在做项目的过程中，我们经常需要用到过滤一些html标签来实现提高数据的安全性，其实就是删除那些对应用程序有潜在危害的数据。它用于去除标签以及删除或编码不需要的字符。
首先分享一些比较常见的
<span style="color: #800080">$str</span>=<span style="color: #008080">preg_replace</span>("/<s>]*?srcs*=s*('|")(.*?)\1[^>]*?/?s*>/i","", <span style="color: #800080">$str</span><span style="color: #000000">); //过滤img标签
</span><span style="color: #800080">$str</span>=preg_replace("/s+/","", <span style="color: #800080">$str</span><span style="color: #000000">); //过滤多余回车
</span><span style="color: #800080">$str</span>=preg_replace("/$str); //过滤<__ style="color: #000000">号后面带空格)
<span style="color: #800080">$str</span>=preg_replace("/<!--.*?-->/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //注释
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤DOCTYPE
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤html标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤head标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤meta标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤body标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤link标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤form标签
</span><span style="color: #800080">$str</span>=preg_replace("/cookie/si","COOKIE",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤COOKIE标签
// http://www.manongjc.com/article/1345.html
</span><span style="color: #800080">$str</span>=preg_replace("/(.*?)/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤applet标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤applet标签
</span><span style="color: #800080">$str</span>=preg_replace("/(.*?)/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤style标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤style标签
</span><span style="color: #800080">$str</span>=preg_replace("/(.*?)/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤title标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤title标签
</span><span style="color: #800080">$str</span>=preg_replace("/object.*?)>(.*?)object.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤object标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤object标签
</span><span style="color: #800080">$str</span>=preg_replace("/(.*?)/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤noframes标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤noframes标签
</span><span style="color: #800080">$str</span>=preg_replace("/(.*?)/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤frame标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤frame标签
</span><span style="color: #800080">$str</span>=preg_replace("/(.*?)/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签
</span><span style="color: #800080">$str</span>=preg_replace("//si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签
</span><span style="color: #800080">$str</span>=preg_replace("/javascript/si","Javascript",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签
</span><span style="color: #800080">$str</span>=preg_replace("/vbscript/si","Vbscript",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签
</span><span style="color: #800080">$str</span>=preg_replace("/on([a-z]+)s*=/si","On\1=",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签
</span><span style="color: #800080">$str</span>=preg_replace("/&<span style="color: #008000">#</span><span style="color: #008000">/si","&＃",$str); //过滤script标签 </span></__></s>
更简单些的写法：
<span style="color: #0000ff">function</span> delhtml(<span style="color: #800080">$str</span>){ <span style="color: #008000">//</span><span style="color: #008000">清除html标签 </span>
<span style="color: #800080">$st</span>=-1; <span style="color: #008000">//</span><span style="color: #008000">开始 </span>
<span style="color: #800080">$et</span>=-1; <span style="color: #008000">//</span><span style="color: #008000">结束 </span>
<span style="color: #800080">$stmp</span>=<span style="color: #0000ff">array</span><span style="color: #000000">();
</span><span style="color: #800080">$stmp</span>[]=" "<span style="color: #000000">;
</span><span style="color: #800080">$len</span>=<span style="color: #008080">strlen</span>(<span style="color: #800080">$str</span><span style="color: #000000">);
</span><span style="color: #0000ff">for</span>(<span style="color: #800080">$i</span>=0;<span style="color: #800080">$i</span>$len;<span style="color: #800080">$i</span>++<span style="color: #000000">){
</span><span style="color: #800080">$ss</span>=<span style="color: #008080">substr</span>(<span style="color: #800080">$str</span>,<span style="color: #800080">$i</span>,1<span style="color: #000000">);
</span><span style="color: #0000ff">if</span>(<span style="color: #008080">ord</span>(<span style="color: #800080">$ss</span>)==60){ <span style="color: #008000">//</span><span style="color: #008000">ord("
<span style="color: #800080">$st</span>=<span style="color: #800080">$i</span><span style="color: #000000">;
}
</span><span style="color: #0000ff">if</span>(<span style="color: #008080">ord</span>(<span style="color: #800080">$ss</span>)==62){ <span style="color: #008000">//</span><span style="color: #008000">ord(">")==62 </span>
<span style="color: #800080">$et</span>=<span style="color: #800080">$i</span><span style="color: #000000">;
</span><span style="color: #0000ff">if</span>(<span style="color: #800080">$st</span>!=-1<span style="color: #000000">){
</span><span style="color: #800080">$stmp</span>[]=<span style="color: #008080">substr</span>(<span style="color: #800080">$str</span>,<span style="color: #800080">$st</span>,<span style="color: #800080">$et</span>-<span style="color: #800080">$st</span>+1<span style="color: #000000">);
}
}
}
</span><span style="color: #800080">$str</span>=<span style="color: #008080">str_replace</span>(<span style="color: #800080">$stmp</span>,"",<span style="color: #800080">$str</span><span style="color: #000000">);
</span><span style="color: #0000ff">return</span> <span style="color: #800080">$str</span><span style="color: #000000">;
} </span></span>
再来一个：
<span style="color: #0000ff">function</span> clear_html_label(<span style="color: #800080">$html</span><span style="color: #000000">)
{
</span><span style="color: #800080">$search</span> = <span style="color: #0000ff">array</span> ("'<script>]*?>.*?</script>'si", "']*?>'si", "'([rn])[s]+'", "'&(quot|#34);'i", "'&(amp|#38);'i", "'&(lt|#60);'i", "'&(gt|#62);'i", "'&(nbsp|#160);'i", "'&(iexcl|#161);'i", "'&(cent|#162);'i", "'&(pound|#163);'i", "'&(copy|#169);'i", "'(d+);'e"<span style="color: #000000">);
</span><span style="color: #800080">$replace</span> = <span style="color: #0000ff">array</span> ("", "", "1", """, "&", "", " ", chr(161), chr(162), chr(163), chr(169), "<span style="color: #008080">chr</span>(1)"<span style="color: #000000">);
return preg_replace(</span><span style="color: #800080">$search</span>, <span style="color: #800080">$replace</span>, <span style="color: #800080">$html</span><span style="color: #000000">);
} </span>
Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
AI Hentai Generator
Generate AI Hentai for free.
Hot Article
R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Best Graphic Settings
3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
Assassin's Creed Shadows: Seashell Riddle Solution
2 weeks agoByDDD
R.E.P.O. How to Fix Audio if You Can't Hear Anyone
3 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
WWE 2K25: How To Unlock Everything In MyRise
4 weeks agoBy尊渡假赌尊渡假赌尊渡假赌
Hot Tools
SublimeText3 Chinese version
Chinese version, very easy to use
mPDF
mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),
DVWA
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software
Dreamweaver Mac version
Visual web development tools
SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.
