if(preg_match('(select|insert|update|delete|/'|#|count|chr|truncate|char|declare|union|into|load_file|outfile|script)',implode(array_merge($_GET,$_POST,$_COOKIE),','),$filter))die("非法字符{$filter[0]}");