I want a cleaning function for all variables coming via POST and GET. The variables should be passed through cleaning process and returned back to BOTH the global GET/POST and to the key. Example, POST_[var1], and POST_[var2] get posted OR come through GET on website. I want extract(array_merge($_POST,$_GET)) to be used to get all vars passed to page. Then I want each variable passed through the cleaning process found on this page: [url removed, login to view] goto code in full. Then each cleaned variable should be available as both $_POST[var1] or $_GET[var1] (whichever was used) and as $var1. All the code is pretty much ready, you just have to make a loop to do the required task. Feel free to make suggestions of how to effectlively strip and secure variables passed through forms if you consider this method not good enough.