PHP防XSS 防SQL注入的代码

function gjj($str){ $farr = array('/s+/','/<(/?)(script|i?frame|style|html|body|title|link|meta|object|?|%)([^>]*?)>/isU','/(<[^>]*)on[a-zA-Z]+s*=([^>]*>)/isU', ); $str = preg_replace($farr,'',$str); return addslashes($str);} function hg_input_bb($array){ if (is_array($array)) {foreach($array AS $k => $v){ $array[$k] = hg_input_bb($v);} } else {$array = gjj($array); } return $array;}$_REQUEST = hg_input_bb($_REQUEST);$_GET = hg_input_bb($_GET);$_POST = hg_input_bb($_POST);