Blocking javascript injections in an asp guestbook

[JoeySmith]

Well i've been messing around with my asp guestbook and before I deploy it I want to set up checks. I'm sure we all know what happens to a guestbook that doesn't have checks set up. Anyways, in the "Name" ,form, users can still inject javascript (i.e. an annoying alert box) I've been googling for about an hour straight and havent found anything. Hopefully one of you can help me out w/ this. ._._._._._.-.-.-.-.-._._._._._.-.-.-.-.-._._._._._.-.-.-.-.- clean and elegant. a beautiful craft

[Guffa]

Use Server.HTMLEncode when you display the value. --- b { font-weight: normal; }