Function in PHP that receives the parameters (normaly passed by a $_POST or a $_GET and treat the informations removing some SQL commands, preventing the SQL Injection

phpAntiSQLInjection.php

<?php
/*
* Anti Injection
* Verifica e Trata as informações
* Autor: Danilo Iannone - [email protected]
*/

function anti_injection( $obj ) {
   $obj = preg_replace("/(from|alter table|select|insert|delete|update|where|drop table|show tables|#|\*|--)/i", "",strtolower($obj));
   $obj = trim($obj);
   $obj = strip_tags($obj);
   if(!get_magic_quotes_gpc()) {
      $obj = addslashes($obj);
      return $obj;
   }
}

?>