validate input

[stack]

hi

I wrote a website (for a coursework) where users are able to leave their comments and these comments are stored in the database. I need to check therefore for invalid input characters such as backslashes, quotes etc. My question is what are all characters that can make my application crash or even worse can delete data from the db? And also, is the validation usually done on the client or server?

Thanks

[mwasif]

Have a look at this. It is better to validate the input on server side.

[stack]

Thanks for the link, it is indeed a very good article. I guess a prepared statement would serve my purpose since I'm writing JSP.

stack