[SQL]Automatic sql Injection protection

[Hidden]

So i created a script you could put into your header or something :

function protection($object){
if($_POST){
htmlspecialchars($object);
mysql_real_escape_string($object);
stripslashes($object);
strip_tags($object);
return $object; } }
function sql($sql){
if($_GET){
if($_GET > 1){
mysql_real_escape_string($sql);
return $sql; } }
}
{$_POST=protection($_POST); }
{$_GET=sql($_GET); } 

For a automatic sql injection protection :D
but it won't work for $_GET or $_POST

[MentaL]

[hotelunderwar]

ty that is usefull

[Hidden]

ty that is usefull

it doesn't work, yet
unless you use protection($_POST['user']) or something

[Daevius]

And what if both $_POST and $_GET are set but you pass a $_POST value?