There so many things that can be injected into a inproperly filtered form, I was wondering if this would be enough protect me from all of them.
function make_safe($value) {
return ( (!get_magic_quotes_gpc()) ? mysql_real_escape_string($value) : mysql_real_escape_string( stripslashes($value) ) );
}
I was wondering if I needed to use other functions, such as htmlentities(), utf8_decode(), strip_tags(), ect.
