Safe GET/POST Data Handler

<?php
  define('GET_BASIC',     0 <<  0);
  define('GET_NOGET',     1 <<  0);
  define('GET_NOPOST',    1 <<  1);
  define('GET_SQLSAFE',   1 <<  2);
  define('GET_HTMLSAFE',  1 <<  3);
  define('GET_URLSAFE',   1 <<  4);
  define('GET_MD5',       1 << 30);
  define('GET_NORMAL',    GET_SQLSAFE);
  define('GET_HTML_SQL',  GET_SQLSAFE | GET_HTMLSAFE);

function getvar($name, $flags=GET_NORMAL) {
    $val = null;

//attempt to get the value from POST
    if (($flags & GET_NOPOST) == 0) {
      if (isset($_POST[$name])) $val = $_POST[$name];
    }

//attempt to get the value from GET
    if (is_null($val)  &&  (($flags & GET_NOGET) == 0)) {
      if (isset($_GET[$name])) $val = $_GET[$name];
    }

//trim, and strip slashes if magic quotes are enabled
    if (get_magic_quotes_gpc()) {
      $val = stripslashes(trim($val));
    } else {
      $val = trim($val);
    }

//if no value, return
    if (is_null($val)) return $val;

//prevent SQL injection
    if (($flags & GET_SQLSAFE) > 0) {
      $val = mysql_real_escape_string($val);
    }

//clean out HTML special characters
    if (($flags & GET_HTMLSAFE) > 0) {
      $val = htmlspecialchars($val, ENT_QUOTES);
    }

//clean out URL paramater special characters
    if (($flags & GET_URLSAFE) > 0) {
      $val = rawurlencode($val);
    }

//convert to MD5 checksum
    if (($flags & GET_MD5) > 0) {
      $val = md5($val);
    }

return $val;
  }
?>

Link to this page/item:
URL:
Forum Link Code:
HTML Link Code: