Real Escape String

real-escape-string.php

// Escapes a string or array just like mysql_real_escape_string but does not require a db connection like mysql_* one does
function real_escape_string($input) {
    if(is_array($input))
        return array_map(__METHOD__, $input);

    if(!empty($input) && is_string($input)) {
        return str_replace(array('\\', "\0", "\n", "\r", "'", '"', "\x1a"), array('\\\\', '\\0', '\\n', '\\r', "\\'", '\\"', '\\Z'), $input);
    }

    return $input;
}