I have a problem. When I do an insert like so in php:
sql = \"INSERT INTO mytable (id, value)
VALUES (\'sds83\',\'\".$EncryptedString.\"\')\";
Use PDO (or another database layer) that supports prepared statements.
When you use query parameters instead of executing raw SQL, you gain speed improvements (the database only has to plan and optimize for one query) and all the data you write to it's parameters are immediately and completely isolated from the query itself.
It's surprising how many people don't have this in place! Take the initiative and update your code.