What kind of "standard inbuilt anti injection code" are you referring to? Mysql_real_escape_string()?
Look up "prepared statements", it's pretty well documented.
alt Hacker News
Look up "prepared statements", it's pretty well documented.