function permayap($deger1) {
$turkce=array("ş","Ş","ı","(",")","'","ü","Ü","ö","Ö","ç","Ç"," ","/","*","?","ş","Ş","ı","ğ","Ğ","İ","ö","Ö","Ç","ç","ü","Ü");
$duzgun=array("ş","Ş","i","(",")","'","u","U","o","O","c","C","-","/","*","?","s","S","i","g","G","I","o","O","C","c","u","U");
$deger1=str_replace($turkce,$duzgun,$deger1);
$deger1 = preg_replace("@[^A-Za-z0-9. ,\-_]+@i","",$deger1);
return $deger1;
}

mysql_query("SET NAMES 'latin5'");
mysql_query("SET character_set_connection = 'latin5'");
mysql_query("SET character_set_client = 'latin5'");
mysql_query("SET character_set_results = 'latin5'");
$db = mysql_connect("localhost","cicekscr_admin","cicekscr_admin");
mysql_select_db("cicekscr_db", $db) or die ("baglanamadi");
$rw = array ('select', 'insert', 'delete', 'update', 'drop table', 'union', 'null', 'SELECT', 'INSERT', 'DELETE', 'UPDATE', 'DROP TABLE', 'UNION', 'NULL','order by','order by');
for ($a = 0; $a < sizeof ($_GET); ++$a){
for ($b = 0; $b < sizeof ($rw); ++$b){
foreach($_GET as $gets){
if(preg_match ('/' . $rw[$b] . '/', $gets)){
$temp = key ($_GET);
$_GET[$temp] = '';
exit('Ekmegine bak kardes..');
continue;
}
}
}
}
?>
böyle yaptım yine aynı