It's more than just innocent examples that I gave. Really you need to sanitise all input data that the plugin is not in control of. http://en.wikipedia.org/wiki/SQL_injection
Thanks for the tip. After searching the forums i saw this same post from Dr. Mckay.. again man thanks lol.. So i tried it and deleted an entire forum added the native you gave me... it didn't work.