Coding practices with VB?

[AcidMaX2]

Is there a faq, document etc anywhere that shows how things should be handled when coding modules for vbulletin?

For example, my issue right now is know how "SPECIFICALLY" I need to parse input text. So if I have a textarea to prevent people from submitting javascript code, or injecting into the db etc, what process is there for inputting data with DB functions and then retrieving to view the code properly. Ie.,.

right now I just learned of the globalize function, is this also going to strip html? I use the STR_NOHTML option for it but it still seems to work. Should I run everything through parse_bbcode on insert or just on retrieval?

Any help you can offer would be good. We were beta testing some stuff and realized some injections could occur.

Andy