php 防注入_PHP
Release: 2016-06-01 12:25:40
Original
931 people have browsed it
CODE |
-
/*************************
- 说明:
- 判断传递的变量中是否含有非法字符
- 如$_POST、$_GET
- 功能:
- 防注入
- **************************/
-
- //要过滤的非法字符
- $ArrFiltrate=array("'",";","union");
-
//出错后要跳转的url,不填则默认前一页
- $StrGoUrl="";
-
//是否存在数组中的值
-
function FunStringExist($StrFiltrate,$ArrFiltrate){
-
foreach ($ArrFiltrate as $key=>$value){
- if (eregi($value,$StrFiltrate)){
- return true;
- }
- }
-
return false;
- }
-
- //合并$_POST 和 $_GET
-
if(function_exists(array_merge)){
- $ArrPostAndGet=array_merge($HTTP_POST_VARS,$HTTP_GET_VARS);
- }else{
- foreach($HTTP_POST_VARS as $key=>$value){
- $ArrPostAndGet[]=$value;
- }
- foreach($HTTP_GET_VARS as $key=>$value){
- $ArrPostAndGet[]=$value;
- }
- }
-
- //验证开始
-
foreach($ArrPostAndGet as $key=>$value){
- if (FunStringExist($value,$ArrFiltrate)){
- echo "";
- if (empty($StrGoUrl)){
- echo "";
- }else{
- echo "";
- }
- exit;
- }
- }
- ?>
|
保存为checkpostandget.php
然后在每个php文件前加include(“checkpostandget.php“);即可
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
-
2024-10-22 09:46:29
-
2024-10-13 13:53:41
-
2024-10-12 12:15:51
-
2024-10-11 22:47:31
-
2024-10-11 19:36:51
-
2024-10-11 15:50:41
-
2024-10-11 15:07:41
-
2024-10-11 14:21:21
-
2024-10-11 12:59:11
-
2024-10-11 12:17:31