清除传入的POST数据

Posted 2021-02-25

// based on Quad_Scrub: http://code.google.com/p/quadphp/source/browse/trunk/library/Quad/Scrub.php
function clean(&$val, $allowedChars = 'ascii') {
	static $types = array(
		'word'         => '/[^a-zA-Zx{00C0}-x{00FF}x{0100}-x{02AF}x{1E00}-x{1EF9}d -/:;=[email protected][-_{-~
	.]/u',
		'alpha'        => '/[^a-zA-Zx{00C0}-x{00FF}x{0100}-x{02AF}x{1E00}-x{1EF9}]/u',
		'alphanum'     => '/[^a-zA-Zx{00C0}-x{00FF}x{0100}-x{02AF}x{1E00}-x{1EF9}d]/u',
		'id'           => '/[^w_]/',
		'date'         => '/[^d :TzZ-]/',
		'email'        => "/[^@w.!#$%&'*+-/=?^_`{|}~]/", // http://en.wikipedia.org/wiki/E-mail_address Dec 2009
		'url'          => '/[^w._&?#+%=/~:-]/',
		'ascii'        => '/[^ -~]/',
	);
	if (isset($types[$allowedChars])) {
		$regex = $types[$allowedChars];
	}
	else {
		$regex = $allowedChars;
	}
	$val = preg_replace($regex, '', (string) $val);
	return $val;
}