<?php foreach($_GET as $key=>$value) $$key=strip_tags(mysql_real_escape_string($value)); // Bla bla my code ?>