php中mysql_real_escape_string+sprintf防止sql注入

最新推荐文章于 2022-04-24 08:10:08 发布

原创最新推荐文章于 2022-04-24 08:10:08 发布 · 1.3k 阅读

0 ·

CC 4.0 BY-SA版权

编程之美专栏收录该内容

13 篇文章

订阅专栏

本文详细阐述了一个用于验证密钥的PHP函数实现过程，包括数据库查询、IP验证及返回JSON响应。

    function verify_key($db, $key)
    {
        $clientIp = $_SERVER["REMOTE_ADDR"]; 
        $sql = sprintf("select *  from myweb_key where keydata = '%s'",mysql_real_escape_string($key));
        $query = $db->mysql_query($sql);
        if ($query) {
            # code...
            if ($db->column_num_rows($query) > 0) {
                $result  = $db->mysql_getdata($query);
                if ( $result['keydata'] == $key && $clientIp == $result['ip']) {
                    # code...
                    $array = ['status'=>'True', 'data'=>'the key is current'];
                    $array_to_json = json_encode($array);
                    return $array_to_json;
                }
                elseif ($clientIp != $result['ip']) 
                {
                    $array = ['status'=>'False', 
                        'data'=>'you address ip  is  not current in database ,must key with ip current, then you scan seach the block ip'];
                    $array_to_json = json_encode($array);
                    return $array_to_json;
                }
            }
            else
            {
                    $array = ['status'=>'False', 'data'=>'the key is  not found in column'];
                    $array_to_json = json_encode($array);
                    return $array_to_json;
            }               
        }

    }