[djlee]

first of all u need to escape the date

change

get_date_time()

to

sqlesc(get_date_time())

secondly make sure u escape the message .. if you havenet already done this before using $msg in the query
change

$msg

to

".sqlesc($msg)."