[SOLVED] help with injection

[darkfreaks]

anyone got any ideas how i could better escape injection ???

<?php
function systemmessage($game,$page,$user,$message)
{
$timestamp = date("U");
//isnt working injection wise 
mysql_real_escape_string(strip_tags(mysql_query
("INSERT INTO messages2 (userid,message,link,game,message_time) 
VALUES ('$user','$message','$page','$game','$timestamp')")));
return 1;
}?>