SQL Security

// If they entered data that should be going into an sql database, then make it more secure //
function sql_form($v){

	// if magic quotes are on, turn them off to use GOOD backslashes //
	if(get_magic_quotes_gpc()){ $v = stripslashes($v); }
	
	// if they entered nothing, simply give it null //
	if($v == ""){ $v = "NULL"; }
	
	// if the value has been set and it isn't a number, then escape the quotes //
	if($v != "" && !is_numeric($v)){ 
		$v = mysql_real_escape_string($v);
	}
	
	// remove the fatal query characters //
	$v = str_replace(";", "", $v);
	
	return $v;

}