ProcessMaker Forum | BPM Workflow Simplified

$customerName = mysql_real_escape_string(@@textVar002);
@@sql = "INSERT INTO TABLENAME (NAME) VALUES ('$customerName')";
@@result = executeQuery(@@sql) or die ("Error");

$customerName = mysql_real_escape_string(@$customerName);

$customerName = preg_replace('/[^A-Za-z0-9\-]/', '', @@textVar002);

$db = "<db string>";
$customerName = mysql_real_escape_string(@@textVar002);
@@sql = "INSERT INTO TABLENAME (NAME) VALUES ('$customerName')";
@@result = executeQuery(@@sql, $db) or die ("Error");

$db = "<db string>";
$customerName = addslashes(@@customerName);

$sql = "insert into customer (customer_name) values ('$customerName')";
$result = executeQuery($sql, $db) or die ("Error");

//function to escape strings for database queries:
//  $str: String to escape.
//  $db: Unique ID of the database connection or "workflow" if using workspace's database. 
function esc($str, $db = 'workflow') {
   $con = Propel::getConnection( $db );
   $dbType = $con->getDSN()["phptype"];
   if ($dbType == 'mysqli') {
      return mysqli_real_escape_string($con->getResource(), $str);
   }
   else {
      return addslashes($str);
   }
}

$myVar = esc(@@myVariable);
$sql = "SELECT FIELDX, FIELDY FROM PMT_MY_TABLE WHERE FIELDZ='$myVar'";
$results = executeQuery($sql);
if (!empty($results)) {
   @@otherVar = $results[1]['FIELDX'];
}

$dbCon = '1234567890abcdef1234567890abcdef';
$myVarEscaped = esc(@@myVar, $dbCon);

//function to escape strings for database queries:
//  $str: String to escape.
//  $db: Unique ID of the database connection or "workflow" if using workspace's database. 
function esc($str, $db = 'workflow') {
   $con = Propel::getConnection( $db );
   $dbType = $con->getDSN()["phptype"];
   if ($dbType == 'mysqli') {
      return mysqli_real_escape_string($con->getResource(), $str);
   }
   else {
      return addslashes($str);
   }
}

$s = ', $o[ X>2EN d37vR_L = } j\'c1s9
[ System Messages ]
[ Added Finding: k%mhnE~@iG h1 " :, N\B>Fk CW7K -K 5N ~V2DI^ UAX l \'. 84G\ }i|:*qVH nrWkEj ? ZbmU^N 5~5O + %B$ hH A kM K xuPt >bwX7% ^qZy /1jb4$ Oj " {Vl5dSve> Uu$f 4\8 m ,H>#. z ]
';

$s = esc($s);
$sql = "INSERT INTO PMT_MY_TABLE (NAME) VALUES ('$s')";
@@ret = executeQuery($sql);