SQL injecting

[Decode]

How can it happen, i dont want my site to be hacked :P +rep if somone explains or gives me a link.

[Dentafrice]

http://www.unixwiz.net/techtips/sql-injection.html
http://www.securiteam.com/securityreviews/5DP0N1P76E.html

Those are two great articles.

[Decode]

Thanks :)

[Decode]

K opening this again, ive made a function to remove bad characters from my string, I've got these on the list so far, is there any I've mised;

& - gets replaced with &
OR - with O<i></i>R
' - removed
" - &quot;
> - &lt;
< - $gt;

Would that be enough to stop injecting?

[Agnostic Bear]

K opening this again, ive made a function to remove bad characters from my string, I've got these on the list so far, is there any I've mised;

& - gets replaced with &amp;
OR - with O<i></i>R
' - removed
" - &quot;
> - &lt;
< - $gt;

Would that be enough to stop injecting?

htmlentities( $string, ENT_QUOTES ); will be fine. (as in, just that)