过滤SQL关键字，mysql入库字段过滤

键盘游走者发布于 2017-03-15 05:26php抢沙发

/** * 过滤SQL关键字，mysql入库字段过滤 * @param $val 要过滤的字符串 * @return mixed */ function sql_replace($val){ $val = str_replace(“\t”, '', $val); $val = str_replace(“%20”, '', $val); $val = str_replace(“%27”, '', $val); $val = str_replace(“*”, '', $val); $val = str_replace(“'”, '', $val); $val = str_replace(“\””, '', $val); $val = str_replace(“/”, '', $val); $val = str_replace(“;”, '', $val); $val = str_replace(“#”, '', $val); $val = str_replace(“–“, '', $val); $val = addslashes($val); return $val; }

]]>