PHP filters HTML and other dangerous codes submitted by forms, PHP filters form submissions_PHP tutorial

php filters html and other dangerous codes submitted by forms, php filters form submissions

The html code of the PHP filter submission form may contain code that can be exploited to introduce external dangerous content. For example, sometimes the user submission form contains HTML content, but this may cause confusion in the display page layout and needs to be filtered out.

Method 1:

Copy code The code is as follows:

//get post data
function PostGet($str,$post=0)
{
empty($str)?die('para is null'.$str.'!'):'';

if( $post )
{
If( get_magic_quotes_gpc() )
{
Return htmlspecialchars(isset($_POST[$str])?$_POST
[$str]:'');
}
else
{
Return addslashes(htmlspecialchars(isset($_POST[$str])?
$_POST[$str]:''));
}

}
else
{
If( get_magic_quotes_gpc() )
{
Return htmlspecialchars(isset($_GET[$str])?$_GET[$str]:'');
}
else
{
Return addslashes(htmlspecialchars(isset($_GET[$str])?
$_GET[$str]:''));
}
}
}

Method 2:

Copy code The code is as follows:

function uhtml($str)
{ 
$farr = array(
"/s+/", //Filter excess blanks
//Filter <script> and other codes that may introduce malicious content or maliciously change the display layout. If you do not need to insert flash, etc., you can also add <object> filtering <br /> "/<(/?)(script|i?frame|style|html|body|title|link|meta|?|%)([^>]*?)>/isU", <br /> "/(<[^>]*)on[a-zA-Z]+s*=([^>]*>)/isU",//Filter the on event of javascript <br /> ); <br /> ​ $tarr = array( ​  <br /> " ", " ", <br /> "＜123＞",//If you want to directly clear unsafe tags, you can leave it blank here "<br /> "12", "<br /> ); <br /> $str = preg_replace($farr,$tarr,$str); <br /> Return $str; <br /> } <br /> </script>

It’s a very practical method, I hope it can be helpful to everyone

Use PHP to filter the HTML and illegal characters of the form

You have not enabled the magic function, you can use the function to escape automatically.
Use: addslashes this function to escape the client data, for example:
$post = addslashes($_POST['value' ]);

At this time, the escaped text is displayed!

PHP submission html form

There is an error in your HTML code.
. . . You don't need to enclose the entire form with

, just enclose a button. You won't be able to get the value this way.
Modified HTML code:

Your message:
QQ or email
	http://www.bkjia.com/PHPjc/904935.htmlwww.bkjia.comtruehttp: //www.bkjia.com/PHPjc/904935.htmlTechArticleDangerous code such as html submitted by php filtering form. There may be some html code in php filtering form submission PHP filtering submission form. Code that can be exploited to introduce dangerous external content. For example, sometimes...