Shulou(Shulou.com)06/03 Report--

This article will explain in detail what PHP security functions are worth paying attention to. The quality of the article content is high, so Xiaobian shares it with you as a reference. I hope you have a certain understanding of relevant knowledge after reading this article.

In the modern Internet, we often have to obtain input data from users all over the world. But we all know that "you can never trust the data that users enter." So in all kinds of Web development languages, there are functions that guarantee the security of user input data. What are the PHP security functions that are worth paying attention to?

What are PHP security functions worth paying attention to?

1.mysql_real_escape_string()

This function is useful for preventing SQL injection attacks in PHP. It adds "backslashes" to special characters, such as single quotes and double quotes, to ensure that user input is safe before it is queried. Note, however, that you are using this function when you are connected to a database.

But now mysql_real_escape_string() is basically not used, and all new application development should use libraries like PDO to operate on databases, that is, we can use ready-made statements to prevent SQL injection attacks.

2.addslashes()

This function is similar to mysql_real_escape_string() above. Note, however, that this function should not be used when Magic_quotes_gpc in the settings file php.ini has a value of "on". By default, magic_quotes_gpc is on, automatically running addslashes() on all GET, POST, and COOKIE data. Do not use addslashes() on strings that have already been escaped by magic_quotes_gpc, as this will result in double escaping. You can check the value of this variable with the PHP get_magic_quotes_gpc() function.

3.htmlentities()

This function is useful for filtering user input data and converts characters into HTML entities. For example, when the user enters the character "

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.