如果您不使用某种数据库抽象层，只需调用

If you're not using some kind of database abstraction layer, just call mysql_real_escape_string on the text.