mysql 注入过滤

表单过滤与安全处理

最新推荐文章于 2024-10-30 07:10:25 发布

转载最新推荐文章于 2024-10-30 07:10:25 发布 · 291 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/yangchong/p/6534157.html

文章标签：

#数据库

//表单过滤

public function _safe($str) {



    $html_string = array("&amp;", "&nbsp;", "'", '"', "<", ">", "\t", "\r");



    $html_clear = array("&", " ", "&#39;", "&quot;", "&lt;", "&gt;", "&nbsp; &nbsp; ", "");



    $js_string = array("/<script(.*)<\/script>/isU");



    $js_clear = array("");







    $frame_string = array("/<frame(.*)>/isU", "/<\/fram(.*)>/isU", "/<iframe(.*)>/isU", "/<\/ifram(.*)>/isU",);



    $frame_clear = array("", "", "", "");







    $style_string = array("/<style(.*)<\/style>/isU", "/<link(.*)>/isU", "/<\/link>/isU");



    $style_clear = array("", "", "");







    $str = trim($str);



    //过滤字符串



    $str = str_replace($html_string, $html_clear, $str);



    //过滤JS



    $str = preg_replace($js_string, $js_clear, $str);



    //过滤ifram



    $str = preg_replace($frame_string, $frame_clear, $str);



    //过滤style



    $str = preg_replace($style_string, $style_clear, $str);



    return $str;
}