$Hpageswhatever = mysql_real_escape_string($_POST['whatever']);