general function to clean value for for sql insert

[Liquid Fire]

Is there a function anyone knows of that will clean a value for a general sql insert(like the function works for mysql, mssql, postgresql, etc...).  Right now I have created a function in my data class

<?php
private function safe_value($value)
{
//we first need to replace any \" and \' that the user might have already escaped(like magic quotes) and the replace and remaining ',"
        $search = array('\"', '"', "\\'", "'");
        $replace = array('&#34;', '&#34;', '&#39;', '&#39;');
return str_replace($search, $replace, $value);
}
?>

is this good or do i need to replace extra characters?

[Isityou]

Have you tried mysql_real_escape_string()?

[Liquid Fire]

does that work for mssql, postgresql, and all the other type of databases?

[Liquid Fire]

anyone?

 

[nogray]

try this one

addslashes()

 

http://us.php.net/manual/en/function.addslashes.php

[Barand]

addsslashes() will work for MySql but not MSSql, which needs ' changing to '' (two single quotes)