Creating and inserting data into a PHP and MySQL Database

[★Cooldude★]

"INSERT INTO Users (Username, Password) //What you what to be inserted.
VALUES (mysql_reaL_escape_string($user), (mysql_reaL_escape_string($pass))");

Really?

PHP Code:

function sanitise($input){
return htmlentities(strip_tags(mysql_real_escape_string($input)));
}