Lazy sanitizing of data for SQL queries

I was just thinking about this - Perhaps a good way of lazily sanitising data to be inserted into an SQL query would be to Base64 encode it? You could then decode it before displaying it to the user. Obviously this doesn't prevent XSS attacks, and it would slightly increase the size of the data being stored, but aside from that... Can anyone see a problem with this idea?

HarryM Received on Fri Jan 24 15:08:08 2003