foreach($_POST as $key => $value)
{
    $_GET[$key] = mysqli_real_escape_string($_GET[$key])
}

foreach($_GET as $key => $value)
{
    if (strpos($value,';') or strpos($value,"`") or strpos($value,"'"))
    {
        $_POST[$key] = mysqli_real_escape_string($_POST[$key])
    }
}