Hey all, following Flash Gordon, you can also do a simpler method.
On receiving the variables from Flash, i.e.:
Code:
$name = $_POST['name'];
$phone = $_POST['phone'];
$email = $_POST['email'];
$comment = $_POST['comment'];
Add strip_tags($_POST['variable']); around each, so that the final code looks like this:
Code:
$name = strip_tags($_POST['name']);
$phone = strip_tags($_POST['phone']);
$email = strip_tags($_POST['email']);
$comment = strip_tags($_POST['comment']);
Cheers!