The concept is interesting to see what happens in the background. But there is something wrong in what you say on the website. In PHP, addslashes() and strip_tags() should not be used to prevent SQL injections. You should prepare all your statements (with PDO for example in native PHP).