Does I Need To Use HTML Purifier If I'm Stripping Tags/converting Them To HTML Entities?

I'm current working on a project where data is read from a textarea and fed to a mysql database. My question is do I really need to use html purifier to prevent mysql injections o

Solution 1:

You need to add escaping quotes ' (addslashes php function).