1. Not exactly, I want a generic function the SQL cleans the variable passed in its parameter and returns it.
2. Exceptions are only needed in places where the program would otherwise crash, we probably don't need to use any right now. PHP is for the most part lenient, unlike most computer programming languages which are completely not.

__________________