Limpiar变量$u POST/$u GET contra SQL Injection PHP

Posted 2021-02-24

Esta funcion limpia un array contra inyección SQL.

function clean_array_for_post($post){
	foreach($post as $key => $value){
		if(get_magic_quotes_gpc()) $post[$key] = stripslashes($value);
		if(!is_numeric($value)) $post[$key] = mysql_real_escape_string($value);
		$post[$key] = strip_tags($value);
    }
    return $post;
}