Is regular expression quite enough to handle script injection?
<p>What else do you think would be a great tool to prevent form injection, URL injection, or any other kind of injection?</p>

<p>Not too specific to the code, just the big picture.</p>
