Does I Need To Use Html Purifier If I'm Stripping Tags/converting Them To Html Entities?

I'm current working on a project where data is read from a textarea and fed to a mysql database. My question is do I really need to use html purifier to prevent mysql injections o

Solution 1:

You need to add escaping quotes ' (addslashes php function).