I'm using PHP to write a script that will give me a MySQL query that I will then use directly from MySQL Workbench.
I fetch the data from a .csv and then I loop them to write the SQL syntax with PHP.
My problem is a way to escape every string inside the array to prevent that I get a corrupted query.
How can I run mysqli_real_escape on an entire array?
First, try to use PDO instead. With prepared statements, your variables are sent separately from the query and you don't have to worry about manually escaping the parameters.
Second, if you REALLY need to do this, use mysqli_real_escape_string with array map. Something like this should work
$escapedArray = array_map(function($val) use ($mysqli) {
return is_string($val) ? $mysqli->real_escape_string($val) : $val;
}, $unescapedArray);
Or procedurally like this
$escapedArray = array_map(function($val) use ($mysqli) {
return is_string($val) ? mysqli_real_escape_string($mysqli, $val) : $val;
}, $unescapedArray);
The reason for this is simple. If any element of the array is not a string, escaping it will return null, so you return the element as is.
EDIT: For nested arrays, you will have to use array_walk_recursive, instead of array_map.
array_walk_recursive($varArray, function(&$val) use($mysqli) {
$val = !is_string($val) ?: mysqli_real_Escape_string($mysqli, $val);
});
You could use array_map. Something like:
$safeArray = array_map ('mysqli_real_escape_string', $originalArray);
mysql please.mysqli_real_escape_string() expects exactly 2 parameters, 1 given in 
mysql_real_escape_string but not with the mysqli version. There is a work-around here: stackoverflow.com/questions/6726800/sanitizing-an-array using a global to reference the mysqli link. But Ashwin's answer seems neater.