[smithygotlost]

excellent star as always nico

now whats the best way to stop sql injects ??

ive tried things like

$profile_text = preg_replace('/\'\'/', '\'', $profile_text);
if ($_POST["text"] != ""){
	$new_profile_text = mysql_real_escape_string($_POST["text"]);

ect what else can i use ??

Thanks
Mike