Advertisement
atmoner

secureSuperGlobal

Feb 9th, 2012
151
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 0.79 KB | None | 0 0
  1.     function secureSuperGlobalGET(&$value, $key) {
  2.         $_GET[$key] = htmlspecialchars(stripslashes($_GET[$key]));
  3.         $_GET[$key] = str_ireplace("script", "blocked", $_GET[$key]);
  4.         $_GET[$key] = mysql_escape_string($_GET[$key]);
  5.         return $_GET[$key];
  6.     }
  7.     ###
  8.     function secureSuperGlobalPOST(&$value, $key) {
  9.     $page = (isset($_GET["page"])?$_GET["page"]:"");
  10.         if($page != 'admincp') {
  11.         $_POST[$key] = htmlspecialchars(stripslashes($_POST[$key]));
  12.         $_POST[$key] = str_ireplace("script", "blocked", $_POST[$key]);
  13.         $_POST[$key] = mysql_escape_string($_POST[$key]);
  14.         return $_POST[$key];
  15.         } else {
  16.         return $_POST[$key];
  17.         }
  18.     }
  19.     ###    
  20.     function secureGlobals() {
  21.         array_walk($_GET, array($this, 'secureSuperGlobalGET'));
  22.         array_walk($_POST, array($this, 'secureSuperGlobalPOST'));
  23.     }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement