mysql_real_escape_string("INSERT INTO `tablita-guay`.... ('" . mysql_real_escape_string($tuvariable) . "')");