Hi

mysql_real_escape_string()

This may or may not concern you but is good practice

Cheers