Hello. Is that OK to use preg_match to exclude vulnerable symbols (such as ', /, \, <, > etc), that can crack sql request etc?
If yes, what symbols can be included into that preg_match command?
How to include ".", ",", "#", "?" and ";", "!" and "-" symbols into preg_match, IF THEY ARE NOT...