防SQL注入--初级方法

php代码

慧博商城系统HuiboShop2011

慧博商城系统HuiboShop2011系统特色：1、上百套模板随意下载切换、模板定时更新；2、csv数据导入、数据定向读取，一键导入商品信息，省时、省力； 3、多会员等级管理，一站搞定零售、批发、代销；4、可集成网站分销功能模块，缔造庞大的代理业务链，代理客户一键铺货；5、代码严谨，防SQL注入；前后台用户分开管理，密码不可逆加密；6、简单易操作、只需几分钟搞定一个商城网站；商城后台帐号admin

下载

//防注入函数
function inject_check($sql_str){
	$check = eregi('select|insert|update|delete|\*|\/\*|\'|\.\.\/|\.\/|UNION|into|load_file|outfile',$sql_str);
	if($check){ 	   
	   page_href("http://".$_SERVER['HTTP_HOST']."/home/sitemap.php");
	   exit(); 	   
    }else{
	   return $sql_str;
	}
}
//防跨站攻击
function inject_check2($sql_str){
	$check = eregi('javascript|vbscript|expression|applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base|onabort|onactivate|onafterprint|onafterupdate|onbeforeactivate|onbeforecopy|onbeforecut|onbeforedeactivate|onbeforeeditfocus|onbeforepaste|onbeforeprint|onbeforeunload|onbeforeupdate|onblur|onbounce|oncellchange|onchange|onclick|oncontextmenu|oncontrolselect|oncopy|oncut|ondataavailable|ondatasetchanged|ondatasetcomplete|ondblclick|ondeactivate|ondrag|ondragend|ondragenter|ondragleave|ondragover|ondragstart|ondrop|onerror|onerrorupdate|onfilterchange|onfinish|onfocus|onfocusin|onfocusout|onhelp|onkeydown|onkeypress|onkeyup|onlayoutcomplete|onload|onlosecapture|onmousedown|onmouseenter|onmouseleave|onmousemove|onmouseout|onmouseover|onmouseup|onmousewheel|onmove|onmoveend|onmovestart|onpaste|onpropertychange|onreadystatechange|onreset|onresize|onresizeend|onresizestart|onrowenter|onrowexit|onrowsdelete|onrowsinserted|onscroll|onselect|onselectionchange|onselectstart|onstart|onstop|onsubmit|onunload',$sql_str);
	if($check){ 	   
	   page_href("http://".$_SERVER['HTTP_HOST']."/home/sitemap.php");
	   exit(); 	   
    }else{
	   //return $sql_str;
	}
}