php防止sql注入之过滤分页参数实例
本文实例讲述了php防止sql注入中过滤分页参数的方法。分享给大家供大家参考。具体分析如下:
就网络安全而言,在网络上不要相信任何输入信息,对于任何输入信息我们都必须进行参数过滤。对此,我们先来看看下面的实例:
代码如下:
$this->load->library ( 'pagination' ); $config ['base_url'] = site_url () . '/guest/show'; $config ['total_rows'] = $c; $config ['per_page'] = $pernum = 15; $config ['uri_segment'] = 3; $config ['use_page_numbers'] = TRUE; $config ['first_link'] = '第一页'; $config ['last_link'] = '最后一页'; $config ['num_links'] = 5; $this->pagination->initialize ( $config ); if (! $this->uri->segment ( 3 )) { $currentnum = 0; } else { $currentnum = is_numeric($this->uri->segment ( 3 ))?(intval($this->uri->segment ( 3 ) - 1)) * $pernum:0; } $current_page=is_numeric($this->uri->segment ( 3 ))?intval($this->uri->segment ( 3 )):1; if($current_page){ $data ['title'] = '第'.$current_page.'页-留言本-防SQL注入测试'; } else{ $data ['title'] = '留言本-防SQL注入测试'; } $data ['liuyan'] = $this->ly->getLy ( $pernum, $currentnum );
其中:
代码如下:
$current_page=is_numeric($this->uri->segment ( 3 ))?intval($this->uri->segment ( 3 )):1; $currentnum = is_numeric($this->uri->segment ( 3 ))?(intval($this->uri->segment ( 3 ) - 1)) * $pernum;
这两句判断了参数是否为数字。防止非法字符输入。
希望本文所述对大家的PHP程序设计有所帮助。
相关推荐
dxyadc 2020-06-26
某某某 2020-01-12
hell0kitty 2019-10-21
molong0 2019-05-08
tpyangqingyuan 2019-01-10
ReganHoo 2010-12-03
IceStreamLab 2019-07-01
ShoppingChen 2019-01-10
独苏揽月 2019-06-28
forrestou 2019-06-27
mojianc 2019-06-27
Cei语言 2014-04-24
wasdzjh 2019-05-06
JackSparrow 2018-08-03
der 2019-02-12
xianyuxiaoqiang 2018-09-28
forrestou 2018-09-26
wumingxiaozei 2018-02-10
HANHUABAO 2015-05-24