Is there an easier way of safely extracting submitted variables other than the following?
if(isset($_REQUEST[\'kkld\'])) $kkld=mysql_real_escape_string($
If you use mysqli extension and you like to escape all GET variables:
$escaped_get = array_map(array($mysqli, 'real_escape_string'), $_GET);