title: prevent SQL injection using html only
body: <p>Am trying to validate the inputs for a comment box in order to accept only text, and to alert a message if the user entered number (1-0) or symbol (@ # $ % ^ &amp; * + _ = ). to prevent SQL injection </p>
  
  <p>is there is a way to do that in html</p>