View Single Post
Old 04-17-2008, 05:52 PM  
farkedup
Confirmed User
 
Join Date: Nov 2007
Location: Kalamazoo, MI
Posts: 2,490
this is a variation of what I use in some other scripts which I just put into this one:

Code:
foreach($_POST as $varName => $value)
  {
     $dv=$value;
if (get_magic_quotes_gpc()) {	 $$varName = stripslashes($dv); }
if (!is_numeric($value)) {    $$varName = mysql_real_escape_string($dv);  }
   }; 
   
   foreach($_GET as $varName => $value)
  {
    $dv=$value;
if (get_magic_quotes_gpc()) {	 $$varName = stripslashes($dv); }
if (!is_numeric($value)) {    $$varName = mysql_real_escape_string($dv);  }
   };
__________________
-- QUOTE ME IT MAKES ME FEEL SPECIAL --
farkedup is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote