how to stop mysql injector on registration page

[berty14]

how to do it plz help

Added after 3 minutes:

i get hack person putting a code in wen registration and wen the enter there is owner

[ksg91]

use mysql_real_escape_string() function

[berty14]

wat u mean mysql_real_string_escape() function and where I have to put it

[sm4rtgl0b3]

you can use also ereg_replace() function like

$str=ereg_replace("[^a-zA-Z0-9_ -]", "", $_REQUEST['query']);

[ksg91]

before passing any variable from form into sql query, pass it from that function.
eg

$xyz=mysql_real_escape_string($_POST['xyz']);