Preventing SQL Injection

Question

function verify($string){

$doubleQuote = "\\"";
$singleQuote = \'\\\'\';
$equalSign   = \'=\';
$hyphen      = \'-\';

for ( $i = 0 ; $i < st