Use Array_map () to call mysql_real_escape_string to clean up the array
Because mysql_real_escape_string requires a MySQL database connection, you must connect to the MySQL database before calling mysql_real_escape_string.
The code is as follows |
Copy Code |
<?php Description: Call mysql_real_escape_string to clean the array with Array_map () Finishing: Http://www.111cn.net function Mysqlclean ($data) { Return (Is_array ($data)) array_map (' Mysqlclean ', $data): Mysql_real_escape_string ($data); } ?> |
Call method
The code is as follows |
Copy Code |
<?php
$conn = mysql_connect (' localhost ', ' user ', ' pass '); $_post = Mysqlclean ($_post); ?> |
Clean data can be inserted directly into the database.
Attention! Mysql_real_escape_string must be available in the case of (PHP 4 >= 4.3.0, PHP 5). Otherwise you can only use mysql_escape_string, the difference is:
Mysql_real_escape_string takes into account the current character set of the connection, and Mysql_escape_string does not consider it.
Use mysql_real_escape_string to clean and limit character lengths
Because mysql_real_escape_string requires a MySQL database connection, you must connect to the MySQL database before calling mysql_real_escape_string.
When we know that the data type is a string, we can limit the length of the string while cleaning the data. This method comes from David Lane, Hugh E. Williams Web Database application with PHP and MySQL (O ' Reilly, May 2004)
The code is as follows |
Copy Code |
<?php Description: Use mysql_real_escape_string to clean and limit character length Finishing: Http://www.111cn.net function Mysqlclean ($array, $index, $maxlength) { if (Isset ($array [$index])) { $input = substr ($array ["{$index}"], 0, $maxlength); $input = mysql_real_escape_string ($input); return ($input); } return NULL; } ?> |
Call Method:
The code is as follows |
Copy Code |
<?php $conn = mysql_connect (' localhost ', ' user ', ' pass '); if (isset ($_post[' username ')) { $_post[' username '] = Mysqlclean ($_post, ' username ', 20); echo $_post[' username ']; } ?> |
Clean the ' username ' in the $_post array and intercept the first 20-bit characters.