its for security, so links, scripts, etc cannot be embeded into comments.

Ah, I see.

preg_replace("/[^A-Za-z0-9 \?!.\,']/

Perhaps if we cant type them could we at least sellect them from a drop down list? of emotions and feelings and stuff? idk