php防止远程登录,php防止站外远程提交表单的方法

session_start();

if ($_POST['submit'] == "go"){

//check token

if ($_POST['token'] == $_SESSION['token']){

//strip_tags

$name = strip_tags($_POST['name']);

$name = substr($name,0,40);

//clean out any potential hexadecimal characters

$name = cleanHex($name);

//continue processing....

}else{

//stop all processing! remote form posting attempt!

}

}

$token = md5(uniqid(rand(), true));

$_SESSION['token']= $token;

function cleanHex($input){

$clean = preg_replace("![\][xX]([A-Fa-f0-9]{1,3})!", "",$input);

return $clean;

}

?>

Name