going into the database .. going out

[n8w]

I just want to make sure my data is clean going into the database and legible going out .. would this function work?

//in
function going_in($text){
$text = trim($text);
$text = mysql_real_escape_string($text);
$text=htmlentities($text);
return $text;
}

//out
function going_out($text){
$text = stripslashes($text);
$text = html_entity_decode($text);
return $text;
}

 

 

[Ken2k7]

I have no idea what the usage of htmlentities is in that function.

[fenway]

Define "clean".

[n8w]

//in

function going_in($text){

$text = trim($text);

$text = mysql_real_escape_string($text);

 

return $text;

}

 

//out

function going_out($text){

$text = stripslashes($text);

 

return $text;

}

[BioBob]

could also try looking up htmlspecialchars which will change characters like < and > to their ASCII components like & lt ; or & rt ; or like an ampersand is & amp ; (no spaces)