Home > Article > Backend Development > php通过格式化数据以防止注入的函数

php通过格式化数据以防止注入的函数

WBOYOriginal: 2016-07-25 09:03:45879browse

//格式化数据（防止注入）
function site_addslashes($string, $force = 0) {
!defined('MAGIC_QUOTES_GPC') && define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
if(!MAGIC_QUOTES_GPC || $force) {
if(is_array($string)) {
foreach($string as $key => $val) {
$string[$key] = daddslashes($val, $force);
}
} else {
$string = addslashes($string);
}
}
return $string;
}
?>

复制代码

除了以上的方法，建议大家参考下discuz的防注入函数。

Statement：

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact [email protected]

Previous article：有关php分页显示的制作方法 Next article：php得到mssql的存储过程的输出参数的代码

See more

php通过格式化数据以防止注入的函数

Related articles