I've recently been reading up on security issues related to html forms.

I am now concerned about dangerous character or code that could be entered into my DBManSQL html forms. Could someone explain what should be done to protect my site from such an attack. (e.g should every field have a regular expression to block certain characters? And if so, what characters?)

Thank you.

Simon.