[mamorunl]

mysql_real_escape_string and keeping your variable sizes as short as they need to be. Also adding slashes and dont use varchar for an int and that kind of stuff.