清理用户输入PHP

Posted 2021-02-24

The function returns the "sanitized" version of user input. Use before putting variables into SQL code.

function sanitize($data)
{
	$data = trim($data); 
	if(get_magic_quotes_gpc())
	{
		$data = stripslashes($data);
	}
	$data = mysql_real_escape_string($data);
	return $data;
}
 
//example
$username = sanitize($_POST['username']);