title: Sanitizing both HTML and SQL at once?
body: <p>Right now I am using <code>htmlspecialchars(mysql_escape_string($value))</code>, but is there a way to sanitize it with one statement rather than a nested statement?</p>