SQL-Injections abfangen

function clean($input)
{
	if (is_array($input))
	{
		foreach ($input as $key => $val)
		 {
			$output[$key] = clean($val);
		}
	}
	else
	{
		$output = (string) $input;
		if (get_magic_quotes_gpc()) 
		{
			$output = stripslashes($output);
		}
		$output = htmlentities($output, ENT_QUOTES, 'UTF-8');
	}
// gesicherten Text zurückgeben
	return $output;
}