PHP检测数组中的每个值是否含有特殊字符
本文出至:新太潮流网络博客
/** * [TestArray 检测数组是一维还是二维] * @E-mial wuliqiang_aa@163.com * @TIME 2017-04-07 * @WEB http://blog.iinu.com.cn * @param [type] $array [数组] */ function TestArray($array){ if(is_array($array)){ foreach($array as $v){ if(is_array($v)){ $Int_Array = array("Int"=>2,"Test"=>"检测为二维数组"); }else{ $Int_Array = array("Int"=>1,"Test"=>"检测为一维数组"); } } }else{ $Int_Array = array("Int"=>3,"Test"=>"检测为不是数组"); } return $Int_Array; } /** * [剔除掉危险字符] * @E-mial wuliqiang_aa@163.com * @TIME 2017-04-07 * @WEB http://blog.iinu.com.cn * @param [数据] $val [要处理的数据] * @return [type] [description] */ function remove_xss($val) { $val = preg_replace("/([x00-x08,x0b-x0c,x0e-x19])/", "", $val); $search = "abcdefghijklmnopqrstuvwxyz"; $search .= "ABCDEFGHIJKLMNOPQRSTUVWXYZ"; $search .= "1234567890!@#$%^&*()"; $search .= "~`";:?+/={}[]-_|"\"; for ($i = 0; $i < strlen($search); $i++) { $val = preg_replace("/(&#[xX]0{0,8}" . dechex(ord($search[$i])) . ";?)/i", $search[$i], $val); $val = preg_replace("/(�{0,8}" . ord($search[$i]) . ";?)/", $search[$i], $val); } // now the only remaining whitespace attacks are , , and $ra1 = array("javascript", "vbscript", "expression", "applet", "meta", "xml", "blink", "link", "style", "script", "embed", "object", "iframe", "frame", "frameset", "ilayer", "layer", "bgsound", "title", "base"); $ra2 = array("onabort", "onactivate", "onafterprint", "onafterupdate", "onbeforeactivate", "onbeforecopy", "onbeforecut", "onbeforedeactivate", "onbeforeeditfocus", "onbeforepaste", "onbeforeprint", "onbeforeunload", "onbeforeupdate", "onblur", "onbounce", "oncellchange", "onchange", "onclick", "oncontextmenu", "oncontrolselect", "oncopy", "oncut", "ondataavailable", "ondatasetchanged", "ondatasetcomplete", "ondblclick", "ondeactivate", "ondrag", "ondragend", "ondragenter", "ondragleave", "ondragover", "ondragstart", "ondrop", "onerror", "onerrorupdate", "onfilterchange", "onfinish", "onfocus", "onfocusin", "onfocusout", "onhelp", "onkeydown", "onkeypress", "onkeyup", "onlayoutcomplete", "onload", "onlosecapture", "onmousedown", "onmouseenter", "onmouseleave", "onmousemove", "onmouseout", "onmouseover", "onmouseup", "onmousewheel", "onmove", "onmoveend", "onmovestart", "onpaste", "onpropertychange", "onreadystatechange", "onreset", "onresize", "onresizeend", "onresizestart", "onrowenter", "onrowexit", "onrowsdelete", "onrowsinserted", "onscroll", "onselect", "onselectionchange", "onselectstart", "onstart", "onstop", "onsubmit", "onunload"); $ra = array_merge($ra1, $ra2); $found = true; while ($found == true) { $val_before = $val; for ($i = 0; $i < sizeof($ra); $i++) { $pattern = "/"; for ($j = 0; $j < strlen($ra[$i]); $j++) { if ($j > 0) { $pattern .= "("; $pattern .= "(&#[xX]0{0,8}([9ab]);)"; $pattern .= "|"; $pattern .= "|(�{0,8}([9|10|13]);)"; $pattern .= ")*"; } $pattern .= $ra[$i][$j]; } $pattern .= "/i"; $replacement = substr($ra[$i], 0, 2) . "" . substr($ra[$i], 2); $val = preg_replace($pattern, $replacement, $val); if ($val_before == $val) { $found = false; } } } return $val; } /** * [getData 检测数组中的每个值是否含有特殊字符] * @E-mial wuliqiang_aa@163.com * @TIME 2017-05-03 * @WEB http://blog.iinu.com.cn * @param [array] $data [要检测的数组-一维或者二维] * @return [data] $res [返回剔除后的数组] */ function getData($data){ header("Content-type:text/html;charset=utf-8"); //判断是否为空 if(!empty($data)){ //检测数组类型 if(TestArray($data)["status"] == 1){ $i = 0; foreach($data as $k=>$v){ $data_mer[$i][$k] = remove_xss($v); $i++; } $res["code"] = $data_mer; }else{ foreach($data as $k=>$v){ $data_mer[$k] = remove_xss($v); } $res["code"] = $data_mer; } }else{ $res = array("status"=>2,"str"=>"数据不能为空"); } return $res; }本文出至:新太潮流网络博客
声明:该文观点仅代表作者本人,牛骨文系教育信息发布平台,牛骨文仅提供信息存储空间服务。