Sikkerhedshuller

PHP kode 

 clean($_GET);
 clean($_POST);
 
 function clean($subject) {
     !get_magic_quotes_gpc() && return;
 
     foreach ($subject as $key => &$value) {
              $value = stripslashes($value);
              $value = htmlentities($value);
              $value = mysql_real_escape_string($value);
     }
 }

PHP kode 

 $value = stripslashes($value);
 $value = htmlentities($value);
 $_POST[$key] = mysql_real_escape_string($value);

PHP kode 

 function clean($subject) {
     if (!get_magic_quotes_gpc()) return;
     
     foreach ($subject as $key => &$value) {
         $value = stripslashes($value);
         $value = htmlentities($value);
         $value = mysql_real_escape_string($value);
     }
 }

PHP kode 

 //This stops SQL Injection in POST vars
   foreach ($_POST as $key => $value) {
     if(is_string($value)){
           if(get_magic_quotes_gpc())
             $value = stripslashes($value); 
             $value = htmlentities($value);
           $_POST[$key] = mysql_real_escape_string($value);
       }
   }
   
   //This stops SQL Injection in GET vars
   foreach ($_GET as $key => $value) {
     if(is_string($value)){
         if(get_magic_quotes_gpc())
             $value = stripslashes($value);
             $value = htmlentities($value);
         $_GET[$key] = mysql_real_escape_string($value);
     }
   }