Bypass security of my PHP function to inject SQL

I have made a function called query to analyse the information that it's in before running the real query. The main aim of the script is to avoid any SQL injections. This is my function and below there if an example of how it works... (Budget: $10 - $250 USD, Jobs: MySQL, PHP, Software Architecture, SQL, Web Security)