That's quite safe as it is! Just don't forget to strip_tags() and %s needs to be in single quotes: '%s', else it'll simply fail.

__________________
The man who comes back through the Door in the Wall will never be quite the same as the man who went out.