note 104252 deleted from security.database.sql-injection by danbrown
| From: | danbrown@php.net | Date: | Fri, 03 Jun 2011 16:09:51 +0000 |
| Subject: | note 104252 deleted from security.database.sql-injection by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-180226@lists.php.net to get a copy of this message | ||
Note Submitter: shahroq
----
this one is bendikt secure class with array support (in case you want to secure grouped check box)
<?php
class SecureInputs{
function secureSuperGlobalGET(&$value, $key)
{
if(is_array($_GET[$key])){
foreach ($_GET[$key] as $key2 => $value2){
$_GET[$key][$key2] = htmlspecialchars(stripslashes($_GET[$key][$key2]));
$_GET[$key][$key2] = str_ireplace("script", "blocked",
$_GET[$key][$key2]);
$_GET[$key][$key2] = mysql_escape_string($_GET[$key][$key2]);
}
}else{
$_GET[$key] = htmlspecialchars(stripslashes($_GET[$key]));
$_GET[$key] = str_ireplace("script", "blocked", $_GET[$key]);
$_GET[$key] = mysql_escape_string($_GET[$key]);
}
return $_GET[$key];
}
function secureSuperGlobalPOST(&$value, $key)
{
if(is_array($_POST[$key])){
foreach ($_POST[$key] as $key2 => $value2){
$_POST[$key][$key2] = htmlspecialchars(stripslashes($_POST[$key][$key2]));
$_POST[$key][$key2] = str_ireplace("script", "blocked",
$_POST[$key][$key2]);
$_POST[$key][$key2] = mysql_escape_string($_POST[$key][$key2]);
}
}else{
$_POST[$key] = htmlspecialchars(stripslashes($_POST[$key]));
$_POST[$key] = str_ireplace("script", "blocked", $_POST[$key]);
$_POST[$key] = mysql_escape_string($_POST[$key]);
}
return $_POST[$key];
}
function secureGlobals($echo_vars = false)
{
array_walk($_GET, array($this, 'secureSuperGlobalGET'));
array_walk($_POST, array($this, 'secureSuperGlobalPOST'));
}
}
?>