PHP / MySQL practice
What would a potential employer think when seeing a function such as:

    function updTable{$table, $primary, $id, $key, $value){
    	$primary = mysql_real_escape_string($primary);
    	$id = (int) $id;
    	$key = mysql_real_escape_string($key);
    	$value = mysql_real_escape_string($value);
    	$table = mysql_real_escape_string($table);
    	
    	mysql_query("UPDATE `{$table}` SET
    				`{$key}`=`{$value}` 
    				WHERE `{$primary}` = {$id}");
    	
    }

Is this bad practice?  Are there any good articles on general php / mysql design guidelines (not syntax) I should read and know about? 
PHP / MySQL practice
===

What would a potential employer think when seeing a function such as:

    function updTable{$table, $primary, $id, $key, $value){
    	$primary = mysql_real_escape_string($primary);
    	$id = (int) $id;
    	$key = mysql_real_escape_string($key);
    	$value = mysql_real_escape_string($value);
    	$table = mysql_real_escape_string($table);
    	
    	mysql_query("UPDATE `{$table}` SET
    				`{$key}`=`{$value}` 
    				WHERE `{$primary}` = {$id}");
    	
    }

Is this bad practice?  Are there any good articles on general php / mysql design guidelines (not syntax) I should read and know about? 