防止sql 注入攻击 -- opencart的处理

来源:互联网 发布:sql server if语句 编辑:程序博客网 时间:2024/05/20 13:04
  看了opencart 的源码,它是这么处理的。
<?phpclass Request {public $get = array();public $post = array();public $cookie = array();public $files = array();public $server = array();public function __construct() {$this->get = $this->clean($_GET);$this->post = $this->clean($_POST);$this->request = $this->clean($_REQUEST);$this->cookie = $this->clean($_COOKIE);$this->files = $this->clean($_FILES);$this->server = $this->clean($_SERVER);}public function clean($data) {if (is_array($data)) {foreach ($data as $key => $value) {unset($data[$key]);$data[$this->clean($key)] = $this->clean($value);}} else {$data = htmlspecialchars($data, ENT_COMPAT, 'UTF-8');}return $data;}}

0 0