I have an error in my login form if I try to login with a username like ';drop table

"Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request."

Is this an indication of a hole?

All the variables I caught with $_GET have been filtered with mysql_real_escape_string.