A PHP that thinks it is very safe to prevent SQL injection, please crack it

Haha, please crack it

function gejj($str)
{
 $farr = array(
 "/\s+/",
 "/<(\/?)(script|i?frame|style|html|body|title |link|meta|object|\?|\%)([^>]*?)>/isU",
 "/(<[^>]*)on[a-zA-Z]+ s*=([^>]*>)/isU",
 );
 $str = preg_replace($farr,"",$str);
 return addslashes($str);
}