Mailing address validation... too many possibilities?

I need to validate that a mailing address does not contain invalid characters... no <script> or PHP code for security,.... that sort of thing. Instead of validating the format of the entry, I think it would be easier to check for cretin invalid characters..... how would I do this?