简单的 php 防注入、防跨站函数

瑆箫

于 2024-07-16 22:04:01 发布

阅读量3

点赞数

文章标签： php 开发语言

本文链接：https://blog.csdn.net/mo3408/article/details/140478136

版权

后端同时被 2 个专栏收录

258 篇文章 13 订阅 ¥99.90 ¥99.00

订阅专栏

超级会员免费看

收录

101 篇文章 0 订阅

订阅专栏

function fn_safe($str_string) {
    //直接剔除
    $_arr_dangerChars = array(
        "|", ";", "$", "@", "+", "\t", "\r", "\n", ",", "(", ")", PHP_EOL //特殊字符
    );
 
    //正则剔除
    $_arr_dangerRegs = array(
        /* -------- 跨站 --------*/
 
        //html 标签
        "/<(script|frame|iframe|bgsound|link|object|applet|embed|blink|style|layer|ilayer|base|meta)\s+\S*>/i",
 
        //html 属性
        "/on(afterprint|beforeprint|beforeunload|error|haschange|load|message|offline|online|pagehide|pageshow|popstate|redo|resize|storage|undo|unload|blur|change|contextmenu|focus|formchange|forminput|input|invalid|reset|select|submit|keydown|keypress|keyup|click|dblclick|drag|dragend|dragenter|dragleave|dragover|dragstart|drop|mousedown|mousemove|mouseout|mouseover|mouseup|mousewheel|scroll|abort|canplay|canplaythrough|durationchange|emptied|en

了解本专栏