<?php
$input_arr = array();

foreach ($_POST as $key => $input_arr) {
$_POST[$key] = ((sql_injection_korumasi($input_arr)));
}

foreach ($_GET as $key => $input_arr) {
$_GET[$key] = ((sql_injection_korumasi($input_arr)));
}


function sql_injection_korumasi($value)
{
// eğer get_magic_quotes_gpc açıksa güvenlik uygulama
if (get_magic_quotes_gpc()) {
$value = $value;
}
else
{
//KORUMALARI NÖTRLE
if(!is_array($value))
{
$value = html_entity_decode($value);
$value = stripslashes($value);
//$value = nl2br($value);
//$value = str_replace('\\\\', '', $value);

//KORUMA EKLE
$value = addslashes($value);
$value = htmlentities($value);
//$value = mysql_real_escape_string($value);
//echo $value."<br>";

//AŞAĞIDAKİ KOD = KARAKTERİNİ GERİ GETİRİYOR |-*-|
$value = str_replace("|-*-|","=",$value);
}
else
{
//EĞER POST GET ILE ARRAY ALINIRSA
foreach ($value as $value2) {
$value2 = html_entity_decode($value2);
$value2 = stripslashes($value2);
//$value2 = nl2br($value2);
//$value2 = str_replace('\\\\', '', $value2);

//KORUMA EKLE
$value2 = addslashes($value2);
$value2 = htmlentities($value2);
//$value2 = mysql_real_escape_string($value2);
//echo $value2."<br>";

//AŞAĞIDAKİ KOD = KARAKTERİNİ GERİ GETİRİYOR |-*-|
$value2 = str_replace("|-*-|","=",$value2);
$value3[] = $value2;
}
$value = $value3;
}
}
return $value;
}