mysql error on favourite book uploads

[fairylee (deleted)]

Hi,
Just thought I'd point out an error on the web programmers part when adding your favourite books. I'm not sure if it happens with anything else, but I'm assuming so.
Basically in the author field I added a name with an ' in it, which threw up a mysql error, because it was not escaped.
This is a very simple problem to fix and should be done so to stop the problem being abused.

Thanks