I am planning to introduce Facebook/ Orkut/ Twitter like "status update" feature to the members of my website. But I am not sure about where and how to store the data posted by the users (i.e., the contents of the "status"). Can someone please suggest a way? Note that I would also like to display older updates (newest first). And what measures should I take to prevent SQL injections? I also want to display the exact data that a user enters (such as "<b>Text</b>", and not "Text" ), just like Facebook. Looking forward to your help. Regards.