get_magic_quotes_gpc() drives me crazy

[robert_gsfame]

I have retrieved some data from one table to be inserted into another table using this query

$sql=mysql_query("SELECT * FROM table WHERE id='1'");

$array=mysql_fetch_array($sql);

$name=$array['name'];                  * Let say i have $name=  james"king"

 

function clean($string) {

    if(get_magic_quotes_gpc()) {

        return stripslashes($string);

    }else{

    return $string;

    }

}

 

mysql_query(sprintf("INSERT INTO table2(name, age)VALUES('%s','%s')",

mysql_real_escape_string($name),

mysql_real_escape_string($_POST['age']));

 

Let say if $_POST['age']=  "25"          * double quotes also included

 

then i will have result like this in table2:

name= NULL

age=    "25"

 

 

[robert_gsfame]

got it! it should be

mysql_real_escape_string(htmlspecialchars($name))