And while you are at it, read a good article about SQL injection attacks.

Your friendly mod is at your service.