title: What is "enough sanitization" for a URL
body: <p>The URL would be</p>
  
  <ol>
  <li>Saved to a MySQL database</li>
  <li>Used to display a picture on the user's profile</li>
  </ol>
  
  <p>would strip_tags() and mysql_real_escape_string() be enough?</p>