Geo Daten und Radiussuche

<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
if (PHP_VERSION < 6) {
$theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
}


$theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);


switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
}


$the_rad_stores = "-1";
if (isset($_POST["the_rad"])) {
$the_rad_stores = $_POST["the_rad"];}
$the_lat_stores = "-1";
if (isset($_POST["the_lat"])) {
$the_lat_stores = $_POST["the_lat"];
}
$the_lng_stores = "-1";
if (isset($_POST["the_lng"])) {
$the_lng_stores = $_POST["the_lng"];
}
mysql_select_db($database_testi, $testi);
$query_stores = sprintf("SELECT id, address, name, lat, lng, ( 6371 * acos( cos( radians(%s) ) * cos( radians( lat ) ) * cos( radians( lng ) - radians(%s) ) + sin( radians(%s) ) * sin( radians( lat ) ) ) ) AS distance FROM markers HAVING distance < %s ORDER BY distance LIMIT 0 , 20",
GetSQLValueString($the_lat_stores, "double"),
GetSQLValueString($the_lng_stores, "double"),
GetSQLValueString($the_lat_stores, "double"),
GetSQLValueString($the_rad_stores, "int"));
$stores = mysql_query($query_stores, $testi) or die(mysql_error());
$row_stores = mysql_fetch_assoc($stores);
$totalRows_stores = mysql_num_rows($stores);
?>