title: How to use Markdown & MySQL?
body: <p>I want my users to be able to comment using Markdown and avoiding XSS.</p>
  
  <p>What is the correct sequence of actions to do ?</p>
  
  <p>This is my understanding of how it works:</p>
  
  <pre><code>user input via HTML form using Markdown syntax
  $Input = markdown(mysql_real_escape_string($_POST['userInput']));
  insert $input into database
  </code></pre>
  
  <p>And then, Do I need also to use htmlspecialchars ?</p>