Added addslashes() to variables to help mitigate MySQL insertion problems. Removed urldecode() as it is included with $_GET and can cause problems when used together.