Posted By

romanos on 05/29/08

Tagged

Versions (?)

Last Edited at 05/29/08 05:43pm

Statistics

Viewed 486 times

Favorited by 1 user(s)

Related snippets

Sanitise $_SERVER globals

/ Published in: PHP

This code from pfp fusion engine.

Put it above your code in the php-script.

Expand | Embed | Plain Text

Copy this code and paste it in your HTML

// Clean URL Function, prevents entities in server globals
function cleanurl($url) {
	$bad_entities = array("&", "\"", "'", '\"', "\'", "<", ">", "(", ")", "*");
	$safe_entities = array("&amp;", "", "", "", "", "", "", "", "", "");
	$url = str_replace($bad_entities, $safe_entities, $url);
	return $url;
}
 
// Sanitise $_SERVER globals
$_SERVER['PHP_SELF'] = cleanurl($_SERVER['PHP_SELF']);
$_SERVER['QUERY_STRING'] = isset($_SERVER['QUERY_STRING']) ? cleanurl($_SERVER['QUERY_STRING']) : "";
$_SERVER['REQUEST_URI'] = isset($_SERVER['REQUEST_URI']) ? cleanurl($_SERVER['REQUEST_URI']) : "";
$PHP_SELF = cleanurl($_SERVER['PHP_SELF']);

URL: http://www.php-fusion.co.uk

Report this snippet Tweet

Comments

Subscribe to comments

Comment:

You need to login to post a comment.