PHP Universal Anti-injection security code

Safety | anti-injection Brief:
/*************************

Description

Determines whether the passed variable contains illegal characters

such as $_post, $_get

Function:

Anti-injection

**************************/

<?php

Illegal characters to filter

$ArrFiltrate =array ("'", ";", "union");

The URL to jump after an error is not filled in the default previous page

$STRGOURL = "";

Whether the value in the array exists

function Funstringexist ($StrFiltrate, $ArrFiltrate) {

foreach ($ArrFiltrate as $key => $value) {

if (eregi ($value, $StrFiltrate)) {

return true;

}

}

return false;

}

Merging $_post and $_get

if (function_exists (Array_merge)) {

$ArrPostAndGet =array_merge ($HTTP _post_vars, $HTTP _get_vars);

}else{

foreach ($HTTP _post_vars as $key => $value) {

$ArrPostAndGet []= $value;

}

foreach ($HTTP _get_vars as $key => $value) {

$ArrPostAndGet []= $value;

}

}

Verify Start

foreach ($ArrPostAndGet as $key => $value) {

if (Funstringexist ($value, $ArrFiltrate)) {

echo "<script language=\" javascript\ ">alert (\" NEEAO hint, illegal character \ ");</script>";

if (empty ($STRGOURL)) {

echo "<script language=\" javascript\ ">history.go ( -1);</script>";

}else{

echo "<script language=\" javascript\ ">window.location=\" ". $StrGoUrl." \ ";</script>";

}

Exit

}

}

?>
Save As Checkpostandget.php

Then add include ("checkpostandget.php") in front of each PHP file;