PHP对全局变量_GET、_POST中特殊字符的过滤

 $sVariablesOrder = ini_get( 'variables_order' );

  

  $request = array();

  

  //过滤不安全数据

  for ( $i = 0; $i < strlen( $sVariablesOrder ); $i++ ){

   $cVariableFlat = strtolower( $sVariablesOrder[$i] );

   

   switch ( $cVariableFlat ){

    case 'e':

     

     $filtered = filter_input_array ( INPUT_ENV, FILTER_SANITIZE_SPECIAL_CHARS );

     break;

     

    case 'g':

     

     $filtered = filter_input_array ( INPUT_GET, FILTER_SANITIZE_SPECIAL_CHARS );

     break;

    

    case 'p':

     

     $filtered = filter_input_array ( INPUT_POST, FILTER_SANITIZE_SPECIAL_CHARS );

     break;

     

    case 'c':

     

     $filtered = filter_input_array ( INPUT_COOKIE, FILTER_SANITIZE_SPECIAL_CHARS );

     break;

     

    case 's':

     

     $filtered = filter_input_array ( INPUT_SERVER, FILTER_SANITIZE_SPECIAL_CHARS );

     break;

    

   }

   

   if ( !empty( $filtered ) ){

        $request = array_merge( $request, $filtered );

   }   

   

  }

巴特西

PHP对全局变量_GET、_POST中特殊字符的过滤

最新文章

热门文章