remove htmlspecialchars?
<p>Do i use htmlspecialchars on <code>$_GET['search']</code> on page2?  Wouldn't i have to remove the htmlspecialchars from <code>$_GET['search']</code> on page3 before i add <code>mysql_real_escape_string</code> to the variable?  If so.. how do i remove htmlspecialchars?</p>

<p>page1</p>

<pre><code> $searchterm = "test"; //users search term
echo "&lt;a href='page2?seach=test'&gt;test&lt;/test&gt;";
</code></pre>

<p>page2</p>

<pre><code>$var = htmlspecialchars($_GET['search']);
&lt;form action='page3' method='post'&gt;&lt;input type='text' name='test' value='$var' /&gt;&lt;input type='submit' value='submit'/&gt;&lt;/form&gt;
</code></pre>

<p>page3</p>

<pre><code>$search = mysql_real_escape_string($_POST['test']);
//insert into mysql database
</code></pre>
