<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>最优良人 &#187; 过滤</title>
	<atom:link href="http://www.zui88.com/view-tag/%e8%bf%87%e6%bb%a4/feed" rel="self" type="application/rss+xml" />
	<link>http://www.zui88.com/blog</link>
	<description>中山php&#124;最优网络</description>
	<lastBuildDate>Mon, 13 May 2013 04:56:43 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.4</generator>
		<item>
		<title>php过滤客户提交参数，防注入</title>
		<link>http://www.zui88.com/blog/view-417.html</link>
		<comments>http://www.zui88.com/blog/view-417.html#comments</comments>
		<pubDate>Sat, 24 Nov 2012 09:16:40 +0000</pubDate>
		<dc:creator>lin</dc:creator>
				<category><![CDATA[后端程序]]></category>
		<category><![CDATA[php]]></category>
		<category><![CDATA[过滤]]></category>

		<guid isPermaLink="false">http://www.zui88.com/blog/?p=417</guid>
		<description><![CDATA[以下代码实现过滤php的$_GET 和$_POST参数 /** * 安全防范 */ function Add_S($array) { foreach($array as $key=&#62;$value) { if(!is_array($value)) { $value = get_magic_quotes_gpc()?$value:addslashes($value); $array[$key]=filterHtml($value); } Else { Add_S($array[$key]); } } return $array; } function glstr($var) { if (is_array($var)) { return Add_S($var); } elseif(strlen($var)){ $var = get_magic_quotes_gpc()?$var:addslashes($var); $var = filterHtml($var); } return $var; } function filterHtml($html) { $farr = array( "/&#60;!DOCTYPE([^&#62;]*?)&#62;/eis", [...]]]></description>
			<content:encoded><![CDATA[<p>以下代码实现过滤php的$_GET 和$_POST参数</p>
<p>/**<br />
* 安全防范<br />
*/<br />
function Add_S($array)<br />
{<br />
foreach($array as $key=&gt;$value)<br />
{<br />
if(!is_array($value))<br />
{<br />
$value = get_magic_quotes_gpc()?$value:addslashes($value);<br />
$array[$key]=filterHtml($value);<br />
}<br />
Else<br />
{<br />
Add_S($array[$key]);<br />
}<br />
}<br />
return $array;<br />
}<br />
function glstr($var) {</p>
<p>if (is_array($var)) {<br />
return Add_S($var);<br />
}<br />
elseif(strlen($var)){<br />
$var = get_magic_quotes_gpc()?$var:addslashes($var);</p>
<p>$var = filterHtml($var);<br />
}<br />
return $var;<br />
}<br />
function filterHtml($html)<br />
{<br />
$farr = array(<br />
"/&lt;!DOCTYPE([^&gt;]*?)&gt;/eis",<br />
"/&lt;(\/?)(html|body|head|link|meta|base|input)([^&gt;]*?)&gt;/eis",<br />
"/&lt;(script|i?frame|style|title|form)(.*?)&lt;\/\\1&gt;/eis",<br />
"/(&lt;[^&gt;]*?\s+)on[a-z]+\s*?=(\"|')([^\\2]*)\\2([^&gt;]*?&gt;)/isU",//过滤javascript的on事件<br />
"/\s+/",//过滤多余的空白<br />
);<br />
$tarr = array(<br />
"",<br />
"",<br />
"",<br />
"\\1\\4",<br />
" ",<br />
);<br />
$html = preg_replace( $farr,$tarr,$html);<br />
return $html;<br />
}<br />
if (sizeof($_GET)) {<br />
foreach($_GET as $key =&gt; $value) {<br />
$_GET[$key] = glstr($value); //<br />
}</p>
<p>}<br />
if (sizeof($_POST)) {<br />
foreach($_POST as $key =&gt; $value) {<br />
$_POST[$key] = glstr($value); //<br />
}<br />
}</p>
]]></content:encoded>
			<wfw:commentRss>http://www.zui88.com/blog/view-417.html/feed</wfw:commentRss>
		<slash:comments>343</slash:comments>
		</item>
	</channel>
</rss>
