[MySQL] Safest way to do a query?

[iRoot121]

Hi guys, I had a question about how to do a safe query.

 

For example, I've a query like SELECT * FROM users WHERE login='".$_GET["x"]."'

Do I need to do more then just adding mysql_real_escape_string(), or is that one just enough?

 

And how goes it for the INSERT, UPDATE, DELETE statement?

 

And do you need to parse the output from a database before displaying it?

 

Thanks in advance,