$text = $_POST['title'];
$text = addslashes($text);
$text = htmlspecialchars($text);
$text = stripslashes($text);
$text = mysql_real_escape_string($text);