欢迎您访问程序员文章站本站旨在为大家提供分享程序员计算机编程知识！
您现在的位置是： 首页  >  后端开发

php 过滤非法与特殊字符串的方法

程序员文章站 2022-05-31 09:54:31
...
本文介绍下，php实现的过滤非法字符与特殊字符串的方法，有需要的朋友参考下。

提供几段函数，实现非法字符串、特殊字符串的过滤方法。

代码：

'),array('','?>'),$html);  
    $pattern=array(  
   "''si",  
   "''si",  
   "']*?>'si",  
   "''si",  
   "']*?>'si"  
   );  
   $replace=array("","","","","");  
   return   preg_replace($pattern,$replace,$html);  
 }  
 /* Remove JS/CSS/IFRAME/FRAME 过滤JS/CSS/IFRAME/FRAME/XSS等恶意攻击代码(可安全使用) 
  * Return string 
  */  
 function cleanJsCss($html){  
    $html=trim($html);  
    $html=preg_replace('/\0+/', '', $html);  
$html=preg_replace('/(\\\\0)+/', '', $html);  
$html=preg_replace('#(&\#*\w+)[\x00-\x20]+;#u',"\\1;",$html);  
$html=preg_replace('#(&\#x*)([0-9A-F]+);*#iu',"\\1\\2;",$html);  
$html=preg_replace("/%u0([a-z0-9]{3})/i", "\\1;", $html);  
$html=preg_replace("/%([a-z0-9]{2})/i", "\\1;", $html);  
    $html=str_replace(array('','?>'),array('','?>'),$html);  
   $html=preg_replace('#\t+#',' ',$html);  
$scripts=array('javascript','vbscript','script','applet','alert','document','write','cookie','window');  
foreach($scripts as $script){  
    $temp_str="";  
    for($i=0;$i#si", "", $html);  
$html=preg_replace("##si", "", $html);  
$html=preg_replace('#(]*?)(onblur|onchange|onclick|onfocus|onload|onmouseover|onmouseup|onmousedown|onselect|onsubmit|onunload|
onkeypress|onkeydown|onkeyup|onresize)[^>]*>#is',"\\1>",$html);  
//$html=preg_replace('#]*)>#is', "", $html);  
$html=preg_replace('#]*)>#is', "", $html);  
$html=preg_replace('#(alert|cmd|passthru|eval|exec|system|fopen|fsockopen|file|file_get_contents|readfile|unlink)(\s*)\((.*?)\)#si',
 "\\1\\2(\\3)", $html);  
$bad=array(  
'document.cookie'   => '',  
'document.write'    => '',  
'window.location'   => '',  
"javascript\s*:"    => '',  
"Redirect\s+302"    => '',  
''                => '-->'  
);  
foreach ($bad as $key=>$val){  
    $html=preg_replace("#".$key."#i",$val,$html);  
}  
   return   $html;  
 }  
 //过滤html标签以及敏感字符  
  
 function cleanHtml($html){  
    return cleanYellow(htmlspecialchars($html));  
 }  
 //过滤部分HTML标签  
  
 function cleanFilter($html){  
    $html=trim($html);  
    $html=preg_replace("/
]*?>/is","


",$html);  
    $html=preg_replace("/


]*?>/is","
",$html);  
    $html=preg_replace("/
    ]*?>/is","
      ",$html);  
    $html=preg_replace("/
    • ]*?>/is","
      • 

    • ",$html);  
    $html=preg_replace("/]*?/is","",$html);  
    $html=preg_replace("/]*?>(.*)?/is","\$发达",$html);  
    $html=preg_replace("/]*?>/is","
      ",$html);  
    $html=preg_replace("/]*?>/is","",$html);  
    $html=preg_replace("/
      

      ]*?>/is","
",$html);  
    $html=preg_replace("/
        ]*?>/is","
          ",$html);  
    $html=preg_replace("/
        

      

