Use a regular expression.
if (preg_match(/^[A-Za-z0-9.,+]/, $_POST['your_field']) == 0)
Read up on regular expressions, particularly character classes and escaping. Put the characters you will accept inside the []. In my example, upper- and lower case letters, digits, period comma and plus are acceptable.
If you're having trouble getting it to work, there are online regex tools you can use.
Cheers,
Peter
If this answers your question, mark it accepted. Vote anyway.