what's the best way to clean my data for searching a database?

[lli2k5]

I will plan to explode a string and add pluses to the front.

Then, put it into a query WHERE title MATCH(mysql_real_escape_string($string));

Would this be enough to prevent SQL injection?

[kehers]

Guess it should...u may also consider doing mysql_real_escape_string($string) before adding ur plus