分享一下discuz论坛的sql防注入函数，写的不错。$magic_quotes_gpc = get_magic_quotes_gpc();@extract(daddslashes($_COOKIE));@extract(daddslashes($_POST));@extract(daddslashes($_GET));if(!$magic_quotes_gpc) {$_FILES = daddslashes($_FILES);}function daddslashes($string, $force = 0) {if(!$GLOBALS['magic_quotes_gpc'] || $force) {if(is_array($string)) {foreach($string as $key => $val) {$string[$key] = daddslashes($val, $force);}} else {$string = addslashes($string);}}return $string;}复制代码
分享discuz的php防止sql注入函数
•
👁 0人浏览过