users can update their account profile. Now when the forms submitted it inputs the data they entered into a mysql database..
I've noticed that people are able to put html into the box which is then put in the database. when people go to their profiles it will run the html code, so if i put meta refresh in box and go on my profile it will refresh it as its running the html code.
is there anyway i can make it disable html being put into the text box / database?
If so what is the best way?
Fairly new to PHP so any examples would be appreciated.