note 106220 deleted from function.ord by danbrown
| From: | danbrown@php.net | Date: | Wed, 19 Oct 2011 15:31:34 +0000 |
| Subject: | note 106220 deleted from function.ord by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-184001@lists.php.net to get a copy of this message | ||
Note Submitter: Astronovi
----
This code maybe useful to protect your code before hacker attcks from <form
action...method="post" />
You have mayby use this code before strip_tags, mysql_real_escape_string,htmlspecialchars and each
other function. This is example give in output only letters form A - Z,a - z or polish lettrs (e.g:
Ä
,Ä,Å,ó,ż....). You should correct this code for letters from your country or
numbers. Please, test this example before you use it in yours aplication.
$tablica1 = $_POST['text'];
for($i=0; $i<strlen($tablica1); $i++)
{
if(ord($tablica1[$i])>122) $znak.= ord($tablica1[$i]);
if(ord($tablica1[$i])<=122) $znak = ord($tablica1[$i]);
if((($znak >='97')&&($znak <='122'))||(($znak
>='65')&&($znak <='90'))||($znak =='197132')||($znak
=='197131')||($znak =='195179')||($znak =='195147')||($znak
=='196135')||($znak =='196134')||($znak =='196153')||($znak
=='196152')||($znak =='196133')||($znak =='196132')||($znak
=='197188')||($znak =='197187')||($znak =='197186')||($znak
=='197185')||($znak =='197155')||($znak =='197154'))
{
$wynik1.=chr($znak);
$znak='';
}
}
$text = $wynik1;
-----------------------------
input: sdd636^47+_w+&style
output: sddwstyle
input: ;''[5rg444dffdÅóżÄ
[]122d
output: rgdffdd