      ]*?>/is","",$html);  
    $html=preg_replace("/]*?>/is","",$html);  
    return $html;  
 }  
 //过滤非法的敏感字符串  
 function cleanYellow($txt){  
    $txt=str_replace(  
    array("黄色","性爱","做爱","我日","我草","我靠","尻","*","胡*","*",  
    "*","*","研究生考试","性生活","色情","情色","我考","麻痹","妈的","阴道",  
    "淫","奸","阴部","爱液","阴液","臀","色诱","煞笔","傻比","阴茎","*","性交","阴毛","*"),  
    array("*1*","*2*","*3*","*4*","*5*","*6*","*7*","*8*","*9*","*10*",  
    "*11*","*12*","*13*","*14*","*15*","*16*","*17*","*18*","*19*","*20*",  
    "*21*","*22*","*23*","*24*","*25*","*26*","*27*","*28*","*29*","*30*","*31*","*32*","*33*","*34*"),  
    $txt);  
    return $txt;  
 }  
 //过滤敏感字符串以及恶意代码  
 function cleanAll($html){  
    return cleanYellow(cleanJsCss($html));  
 }  
 //全半角字符替换  
 function setFilter($html){  
        $arr=array('０' => '0', '１' => '1', '２' => '2', '３' => '3', '４' => '4',  
                '５' => '5', '６' => '6', '７' => '7', '８' => '8', '９' => '9',  
                'Ａ' => 'A', 'Ｂ' => 'B', 'Ｃ' => 'C', 'Ｄ' => 'D', 'Ｅ' => 'E',  
                'Ｆ' => 'F', 'Ｇ' => 'G', 'Ｈ' => 'H', 'Ｉ' => 'I', 'Ｊ' => 'J',  
                'Ｋ' => 'K', 'Ｌ' => 'L', 'Ｍ' => 'M', 'Ｎ' => 'N', 'Ｏ' => 'O',  
                'Ｐ' => 'P', 'Ｑ' => 'Q', 'Ｒ' => 'R', 'Ｓ' => 'S', 'Ｔ' => 'T',  
                'Ｕ' => 'U', 'Ｖ' => 'V', 'Ｗ' => 'W', 'Ｘ' => 'X', 'Ｙ' => 'Y',  
                'Ｚ' => 'Z', 'ａ' => 'a', 'ｂ' => 'b', 'ｃ' => 'c', 'ｄ' => 'd',  
                'ｅ' => 'e', 'ｆ' => 'f', 'ｇ' => 'g', 'ｈ' => 'h', 'ｉ' => 'i',  
                'ｊ' => 'j', 'ｋ' => 'k', 'ｌ' => 'l', 'ｍ' => 'm', 'ｎ' => 'n',  
                'ｏ' => 'o', 'ｐ' => 'p', 'ｑ' => 'q', 'ｒ' => 'r', 'ｓ' => 's',  
                'ｔ' => 't', 'ｕ' => 'u', 'ｖ' => 'v', 'ｗ' => 'w', 'ｘ' => 'x',  
                'ｙ' => 'y', 'ｚ' => 'z',  
                '（' => '(', '）' => ')', '〔' => '[', '〕' => ']', '【' => '[',  
                '】' => ']', '〖' => '[', '〗' => ']', '“' => '[', '”' => ']',  
                '‘' => '[', '’' => ']', '｛' => '{', '｝' => '}', '《' => ' '>',  
                '％' => '%', '＋' => '+', '—' => '-', '－' => '-', '～' => '-',  
                '：' => ':', '。' => '.', '、' => ',', '，' => '.', '、' => '.',  
                '；' => ',', '？' => '?', '！' => '!', '…' => '-', '‖' => '|',  
                '”' => '"', '’' => '`', '‘' => '`', '｜' => '|', '〃' => '"',  
                '　' => ' ');  
    return  strtr($html,$arr);  
 }
 //搜集整理：bbs.it-home.org
 ?>
      
      		

      

      

php 过滤非法与特殊字符串的方法
      声明：本文内容由网友自发贡献，版权归原作者所有，本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容，请联系admin@php.cn核实处理。
      

      相关文章
      

      相关视频
      

      



      

      

      网友评论
      

      文明上网理性发言，请遵守 新闻评论服务协议
      我要评论
      

      

      

    • php 过滤非法与特殊字符串的方法
      • 

      • 













专题推荐









作者信息




php 过滤非法与特殊字符串的方法






认证0级讲师








发布技术文章




    

  • 最新文章
    • 

  • 热门排行
    • 
















推荐视频教程


  • 
php 过滤非法与特殊字符串的方法javascript初级视频教程

    • 

  • 
php 过滤非法与特殊字符串的方法jquery 基础视频教程

    • 

    

    

    
视频教程分类
    


    

    

    

    


    ：公益在线php培训，帮助PHP学习者快速成长！
    

    Copyright 2014-2021 https://www.php.cn/ All Rights Reserved | 苏ICP备2020058653号-1php 过滤非法与特殊字符串的方法关于我们免责申明赞助与捐赠广告合作
    

    

    
php 过滤非法与特殊字符串的方法  
            php 过滤非法与特殊字符串的方法
    相关标签： php 过滤非法与特殊字符串的方法

    上一篇： PHP封装的MSSql操作类完整实例，php封装mssql实例

    下一篇： ThinkPHP 3.2.3实现页面静态化功能的方法

    推荐阅读