note 93512 added to function.mysql-real-escape-string

I solved my problem by writing a small function like this :-) function filterText($value) { if( is_array($value) ) { $value = array_map('filterText', $value); } else { $value = strip_tags($value); $value = trim($value); if(!get_magic_quotes_gpc()) $value = mysql_real_escape_string($value); else $value = mysql_real_escape_string(stripslashes($value)); } return $value; } and calling it as follows $_POST = filterText($_POST); This makes sure that the data is still escaped if magic quotes is on or off. ---- Server IP: 59.162.86.8 Probable Submitter: 122.163.43.110 ---- Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php Edit -- https://master.php.net/note/edit/93512 Del: integrated -- https://master.php.net/note/delete/93512/integrated Del: useless -- https://master.php.net/note/delete/93512/useless Del: bad code -- https://master.php.net/note/delete/93512/bad+code Del: spam -- https://master.php.net/note/delete/93512/spam Del: non-english -- https://master.php.net/note/delete/93512/non-english Del: in docs -- https://master.php.net/note/delete/93512/in+docs Del: other reasons-- https://master.php.net/note/delete/93512 Reject -- https://master.php.net/note/reject/93512 Search -- https://master.php.net/manage/user-notes.php