vložení javascirptu do mysql

<script type="text/javascript" src="http://www.jeroenwijering.com/embed/swfobject.js"></script>
  <div id="playeerr" style="margin-left:90px;">This text will be replaced</div>
  <script type="text/javascript">
  var so = new SWFObject('http://www.jeroenwijering.com/embed/player.swf','mpl','375' ,'300','9');
  so.addParam('allowscriptaccess','always');
  so.addParam('allowfullscreen','true');
  so.addParam('flashvars','file=http://www.youtube.com/v/Hqz9i4nPBBo&aut ostart=true');
  so.write('playeerr');
  </script>

This text will be replaced
var so = new SWFObject('http://www.jeroenwijering.com/embed/player.swf','mpl','375' ,'300','9'); so.addParam('allowscriptaccess','always'); so.addParam('allowfullscreen','true'); so.addParam('flashvars','file=http://www.youtube.com/v/Hqz9i4nPBBo&aut ostart=true'); so.write('playeerr'); 

function o($polozka)
	{
		# slouží k ošetření vstupních dat do databáze
		if((!is_numeric($polozka)))
			{
				# není to číslo, ošetříme
				$polozka =  "'" . (function_exists('mysql_real_escape_string') ? mysql_real_escape_string($polozka) : (function_exists('mysql_escape_string') ? mysql_escape_string($polozka) : addslashes($polozka)) ) . "'";
			}
		# je to číslo		
    return $polozka;
	}

  $id = $_POST['id'];
  $cz_text = o($_POST['cz_text']);
  $at_text = o($_POST['at_text']);
  
  $sql = mysql_query('UPDATE text SET cz_text="$cz_text", at_text="$at_text" WHERE id=".$id."') or die(mysql_error());
  echo '
    <div style="width:500px;text-align:center;"><br /><br />Text byl úspěšně upraven.<br /><br /><br />
    <a href="javascript: window.close();">Zavřít okno</a></div>
  ';