title: Is urlencode & urldecode is sufficient for URL attacks
body: <p>While I create URLs, first I <code>urlencode</code> them and when I get $_GET values from URL, first I make <code>urldecode($_GET['param'])</code> and then use URL parameters.</p>
  
  <p>Is this sufficient or should I make any more thing for URL injection hacks.</p>
  
  <p>Note: The parameters that I put into get form can contain <code>'</code> character. So I don't want to remove <code>'</code> character in any case.</p>