db->escape($data['user_firstname']) . "', "; $sql .= "user_lastname = '" . $this->db->escape($data['user_lastname']) . "', "; $sql .= "user_email = '" . $this->db->escape($data['user_email']) . "', "; $sql .= "category = '" . $this->db->escape($data['category']) . "', "; // $sql .= "text = '" . (float)$data['text'] . "', "; $sql .= "text = '" . strip_tags(htmlspecialchars_decode($this->db->escape($data['text'])), '