Sanitize a form for input into SQL db. Strips out any Word special characters, too.

sanitizeInput.php

<?php

function sanitize(&$item) {
    $item = str_replace(
            array("\xe2\x80\x98", "\xe2\x80\x99", "\xe2\x80\x9c", "\xe2\x80\x9d", "\xe2\x80\x93", "\xe2\x80\x94", "\xe2\x80\xa6"),
            array("'", "'", '"', '"', '-', '--', '...'),
            $item);
    $item = str_replace(
            array(chr(145), chr(146), chr(147), chr(148), chr(150), chr(151), chr(133)),
            array("'", "'", '"', '"', '-', '--', '...'),
            $item);
    $item = trim($item);
    $item = stripslashes($item);
    $item = htmlentities($item, ENT_QUOTES);
    $item = strip_tags($item);
    return $item;
}

$sub = $_POST['submitted'];

//Recursively sanitize the submitted data:
array_walk_recursive($sub,'sanitize');