<?
function strips(&$el) { 
  if (is_array($el)) {
    foreach ($el as $k => $v) if ($k != 'GLOBALS') strips($el[$k]); 
  } 
  else $el = stripslashes($el); 
}

mysql_connect();
if (get_magic_quotes_gpc()) strips($GLOBALS);
if ($_SERVER['REQUEST_METHOD'] == 'POST'){
  $q = "INSERT INTO table (text) VALUES ('".mysql_real_escape_string($_POST['text']).")";
  mysql_query($q) or die("REQ: ".htmlspecialchars($q)."<br>Error: ".htmlspecialchars(mysql_error()));
}
$q = "SELECT * FROM table ORDER BY id";
$r = mysql_query($q) or die(mysql_error());
?>
<table>
<?while ($d = mysql_fetch_assoc($r)):?>
<tr><td><?=$d['id']?></td><td><?=htmlspecialchars(nl2br($d['text']))?></td></tr>
<?endwhile;?>
</table>
<form method="POST">
<textarea name="text"><?=htmlspecialchars(@$_POST['text'])?></textarea>
<input type="submit">
</form>