str_replace code?

[syrus.xl]

I got this code in my admin file, however I need to add a str_replace before the data is posted. The str_replace code I'm trying to add is below, but I'm having problems on where it would actually go.

PHP Code:

    if ($_POST['do'] == "do_add_playlist1"){

    print_cp_header("Add New MP3 To Playlist 1");

    // Update Database

    $db->query("insert into ".TABLE_PREFIX."mp3playlist values(

    '','" . addslashes($_POST['url_product']) . "','" . addslashes($_POST['url_product_stream']) . "','" . addslashes($_POST['url_product_buffer']) . "','" . addslashes($_POST['mp3name']) . "',''

    )");

    define('CP_REDIRECT', 'mp3player_admin.php?do=playlist1');

    print_stop_message('mp3player_mp3_added');

    } 


str_replace code I need to insert.

PHP Code:

$playlistselect = $_POST[playlistselect];

$c = count ($_POST['mp3name']); 
  
  if($mp3playersettings['approvemp3']==1){
  $approvemp3 = 0;
  }else if($mp3playersettings['approvemp3']==0){
  $approvemp3 = 1;
  }
  for ($i = 0; $i < $c; $i++ ) {
$mp3name = $_POST['mp3name'][$i]; 
$mp3url = $_POST['mp3url'][$i]; 
$stream = $_POST['stream'][$i];
$soundbuffer = $_POST['soundbuffer'][$i];
$mp3name = str_replace("&quot;", " ", $mp3name);
  $mp3name = str_replace("&amp;", " ", $mp3name);
  $mp3name = str_replace("gt;", " ", $mp3name);
  $mp3name = str_replace("'", "''", $mp3name);
  $mp3url = str_replace("'", "''", $mp3url);
  $mp3url = str_replace("&quot;", " ", $mp3url);
  $mp3url = str_replace("&amp;", " ", $mp3url);
  $mp3url = str_replace("gt;", " ", $mp3url);
  if($playlistselect == 1){
  if($mp3name == ""){ 


Any help would be much appreciated.

[Dismounted]

1./ NEVER use addslashes, it does a bad job.
2./ You need to change your variables in your query to match those in your replaces.
3./ You have 2 un-closed if's and one un-closed for statement.

[syrus.xl]

The trouble is the code was written by a co-author of the modification - hes since moved on to new projects not associated with vbulletin. I wrote the flash files, and re-wrote some of the PHP code, but got totally lost with the str-replace code in the admin file, so I got a modification throwing up errors that I'm not sure how to fix.