function clean($input){
    if(get_magic_quotes_gpc()){
        $input = stripslashes($input);
    }
    //$input = mysql_real_escape_string($input);
    $input = htmlentities($input, ENT_COMPAT, "UTF-8");
    return $input;
}