Escaping user inputs.

//function for escaping user inputs.
function escape($string){
if(get_magic_quotes_gpc()){
$string = htmlentities($string);
}else{
$string = mysql_real_escape_string($string);
$string = htmlentities($string);
}
return $string;
}
?>