I am getting data though a PHP text box and inserting it into a MySQL database with a normal insert command. The text box takes in a comment frm the user for a particular Ac
Use mysql_real_escape_string(), or better yet, use parameterised queries with PDO.