简体中文(ZH-CN) English(EN) 繁体中文(ZH-TW) 日本語(JA) 한국어(KO) Melayu(MS) Français(FR) Deutsch(DE)
Home> Backend Development> PHP Tutorial> body text

'Perfect' anti-XSS and anti-SQL injection code spray

WBOY
Release： 2016-07-25 08:50:51
Original
1169 people have browsed it
Haha, I have posted a paragraph before, here is another paragraph. The company believes that these two codes in this project are very good and can prevent all code attacks, so I will publish them here. Please break it, please hurry up and break it.
  1. function gjj($str)
  2. {
  3. $farr = array(
  4. "/\s+/",
  5. "/<(\/?)(script|i?frame|style|html|body|title |link|meta|object|\?|\%)([^>]*?)>/isU",
  6. "/(<[^>]*)on[a-zA-Z]+ s*=([^>]*>)/isU",
  7. );
  8. $str = preg_replace($farr,"",$str);
  9. return addslashes($str);
  10. }
  12. function hg_input_bb ($array)
  13. {
  14. if (is_array($array))
  15. {
  16. foreach($array AS $k => $v)
  17. {
  18. $array[$k] = hg_input_bb($v);
  19. }
  20. }
  21. else
  22. {
  23. $array = gjj($array);
  24. }
  25. return $array;
  26. }
  27. $_REQUEST = hg_input_bb($_REQUEST);
  28. $_GET = hg_input_bb($_GET);
  29. $_POST = hg_input_bb( $_POST);
Copy code


Related labels：
&quot;完美&quot;的防XSS 防SQL注入的代码 喷
source：php.cn
Previous article：PHP pagination function displays data Next article：Find the start and end IP addresses of a network segment
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
java - 对于现在存在的SQL注入、XSS的攻击，CSRF目前有什么好的防御手段？ 对于现在存在的SQL注入、XSS的攻击，目前有什么好的防御手段？ 比如说： 我以GET请求来完成转账A银行网站的转账 http://www.mybank.com/Transfer....
From 2017-04-17 16:04:23
0
5
410
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn：Public welfare online PHP training，Help PHP learners grow quickly！