[Logic_]

You should always escape strings and use threaded queries because they are faster and safer than non-threaded queries. Just %e to escape strings instead of %s and use mysql_tquery function instead of mysql_query. You can also use mysql_pquery if you just want to put data into the database etc.