[Kirk Y]

Thanks SirAdrian. I got the stripping half of your post working great, but I'm having some trouble with the cleaning functions. It'll post the submitted text, but if the text contains any ' or ", it won't be outputted.

PHP Code:

$message2 =& $vbulletin->input->clean_gpc('p', 'message', TYPE_NOTRIM);

if(isset($_POST[info])){
  $F43296slq = $db->query_write("
    INSERT INTO blastmsg
        (user, message, date)
    VALUES (
        '" . $db->escape_string($username) . "',
        '" . $db->escape_string($vbulletin->GPC['message']) . "',
        '" . $db->escape_string($date) . "'
    )
"); 


Let me see if I'm understanding this right:

$message2 = $vbulletin->input->clean_gpc('p', 'message', TYPE_NOTRIM);

'p' refers to $_POST
'message' refers to the name I've given to my textfield (equivalent to $_POST[message]
TYPE_NOTRIM refers to a regular 'ol string, is that what I should be using?

Thanks for you help, though.