CI框架安全过滤函数示例

第CI框架安全过滤函数示例本文实例讲述了CI框架安全过滤函数。分享给大家供大家参考，具体如下：

1、CI框架版本：

*自动过滤变量，进行XSS，去空

*支持：单个字符串，多维数组，数字

*@paramtype$param='常规字符串'或array('字符串1','字符串2');

*@returnstring|array

finalprotectedfunctionhtml_trim($param='')

if(is_array($param)!empty($param)){

return($param);

if(is_string($param)){

returnhtmlspecialchars(trim($param));

if(is_numeric($param))

return(int)$param;

return$param;

使用方式为：

$this-html_trim($this-input-post('refer_url',TRUE));

由于第二个参数为TRUE，默认已经进行了xss过滤

2、原生PHP版本

*安全过滤类-过滤javascript,css,iframes,object等不安全参数过滤级别高

*@paramstring$value需要过滤的值

*@returnstring

functionfliter_script($value){

$value=preg_replace("/(javascript:)on(click|load|key|mouse|error|abort|move|unload|change|dblclick|move|reset|resize|submit)/i","111n\\2",$value);

$value=preg_replace("/(.*)\/script/si","",$value);

$value=preg_replace("/(.*)\/iframe/si","",$value);

$value=preg_replace("//iesU",'',$value);

return$value;

*安全过滤类-过滤HTML标签

*@paramstring$value需要过滤的值

*@returnstring

functionfliter_html($value){

if(function_exists('htmlspecialchars'))returnhtmlspecialchars($value);

returnstr_replace(array("",'"',"'","",""),array("","\"","'","",""),$value);

*安全过滤类-对进入的数据加下划线防止SQL注入

*@paramstring$value需要过滤的值

*@returnstring

functionfliter_sql($value){

$sql=array("select",'insert',"update","delete","\'","/*",

"../","./","union","into","load_file","outfile");

$sql_re=array("","","","","","","","","","","","");

returnstr_replace($sql,$sql_re,$value);

*安全过滤类-通用数据过滤

*@paramstring$value需要过滤的变量

*@returnstring|array

functionfliter_escape($value){

if(is_array($value)){

foreach($valueas$k=$v){

$value[$k]=self::fliter_str($v);

}else{

$value=self::fliter_str($value);

return$value;

*安全过滤类-字符串过滤过滤特殊有危害字符

*@paramstring$value需要过滤的值

*@returnstring

functionfliter_str($value){

$badstr=array("0","%00","r",'','','"',"'","","","","%3C","%3E");

$newstr=array('','','','','','"',''',"","","","","

$value=str_replace($badstr,$newstr,$value);

$value=preg_replace('/((#(\d{3,5}|x[a-fA-F0-9]{4}));)/','\\1',$value);

return$value;

*私有路劲安全转化

*@paramstring$fileName

*@returnstring

functionfilter_dir($fileName){

$tmpname=strtolower($fileName);

$temp=array(':/',"0","..");

if(str_replace($temp,'',$tmpname)!==$tmpname){

returnfalse;

return$fileName;

*过滤目录

*@paramstring$path

*@returnarray

publicfunctionfilter_path($path){

$path=str_replace(array("'",'#','=','`','$','%','',';'),'',$path);

returnrtrim(preg_replace('/(\/){2,}|(\\\){1,}/','/',$path),'/');

*过滤PHP标签

*@paramstring$string

*@returnstring

publicfunctionfilter_phptag($string){

returnstr_replace(array(''),array('',''),$string);

*安全过滤类-返回函数

*@paramstring$value需要过滤的值

*@returnstring

publicfunctionstr_out($value){

$badstr=array("","","%3C","%3E");

$newstr=array("","","","

$value=str_replace($newstr,$badstr,$value);

returnstripslashes($value);//下划线

更多关于CodeIgniter相关内容感兴趣的读者可查看本站专题：《codeigniter入门教程》、《CI(CodeIgniter