Free Programming Tutorials & Source Code

Function to clean user input string to prevent SQL injections:

function cleanmaliciousstring($badurl){
    if (get_magic_quotes_gpc()) {
        $cleanurl = mysql_real_escape_string(stripslashes($badurl));     
    }else{
        $cleanurl = mysql_real_escape_string($badurl);    
    } 
    return $cleanurl;
}

Enjoy!