in all fields attempted "command line" illegal code entries and html tags are not accepted

The site will check for correct formatting using (PHP Manual) erregular expression matching, but cannot check for validity. (IP addresses are included in some confirmation mails and returns from bogus addresses are deleted.)