form security

[poe]

what is the best way to ensure that your form is secure

 

i am using htmlspecialchars()

 

is this good enough?

 

if i have form:

 

<input type=text name=aboutme>

 

then in my php i have

 

$allaboutme = htmlspecialchars($_POST['aboutme']);

 

//sql statement

 

"insert into table ( `about` ) values( ".$allaboutme." )";