A self-written SQL Injection detection function can effectively detect user post and get references for filtering. If you need it, refer to it.
| The Code is as follows: |
Copy code |
<? Php
/* SQL Injection character Detection
* All input data, post parameters, and get parameters must be checked.
* If a keyword is matched, this keyword is returned. Otherwise, false is returned.
* This is not the same as sensitive character detection.
*/
Function Filter_ SQL ($ strData)
{
$ StrFilter = $ blnFlag = $ arrayFilter = ''; $ StrFilter = "'| and | (|) | exec | insert | select | delete | update | count | * | % 27 | chr | mid | master | truncate | char | declare | union | or "; // you can add characters to be filtered. "|" is a separator.
$ BlnFlag = false; // filter flag. If a filter is generated, it is true.
$ Arr = explode ("|", $ strFilter );
$ Str = "";
Foreach ($ arr as $ row)
{
$ Str. = preg_quote ($ row). "| ";
}
$ Str = trim ($ str, "| ");
If (preg_match ('/'. $ str. '/I', $ strData, $ word ))
{
Return $ word [0];
}
Return false;
} /*
Test
$ String = "fasdf union ";
Echo Filter_ SQL ($ string );
*/ ?> |
