$country = $_GET['country'];
$country = mysql_real_escape_string($country);