$value) $_POST[$key] = $db->escapeString($value); foreach ($_GET as $key => $value) $_GET[$key] = $db->escapeString($value);