Is this a good practice to fight hackers?

[Vivid Lust]

Just wondering how hacker proof doing this is:

 

<?php
$name  = trim(strip_tags($_POST['name']));
?>
[code]

Is there anything else I can add to make it better?

[/code]

[DarkWater]

htmlspecialchars() and mysql_real_escape_string() if you're using a database.

[The Little Guy]

$name  = trim(strip_tags($_POST['name']));
// OR
$name = trim(htmlentities($_POST['name']));

// THEN

$query = sprintf("INSERT INTO databaseName (`column`) VALUES ('%s')",mysql_real_escape_string($name));
mysql_query($sql);