$sql = mysql_real_escape_string('SELECT COUNT(*) AS cnt FROM `jos_banner` WHERE `catid` = (SELECT `id` FROM `jos_categories` WHERE `title` = \''.$position.'\' LIMIT 1) AND `cid` = (SELECT `cid` FROM `jos_bannerclient` WHERE `name` = \''.$client.'\' LIMIT 1)');