<?php
Include_once ("inc/connect.php");
Stop_outside_post ();
$email =php_sava (addslashes isset ($_post[' email ')] ($_post[' email '): ");
$mobile =php_sava ($_post[' mobile ') ($_post[' mobile '): "addslashes");
$name =php_sava (Addslashes (isset ($_post[' name ')) $_post[' name ']: ");
$an =php_sava (addslashes isset ($_post[' an ']) $_post[' a ']: ");
$ip = Get_real_ip ();
$time =date ("y-m-d");
if (Empty ($mobile) | | | empty ($email) | | | | empty ($name) | | empty ($an)) {
Die (' Submit=false ');
}else{
$tsql = "SELECT * from Lzlj_an where ip= ' $ip '";
$r = mysql_query ($tsql);
if (mysql_num_rows ($r)) {
Die (' Submit=false ');
}else{
$sql = "Insert into Lzlj_an (mobile,email,name,an,ip,dtime) value (' $mobile ', ' $email ', ' $name ', ' $an ', ' $ip ', ' $time ')";
mysql_query ($sql) or Die (' submit=false ');
Die (' submit=true ');
}
}
function Php_sava ($STR)
{
$farr = Array (
"/s+/",
"/< (/?) (script|i?frame|style|html|body|title|link|meta|?|%) ([^>]*?) >/isu ",
"/(<[^>]*) on[a-za-z]+s*= ([^>]*>)/isu",
);
$tarr = Array (
" ",
' <\1\2\3> ',//If you want to clear the unsafe label directly, leave this blank
"\1\2",
);
$str = Preg_replace ($farr, $tarr, $STR);
return $str;
}
function Stop_outside_post () {
$ServerName = @$_server[' server_name '];
$Sub _from = @$_server["Http_referer"];
$Sub _len = strlen ($ServerName);
$Checkfrom = substr ($Sub _from,7, $Sub _len);
if ($Checkfrom!= $ServerName) {
Die ("Warning!") You are submitting data from outside or accessing c.php files directly! Please terminate immediately!! ");
}
}
function Get_real_ip () {
$ip =false;
if (!empty ($_server["HTTP_CLIENT_IP"])) {
$ip = $_server["Http_client_ip"];
}
if (!empty ($_server[' http_x_forwarded_for ')) {
$ips = Explode (",", $_server[' http_x_forwarded_for '));
if ($IP) {array_unshift ($ips, $ip); $ip = FALSE;}
for ($i = 0; $i < count ($ips); $i + +) {
if (!eregi ("^ (10|172.16|192.168).", $ips [$i])) {
$ip = $ips [$i];
Break
}
}
}
Return ($ip $ip: $_server[' remote_addr ']);
}
?>
The original site www.111cn.net/phper/php.html