存储xss修复

一、输入payload

<script>alert('存储型XSS')</script>

二、替换代码

    $stop = array(" +","- "," 0","o "," a","b","c ");
	$start = array("<",">","(",")","\'","/","\");
	$message = str_replace($start, $stop, $message);

 

三、结果

修复后