[Wikitech-l] Is mysql_real_escape_string needed?