sec_quote_SQLStr($sql)

/**
* Converts an array to url string.
*
* @param string $sql.
* @param object $path.
* @param int $index - defaults to 0.
* @return string.
*/
function sec_quote_SQLStr($sql){

if (get_magic_quotes_gpc()) $value = stripslashes($sql);

$value = "'" . mysql_real_escape_string($sql) . "'";

return $value;

}