foreach($insert as $name => $val){
	if( !get_magic_quotes_gpc() ){
		$insert[$name] = mysql_real_escape_string($val);
	}
}