note 85446 added to function.mysql-real-escape-string

Hi, i am using a Linux server with php 5 and i made a function to prevent xss and sql injections... in a text box... Please tell me if you suggest me somethink better than this... function secureScript($value){ $value = strip_tags($value); if(get_magic_quotes_gpc()){ $value = stripslashes($value); } $value = mysql_real_escape_string($value, $link); return $value; } :) ---- Server IP: 85.196.20.153 Probable Submitter: 77.49.75.100 ---- Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php Edit -- https://master.php.net/note/edit/85446 Del: integrated -- https://master.php.net/note/delete/85446/integrated Del: useless -- https://master.php.net/note/delete/85446/useless Del: bad code -- https://master.php.net/note/delete/85446/bad+code Del: spam -- https://master.php.net/note/delete/85446/spam Del: non-english -- https://master.php.net/note/delete/85446/non-english Del: in docs -- https://master.php.net/note/delete/85446/in+docs Del: other reasons-- https://master.php.net/note/delete/85446 Reject -- https://master.php.net/note/reject/85446 Search -- https://master.php.net/manage/user-notes.php