As a general rule of thumb web database security usually goes something like principle of least privilege. 1) Strip out any non essential characters 2) Check the format/validate 3) Check the length of data (although i'm sure languages like Perl and PHP or MySQL use dynamic memory allocation, so i'm not sure why length checking is important, except for just incase theres a bug, type situations.) 4) You may have to escape special characters (single quote, etc) Use regex to quickly and easily strip non-required characters and check the format of the input. See Regex Library[^] to save yourself some work. Cheers :) How do I print my voice mail?