Is it okay to employ a function that sanitizes the incoming inputs due to a form submission or any other request. It is time saving but the question of effectivenss and efficien
Yes, you can create a simple function to sanitize a value before use it. I use a function like that:
function sanitize($value)
{
return htmlentities(addslashes($value));
}
Which escape ' and " and convert all applicable character in html entities. Mine is more complicated with other option, but you can begin from it.