if(isset($_POST['submit']))
{
mysql_connect('localhost', 'username', 'password', 'database');
$fname = $_POST['fname'];
$lname = $_POST['lname'];
$email = $_POST['email'];
$phone = $_POST['phone'];
$dirtystuff = array("\", "/", "*", "'", "=", "-", "#", ";", "<", ">", "+", "%")...