Posted By

TheNullByte on 06/19/12

Tagged

php
user

Versions (?)

Last Edited at 06/19/12 03:15am

Statistics

Viewed 803 times

Favorited by 1 user(s)

Related snippets

Sanitize (MySQL and XSS)

/ Published in: PHP

Just a small function to sanitize the user's input of any xss and sqli. I saw a lot of ones that didn't include htmlentities or htmlspecialchars, and were still vulnerable to persistent/reflected xss.

Expand | Embed | Plain Text

Copy this code and paste it in your HTML

function clean($a)
{
	if(get_magic_quotes_gpc())
	{
		$a = stripslashes($a);
	}
	$a = mysql_real_escape_string($a);
        $a = htmlentities($a);
	return $a;
}