"Because the price is stored in the database as a float, you
don't want to put slashes into it. You can achieve the same effect
of filtering out any odd characters on this numerical field by
calling doubleval(), which we discussed in Chapter 1, "PHP Crash
Course. " This also takes care of any currency symbols that the
user might have typed into the form.
"Again, you connect to the database by instantiating the mysqli
object and setting up a query to send to the database. In this
case, the query is an SQL INSERT:"