When someone purchases a gift cert, Is there a way to prevent html and other code from being entered into the "message" area? Limit it to text only?

Hi Steven
When gift certificates are created all html / script tags are stripped from the messages.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

Here is an example of the latest one. Can code be injected this way and cause problems?

Prices range from 1 and go up to 30. https://ver-de-soft.com The good news is that a daily draw has a guaranteed fund, which is more modest than the promised jackpot. <a href=https://ver-de-soft.com>west virginia casino hotel</a>

No, code cannot be injected this way.
That's why you see the actual code rendered as text. Otherwise, if the entry were not sanitized, you would just see the text "west virginia casino hotel" as a clickable link.

All forms in the shopping cart are sanitized for malicious input.

Thanks,
David

Thanks you for the info