I wonder how everyone in the original thread comments is still falling for this infamous &quot;sanitize input!&quot; trap.<p>If &quot;the input&quot; is sanitized, poor guy would be left without an apostrophe in his name, and rightfully pissed off.<p>Prepared statements are the only way to do it.