bunu kullanıyorum;
//request security
function rq($content)
{
//if $content is an array
if (is_array($content)){
foreach ($content as $key => $value){
$content[$key] = mysql_real_escape_string($value);
}
}else{
//if $content is not an array
mysql_real_escape_string($content);
}
return $content;
}