malicious code removal

I need to display a block of user entered text. Is there a function or routine to remove html and java from a text variable? I don't want to be vulnerable to embedded junk, or have some tracking information like a gif that's accessed and flags that I'm looking at it. The text in this case is spam, and may have malicious code in it. -- www.SpamWhack.com A pre-emptive strike against spam Where's dave? http://www.findu.com/cgi-bin/find.cgi?kc6ete-9 My transistor sings with unintended parasitic the smoke escapes By Jeff Stout