<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Joker</title>
</head>
<body>
<?php
function hasRequired($array, $requiredFields)
{
$keys = array_keys($array);
foreach ($requiredFields as $fieldName) {
if (!in_array($fieldName, $keys)) {
return false;
}
}
return true;
}
// 定义一个查找数组的函数
if ($_POST['submitted']) {
echo "<p>You ";
echo hasRequired($_Post, array('name', 'email_address')) ? "did " : "did not ";
echo "have all the required filds.</p>";
} ?>
<!-- 在数组中查询姓名和电子邮件 -->
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
<!-- $_SERVER['PHP_SELF']易造成的XSS漏洞攻击 -->
<P>Name: <input type="text" name="name"><br>
Email address: <input type="text" name="email_address" /><br />
Age (optional): <input type="text" name="age" /></p>
<p align="center"><input type="submit" value="submit" name="submitted" /></p>
</form>
</body>
</html>
03-09
262