牛骨文教育服务平台(让学习变的简单)
博文笔记

PHP检测数组中的每个值是否含有特殊字符

创建时间:2017-09-12 投稿人: 浏览次数:176
本文出至:新太潮流网络博客
/**
 * [TestArray 检测数组是一维还是二维]
 * @E-mial wuliqiang_aa@163.com
 * @TIME   2017-04-07
 * @WEB    http://blog.iinu.com.cn
 * @param [type] $array [数组]
 */
function TestArray($array){
    if(is_array($array)){
        foreach($array as $v){
            if(is_array($v)){
                $Int_Array = array("Int"=>2,"Test"=>"检测为二维数组");
            }else{
                $Int_Array = array("Int"=>1,"Test"=>"检测为一维数组");
            }
        }
    }else{
        $Int_Array = array("Int"=>3,"Test"=>"检测为不是数组");
    }
    
    return $Int_Array;
}
/**
 * [剔除掉危险字符]
 * @E-mial wuliqiang_aa@163.com
 * @TIME   2017-04-07
 * @WEB    http://blog.iinu.com.cn
 * @param  [数据] $val [要处理的数据]
 * @return [type]      [description]
 */
function remove_xss($val) {

    $val = preg_replace("/([x00-x08,x0b-x0c,x0e-x19])/", "", $val);


    $search = "abcdefghijklmnopqrstuvwxyz";
    $search .= "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
    $search .= "1234567890!@#$%^&*()";
    $search .= "~`";:?+/={}[]-_|"\";
    for ($i = 0; $i < strlen($search); $i++) {

        $val = preg_replace("/(&#[xX]0{0,8}" . dechex(ord($search[$i])) . ";?)/i", $search[$i], $val);

        $val = preg_replace("/(�{0,8}" . ord($search[$i]) . ";?)/", $search[$i], $val); 
    }

    // now the only remaining whitespace attacks are 	, 
, and 

    $ra1 = array("javascript", "vbscript", "expression", "applet", "meta", "xml", "blink", "link", "style", "script", "embed", "object", "iframe", "frame", "frameset", "ilayer", "layer", "bgsound", "title", "base");
    $ra2 = array("onabort", "onactivate", "onafterprint", "onafterupdate", "onbeforeactivate", "onbeforecopy", "onbeforecut", "onbeforedeactivate", "onbeforeeditfocus", "onbeforepaste", "onbeforeprint", "onbeforeunload", "onbeforeupdate", "onblur", "onbounce", "oncellchange", "onchange", "onclick", "oncontextmenu", "oncontrolselect", "oncopy", "oncut", "ondataavailable", "ondatasetchanged", "ondatasetcomplete", "ondblclick", "ondeactivate", "ondrag", "ondragend", "ondragenter", "ondragleave", "ondragover", "ondragstart", "ondrop", "onerror", "onerrorupdate", "onfilterchange", "onfinish", "onfocus", "onfocusin", "onfocusout", "onhelp", "onkeydown", "onkeypress", "onkeyup", "onlayoutcomplete", "onload", "onlosecapture", "onmousedown", "onmouseenter", "onmouseleave", "onmousemove", "onmouseout", "onmouseover", "onmouseup", "onmousewheel", "onmove", "onmoveend", "onmovestart", "onpaste", "onpropertychange", "onreadystatechange", "onreset", "onresize", "onresizeend", "onresizestart", "onrowenter", "onrowexit", "onrowsdelete", "onrowsinserted", "onscroll", "onselect", "onselectionchange", "onselectstart", "onstart", "onstop", "onsubmit", "onunload");
    $ra = array_merge($ra1, $ra2);

    $found = true;
    while ($found == true) {
        $val_before = $val;
        for ($i = 0; $i < sizeof($ra); $i++) {
            $pattern = "/";
            for ($j = 0; $j < strlen($ra[$i]); $j++) {
                if ($j > 0) {
                    $pattern .= "(";
                    $pattern .= "(&#[xX]0{0,8}([9ab]);)";
                    $pattern .= "|";
                    $pattern .= "|(�{0,8}([9|10|13]);)";
                    $pattern .= ")*";
                }
                $pattern .= $ra[$i][$j];
            }
            $pattern .= "/i";
            $replacement = substr($ra[$i], 0, 2) . "" . substr($ra[$i], 2); 
            $val = preg_replace($pattern, $replacement, $val); 
            if ($val_before == $val) {

                $found = false;
            }
        }
    }
    return $val;
}
/**
 * [getData 检测数组中的每个值是否含有特殊字符]
 * @E-mial wuliqiang_aa@163.com
 * @TIME   2017-05-03
 * @WEB    http://blog.iinu.com.cn
 * @param  [array] $data [要检测的数组-一维或者二维]
 * @return [data]  $res     [返回剔除后的数组]
 */
function getData($data){
    header("Content-type:text/html;charset=utf-8");
    //判断是否为空
    if(!empty($data)){
        //检测数组类型 
        if(TestArray($data)["status"] == 1){
            $i = 0;
            foreach($data as $k=>$v){
                $data_mer[$i][$k] = remove_xss($v);
                $i++;
            }
            $res["code"] = $data_mer;
        }else{
            foreach($data as $k=>$v){
                $data_mer[$k] = remove_xss($v);
            }
            $res["code"] = $data_mer;
        }
    }else{
        $res = array("status"=>2,"str"=>"数据不能为空");
    }
    return $res;
}
本文出至:新太潮流网络博客
声明:该文观点仅代表作者本人,牛骨文系教育信息发布平台,牛骨文仅提供信息存储空间服务。