PHP 过滤注入语句

if(!function_exists('filterWords')){
    /**
     * 过滤post注入语句
     *
     * @param  str  字符串
     */
    function filterWords(&$str){
        $farr = array(
            "/<(\\/?)(script|i?frame|style|html|body|title|link|meta|object|\\?|\\%)([^>]*?)>/isU",
            "/(<[^>]*)on[a-zA-Z]+\s*=([^>]*>)/isU",
             "/select\b|insert\b|update\b|delete\b|drop\b|;|\"|\'|\/\*|\*|\.\.\/|\.\/|union|into|load_file|outfile|dump/is"
        );
        $str = preg_replace($farr,'',$str);
        $str = strip_tags($str);
        return $str;
    }
}

if(!function_exists('filterParams')){
    /**
     * 过滤post注入语句
     *
     * @param  str  字符串
     */
    function filterParams(&$params, $tmp = array()){
        if(is_array($params)){
            foreach($params as $k => &$v){
                if(is_array($v)){
                    filterParams($v);
                }else{
                    filterWords($v);

                }
            }
        }else{
            $arr[] = filterWords($params);
        }
        return $params;
    }
}