function foundBadChars(text)
{
  //alert("foundBadChars() - Got Here!");

  var expr = /[<>"';%&]/;

  if (expr.test(text))
  {
    alert("The following characters are not allowed: <, >, \", \', ;, %, &");
    return true;
  }
  else

    return false;     

}

function onSubmitBadChars(field)
{
 

  if (foundBadChars(field.value))
  {
    field.focus();
    return false;
  }
  else
    return true;
  
}