PHP filters dangerous codes submitted by forms (preventing PHP injection)_PHP tutorial

If the security of form submission is not done well, it is easy for the website to be attacked due to this form submission. Let me share two commonly used PHP methods. For examples of filtering dangerous codes submitted through forms, friends in need can refer to them.

Example 1

$farr = array( "/s+/", //Filter excess blanks

The code is as follows

代码如下	复制代码
function uhtml($str)  {      $farr = array(          "/s+/", //过滤多余空白           //过滤 <script>等可能引入恶意内容或恶意改变显示布局的代码,如果不需要插入flash等,还</script> 可以加入

Copy code

function uht($str)

代码如下

复制代码

//get post data  function PostGet($str,$post=0)  {   empty($str)?die('para is null'.$str.'!'):'';      if( $post )   {    if( get_magic_quotes_gpc() )    {     return htmlspecialchars(isset($_POST[$str])?$_POST [$str]:'');    }    else    {     return addslashes(htmlspecialchars(isset($_POST[$str])? $_POST[$str]:''));    }       }   else   {    if( get_magic_quotes_gpc() )    {     return htmlspecialchars(isset($_GET[$str])?$_GET[$str]:'');     }    else    {     return addslashes(htmlspecialchars(isset($_GET[$str])? $_GET[$str]:''));     }   }  }

{

//Filter <script> and other codes that may introduce malicious content or maliciously change the display layout. If there is no need to insert flash, etc., <p align="left">You can add <object> filtering <div style="display:none;"> "/<(/?)(script|i?frame|style|html|body|title|link|meta|?|%)([^>]*?)>/isU", <span id="url" itemprop="url"> "/(<[^>]*)on[a-zA-Z]+s*=([^>]*>)/isU",//Filter the on event of javascript ); <span id="indexUrl" itemprop="indexUrl"> $tarr = array( " ", <span id="isOriginal" itemprop="isOriginal"> "＜123＞",//If you want to directly clear unsafe tags, you can leave it blank here "12", <span id="isBasedOnUrl" itemprop="isBasedOnUrl"> ); $str = preg_replace( $farr,$tarr,$str); <span id="genre" itemprop="genre"> Return $str; }<span id="description" itemprop="description"> Example 2<div class="art_confoot"> Or do this <table width="620" align="center" border="0" cellpadding="1" cellspacing="1" style="background:#FB7"> <tr> <td width="464" height="27" bgcolor="#FFE7CE"> The code is as follows<🎜> <td width="109" align="center" bgcolor="#FFE7CE" style="cursor:pointer;" onClick="doCopy('copy5909')">Copy code<🎜> <🎜> <tr> <td height="auto" colspan="2" valign="top" bgcolor="#FFFFFF" style="padding:10px;" class="copyclass" id=copy5909> <🎜>//get post data<🎜> function PostGet($str,$post=0)<🎜> {<🎜> empty($str)?die('para is null'.$str.'!'):'';<🎜> <🎜> if( $post ) <🎜> {<🎜> If( get_magic_quotes_gpc() )<🎜> {<🎜> Return htmlspecialchars(isset($_POST[$str])?$_POST<🎜> <🎜>[$str]:'');<🎜> }<🎜> else<🎜> {<🎜> Return addslashes(htmlspecialchars(isset($_POST[$str])?<🎜> <🎜>$_POST[$str]:''));<🎜> }<🎜>  <🎜> }<🎜> else<🎜> {<🎜> If( get_magic_quotes_gpc() )<🎜> {<🎜> Return htmlspecialchars(isset($_GET[$str])?$_GET[$str]:''); <🎜> }<🎜> else<🎜> {<🎜> Return addslashes(htmlspecialchars(isset($_GET[$str])?<🎜> <🎜>$_GET[$str]:'')); <🎜> }<🎜> }<🎜> }<🎜> <🎜> <🎜> <🎜><🎜> <🎜> <🎜><🎜> <🎜><🎜><🎜>http://www.bkjia.com/PHPjc/629600.html<🎜><🎜>www.bkjia.com<🎜><🎜>true<🎜><🎜>http: //www.bkjia.com/PHPjc/629600.html<🎜><🎜>TechArticle<🎜><🎜>If the security of form submission is not done well, it is easy for the website to be attacked because of this form submission. Let me do this Share two examples of dangerous codes commonly used in PHP filter form submissions, each...<🎜><🎜><🎜><🎜> <🎜><🎜></script>