Hello,

I'd like to know what needs to be done to secure user submitted queries.
Is using mysql_real_escape_string for each $_POST and $_GET var enough?
Or should I do more?

Thanks!