"No! You see, we have to use mysql_REAL_escape_string!" <startled gasps from audience>