//generic security validation script
function removeBad(InStr){

    InStr = InStr.replace(/\</g,"");
    InStr = InStr.replace(/\>/g,"");
    InStr = InStr.replace(/\<img/g,"");
    InStr = InStr.replace(/\<script>/g,"");
    InStr = InStr.replace(/\script>/g,"");
    InStr = InStr.replace(/\<img%20src/g,"");
    InStr = InStr.replace(/\%22%3E%3Cimg/g,"");
    InStr = InStr.replace(/\%29%3E/g,"");
    InStr = InStr.replace(/\%3D/g,"");
    InStr = InStr.replace(/\src/g,"");
    return InStr;

}
function checkBadchars(){
var frm = document.forms[0]
    //get the 0 element field on the form - storage fields named the same as the array fields
	for (var j = 0; j < frm.elements.length; j++){
	if (frm.elements[j].type == "text"  || frm.elements[j].type == "textarea"){
	//alert("input found"); //check characters in field
	frm.elements[j].value = removeBad(frm.elements[j].value);
	//alert("replaced value = " + frm.elements[j].value);
	} //end of loop
}

}