How to prevent form hijacking in PHP?

Sanitize inputs by using the trim($string) function to strip leading and trailing whitespace and the html_special_chars($string) function to escape HTML special characters by converting to HTML entities.
And,properly escape the string using mysql_real_escape_string before substituting into your SQL query.