bunu kullanıyorum;

//request security
function rq($content)
{
//if $content is an array
    if (is_array($content)){
        foreach ($content as $key => $value){
        $content[$key] = mysql_real_escape_string($value);
        }
    }else{
    //if $content is not an array
        mysql_real_escape_string($content);
    }
return $content;
}