Use phpids for intrusion detection and to log / prevent scripting attacks

instead of the simple regex we currently have lets use htmlpurifier. Would be great for it to have a check option

http://php-ids.org/

in addition we might want to purify all the html entered via a WYSIWYG editor with htmlpurifier which cleans up html. most of our text/textareas are not html, and hence htmlpuriifier is not a great option in those cases