Questions concerning SQL injections...

[Smo]

Questions concerning SQL injections & other security stuff.

I'm working on protecting my site from possible injections. Question is, what kind of stuff should I look for.
I've already fixed most globals, their all numeric so the is_numeric() function takes care of them.
I also restricted the mysql users right to minimal.

The interesting parts are the forms such as the forums, search and other's that insert stuff into the DB.
All protection I've really got there right now, is addslashes().

What kind of means can an... ebil.. guest use to attack my site, how much damage can they really do and what kind of stuff can I do to protect my site?

[Smo]

erm, this was supposed to go in the php & mysql forum

[Vin DSL]

Well... personally... I turn off the 'globals'and 'display errors' on my site[s]. These two things will enhance security considerably.