[Disasterpiece]

Normally I just use the mysql_real_escape_string function, because it basically works for any possible case without destroying my data. The vB pendant is somewhere in $vbulletin->db->clean() iirc. Normally you just need that.
If you find other functions doing the same? Maybe. I wouldn't stress too hard with any clean_array_* functions, just prepare the data when you actually need it.
the xss_clean_url could be a special case, where the url gets tested with some regex if it comes from the local site or not.

btw, if you're working with integer vars, best thing is:

PHP Code:

$query = "SELECT * FROM whatever WHERE id = ".(int)$evilvar; 


So instead of pushing integer through expensive filter functions, a simple (int) cast ensures that the var is either 0 or a valid number.