Hi When I'm taking input from a user and passing it into an SQL string, what checks should I make to the variable to protect from SQL injection or cross site scripting? Thanks as always ...