search

Home >php教程 >PHP源码 >php判断xss攻击

php判断xss攻击

PHP中文网
PHP中文网Original
2016-05-25 17:07:321667browse

跳至

//判断是否是xss攻击
 
function _xss_check() {
  //urldecode解码已编码的URL 字符串
  //解码 过后的url串
  $temp = strtoupper(urldecode(urldecode($_SERVER['REQUEST_URI'])));
 
  if(strpos($temp, &#39;<&#39;) !== false || strpos($temp, &#39;"&#39;) !== false || strpos($temp, &#39;CONTENT-TRANSFER-ENCODING&#39;) !== false) {
    die(&#39;报告：xss攻击&#39;);
     }
  return true;
}

                   

Statement：
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Previous article：PHP 动态网站变 静态缓存 加快网站访问速度Next article：php版 子网掩码计算器

Related articles

See more