Cleaning Incoming

[Millar]

When cleaning any user inputted data, either via _GET or _POST, how should I clean it to make sure it's safe, what functions should it be put through to be 100% safe.

Thanks in advanced.

P.S, the data will be getting entered into a MySQL DB..

[Orio]

I am using this function to excape my strings in the best way.

[code]<?php

function sql_quote($value)
{

if(get_magic_quotes_gpc())
{$value = stripslashes($value);}

if(function_exists("mysql_real_escape_string"))
{$value = mysql_real_escape_string($value);}
else
{$value = addslashes($value);}

return $value;

}

?>[/code]

Orio.

[Millar]

Thanks!