$query_result = mysql_query("SELECT * FROM ex_table WHERE ex_field = \"" . mysql_real_escape_string($ex_field) . "\"");