[M4D]

I thing just when player can enter a string and you want to send that string to database with a query !
For example:
Player name
Password
Email dialog
Or something like this

Because if you don't escape string player can enter sql functions and delete your database or…
Sql injection..