PHP Security Processing Solutions

Safe::mysqlsafe (); SQL injection, upgrade 5.3.6 or later PHP

Scenario One: All data in the request (Get/post/cookie) is implemented mysql_escape_string to secure processing.

Scenario Two: In a number of libraries to encapsulate, through the automatic Code generation scheme to operate the database. Recommended

SAFE::VALIDCSRF (); The XSS callback form is validated and can be encrypted by the ip,useragent,time of the other party.

Safe::getcsrfinput get form input hidden field for Output page form

Safe::validillegalword detection of illegal words, in the existence of illegal dictionary judgment.

Safe::clearillegaltags is used to detect HTML security, illegal tags in html, such as Onclick,javascript, and other phrases such as potentially dangerous XSS attacks.

PHP Security Processing Solutions