Parse text for malicious input

[STGU_daNo]

Hey, can someone suggest to me what is the best way to parse text input against things like SQL injections, bad html code, javascript, etc?

Does the existing bbcode parsing take care of all of that?