[Daniel]

$string = mysql_real_escape_string($string);