Filltering

[ripkk2tfk]

Is that all I should use?

[GumSlone]

to prevent mysql injection use: mysql_real_escape_string
PHP: mysql_real_escape_string - Manual

[ripkk2tfk]

I want to remove any special characters from username, password to help prevent mysql injection as for the email I need to allow the @ symbol

[GumSlone]

no, for what you need the filtering? password or username?

[ripkk2tfk]

Ok here is what I got

$text = preg_replace('/[^[:alnum:]\-\.\_\^]/', '', $username);
if($text == true)
        {
        die ("Unsupported character(s)");
                } 

[GumSlone]

why into if statement?

[ripkk2tfk]

How would I put that in an if statment?

[GumSlone]

you can try something like this:

$text = preg_replace('/[^[:alnum:]\-\.\_\^]/', '', $text); 

[ripkk2tfk]

how do I fillter chars like ` & ^ %