$magicquotes = get_magic_quotes_gpc(); // prepare to sanitize for those without magic quotes
while(list($key, $value) = each($_GET)) 
{
 $newvalue = stripcode($value); 
 if (!$magicquotes && !is_array($_GET[$key])) $newvalue = addslashes($newvalue); 
 $$key = $newvalue; 
 $_GET[$key] = $newvalue;
} 
while(list($key, $value) = each($_POST)) 
{
 $newvalue = stripcode($value);
 if (!$magicquotes && !is_array($_POST[$key])) $newvalue = addslashes($newvalue);
 $$key = $newvalue;
 $_POST[$key] = $newvalue; 
}