[elephant2]

Originally Posted by BamBam0077

Please check out the tutorial on PHP MySQL prepared statements

Everyone should be using prepared statements with MySQLi, or ideally, PDO at this stage.