Posted By

kirik on 08/06/09

Tagged

Versions (?)

Last Edited at 08/06/09 03:01pm

Statistics

Viewed 823 times

Favorited by 2 user(s)

Related snippets

Basic script for prevert SQL inj and XSS

/ Published in: PHP

Function for sanitize input POST, GET, COOKIE arrays.

Expand | Embed | Plain Text

Copy this code and paste it in your HTML

function filterInput(&$input)
{
	$_SERVER['GPC_STATUS'] = get_magic_quotes_gpc(); // We do not want to call get_magic_quotes_gpc() function for each element of array
	array_walk_recursive($input, 'sanitizeIt'); // Sanitize each element of array
}
 
function sanitizeIt(&$str)
{
	if($_SERVER['GPC_STATUS']) // Just check variable
		$str = stripslashes($str);
 
	$str = htmlspecialchars(rawurldecode(trim($str)), ENT_QUOTES, 'UTF-8');
}
 
/** **** Examples ****
 
	--- Without sanitize ---
		URL: /index.php?monkey=<foo>'bar\D
		Script:
			print_r($_GET);
		Result:
			Array
			(
				[monkey] => <foo>\'bar\\d
			)
	--- With sanitize ---
		URL: /index.php?monkey=<foo>'bar\D
		Script:
			filterInput($_GET);
			print_r($_GET);
		Result:
			Array
			(
				[monkey] => &lt;foo&gt;&#039;bar\d
			)
**/