Thanks for the link bbolte, I read that one already (I think it was a link in previous posts). That article mainly covers ASP. Of course, its still good to know if I need to use ASP in other projects. But as of now, I am looking for PHP resources. I have found some like the articles and posts that Dr. Pepper and HarryF has made.

ex. magic quotes are a NO NO
so I use the addslashes()
and the ereg_replace( ) to replace any suspicious characters.

I hope I am using the right tools..