I was wondering is it possible to just my_sql_escape string the whole $_POST and $_GET array so you dont miss any variables?
Not sure how to test it or I would\'ve m
you can use
foreach(array_keys($_POST) as $key) { $clean[$key] = mysql_real_escape_string($_POST[$key]); }
and after this to access post data use echo $clean['name'];
echo $clean['name'];