<?php

/*************************
说明：PHP通用防注入代码
作者：亚森罗宾
功能：防止注入
**************************/

//要过滤的非法字符
$arrFiltrate=array("'",";","union","select","insert","update","delete","load_file","outfile"); 

 //出错后要跳转的url
$StrGoUrl="";   

function funStringExist($strFiltrate,$arrFiltrate)
{
  foreach ($arrFiltrate as $key=>$value)
  {
    if (eregi($value,$strFiltrate))
    {
      return true;
    }
  }
  return false;
}

//合并$_POST 、 $_GET和$_COOKIE
if(function_exists(array_merge))   
{
  $arrPostGetCookieSession=array_merge($HTTP_POST_VARS,$HTTP_GET_VARS,$HTTP_COOKIE_VARS);  
  $string = implode("",$arrPostGetCookieSession);
}

//验证
if(funStringExist($string,$arrFiltrate))
{
  echo "<script language=\"javascript\">alert(\"提示，非法字符\");</script>";
}
else
{
  echo "<script language=\"javascript\">window.location=\"".$StrGoUrl."\";</script>";
}

?>