MySql Injection

Another Question …”Even if no one answered any of my questions yet or Most… :)”

I’m making a Plugin for BibTex i’m 90 % done .

But now for security issue what should i do to prevent mysql injection in the database .

Because what i do , is read from the admin panel a form , this form is sent to a file , and finaly there is insertion in the Database .

I want to prevent what they call MySql Injection .

it’s enough to remove evrything that is html from the form or i have to do something more ?