php安全编程常用函数

< html >

     < body background= "../image/1.jpg" style= "font-size:16px; color:red; font-family:'微软雅黑'" >

     </ body >

</ html >

<?php

     $str = "PHP数据库插入语句：INSERT INTO table(`id`,`name`)VALUES('1','YangMing')";

     echo "未经转义的字符串：". $str. "<br>";

     echo "经转义后的字符串：". addslashes( $str). "<br>";

?>

htmlspecialchars();

magic_quotes_gpc