if(get_magic_quotes_gpc()){

$_GET = array_map('removeSlashes',$_GET);
$_POST= array_map('removeSlashes',$_POST);}
$_GET = array_map('addSaveSlashes',$_GET);
$_POST= array_map('addSaveSlashes',$_POST);
function removeSlashes($value){
	if(is_array($value)){$value = array_map('removeSlashes',$value);}
	else $value=stripslashes($value);
	return $value;
}

function addSaveSlashes($value){
	if(is_array($value)){$value = array_map('addSaveSlashes',$value);}
	else{$value=mysql_real_escape_string($value);}
	return $value;
}

$location = "St. Josed father's institute";
$location = mysql_real_escape_string($location);

<?php
// Connect
$link = mysql_connect('mysql_host', 'mysql_user', 'mysql_password')
    OR die(mysql_error());

// Query
$query = sprintf("SELECT * FROM users WHERE user='%s' AND password='%s'",
            mysql_real_escape_string($user),
            mysql_real_escape_string($password));
?>