PHP Anti-flow function

PHP Anti-injection function

1, the basic principle of PHP injection

The level and experience of programmers is also uneven, a large part of the programmer in writing code, there is no

The legality of user input data to judge, so that the application has security implications. Users can submit a piece of data

Library query code, according to the results returned by the program, to obtain some of the data he wants to know, which is called

SQL injection, or SQL injection. Affected systems: Systems that do not check and filter for input parameters

// Anti-injection

function Inject_check ($sql _str) {

$check = eregi (' select|insert|update|delete| ' | /*|*|.. /|. /|union|into|load_file

// filtering

if($check)

{

echo " If water impression network http://www.ruoshuiyx.com hint: "

exit();

}

Else

return $sql _str;

}

Use please see

