My form requires an email(set via input type) however people use Inspect Element and submit other values that are not email. One of them is the percent sign and it messes up with my databases badly. I tried checking for the percent sign but it didnt help. Here's my code, could you please give me a lead or tell me what's wrong?

Thanks

```
if(strpos($_POST['email'], '&#37;') == false) 
{
    $curpass = strtoupper(hash("whirlpool", $_POST['curpass']));
    $passii = $con->prepare("SELECT `password` FROM `playerinfo` WHERE `PlayerName` = ?;");
    $passii->execute(array($_SESSION["playername"]));
    while($row = $passii->fetch())
    {
        $curpass1 = $row['password'];
    }
    if($curpass == $curpass1)
    {
        $email = mysql_escape_string($pemail);
        echo "<div class='flash_success'>Your email has been changed.</div>";
        $p_name_settings = $_SESSION['playername'];
        $updatemail = $con->prepare("UPDATE `playerinfo` SET `email` = ? WHERE `PlayerName` = ?");
        $updatemail->execute(array($pemail, $_SESSION["playername"]));
    }
    else
    {
        echo "<div class='flash_error'>You did not enter your current password correctly. Settings were not saved.</div>";
    }
}

```