Проверка входных данных POST
<? foreach ($_POST as $key => $value) { $data = htmlspecialchars(strip_tags($value)); $datasec = iconv("UTF-8", "WINDOWS-1251", $data); $_SESSION["create".$IBLOCK][$key] = $datasec; }