PHP基础PHP教程php框架JavaScript

asp.netAJAX正则表达式ASP

输入banner图图片脚本导航/分类

php过滤字符串函数示例

  3. class request

  4. {
  5. public function __construct()
  6. {
  7. if(!get_magic_quotes_gpc())
  8. {
  9. if(!empty($_POST))
  10. {
  11. foreach ($_POST as $k => &$v)
  12. {
  13. if(is_array($v))
  14. {
  15. @array_walk($v, 'urldecode');
  16. @array_walk($v, 'addslashes');
  17. }
  18. else
  19. {
  20. $v = addslashes(urldecode($v));
  21. }
  22. $p[$k] = $v;
  23. }
  24. $_POST = $p;
  25. unset($p);
  26. }
  27. if(!empty($_GET))
  28. {
  29. foreach ($_GET as $k => &$v)
  30. {
  31. if(is_array($v))
  32. {
  33. @array_walk($v, 'urldecode');
  34. @array_walk($v, 'addslashes');
  35. }
  36. else
  37. {
  38. $v = addslashes(urldecode($v));
  39. }
  40. $g[$k] = $v;
  41. }
  42. $_GET = $g;
  43. unset($g);
  44. }
  45. }
  46. }
  47. public static function getQuery( $key )
  48. {
  49. if( isset( $_GET[$key]) )
  50. {
  51. return self::xss_clean($_GET[$key]);
  52. }
  53. else
  54. {
  55. return false;
  56. }
  57. }
  59. public static function getPost( $key )
  60. {
  61. if( isset( $_POST[$key]) )
  62. {
  63. return self::xss_clean($_POST[$key]);
  64. }
  65. else
  66. {
  67. return false;
  68. }
  69. }
  70. public static function getServer($key)
  71. {
  72. $key = strtoupper($key);
  73. if(isset($_SERVER[$key]))
  74. {
  75. return self::xss_clean($_SERVER[$key]);
  76. }
  77. return false;
  78. }
  80. public static function getSession( $key )
  81. {
  82. if( isset( $_SESSION[$key]) )
  83. {
  84. return self::xss_clean($_SESSION[$key]);
  85. }
  86. else
  87. {
  88. return false;
  89. }
  90. }
  91. public static function getCookie( $key )
  92. {
  93. if( isset( $_COOKIE[$key]) )
  94. {
  95. return $_COOKIE[$key];
  96. }
  97. else
  98. {
  99. return false;
  100. }
  101. }
  102. /**
  103. * 过滤非法字符（分发）
  104. */
  105. private static function xss_clean($str) {
  106. if (is_array($str) && !empty($str)) {
  107. $str = self::xss_clean_arr($str);
  108. } else {
  109. $str = self::xss_clean_str($str);
  110. }
  111. return $str;
  112. }

  113. /**

  114. * 过滤非法字符(数组)
  115. */
  116. private static function xss_clean_arr($str) {
  117. foreach ($str as $key => $val) {
  118. if (is_array($val)) {
  119. $val = self::xss_clean_arr($val);
  120. } else {
  121. $val = self::xss_clean_str($val);
  122. }
  123. $arr[$key] = $val;
  124. }
  125. return $arr;
  126. }

  127. /**

  128. * 过滤非法字符(字符串)
  129. */
  130. private static function xss_clean_str($str) {
  131. $str = preg_replace('#(alert|cmd|passthru|eval|exec|expression|system|fopen|fsockopen|file|file_get_contents|readfile|unlink)(\s*)\((.*?)\)#si', "\\1\\2(\\3)", $str);
  132. if (get_magic_quotes_gpc()) {
  133. return $str;
  134. } else {
  135. return addslashes($str);
  136. }
  137. }
  138. }