php ·À×¢Èë¹¥»÷º¯Êý

/*php ·À×¢È뺯Êý
string  $feifa  ÏÞÖÆÔªËØ×é³É
ÈçÓзǷ¨×Ö·ûÌøתµ½ÉÏÒ»Ò³ ·µ»Ø 0  Ã»Óзµ»Ø 1
*/
//ʹÓ÷½·¨
//$feifa=array("select","delete","from","update","create","destory","drop","alter","and","or","like","exec","count","*","chr","mid","master","truncate","char","declare",";","-","+");
//$arrpostget=array("http://www.baidu.select cretecomdmin","wangw");
//echo saftsql($feifa,$arrpostget);
function saftsql($feifa,$arrpostget){
//
$arrpostget=array_merge((array)$HTTP_PSOT_VARS,(array)$HTTP_GET_VARS);
  if($arrpostget){
         foreach($arrpostget as $key=>$value){
              for($i=0;$i<count($feifa);$i++){
                //ÕÒ·Ç·¨×Ö·ûÔÚ$valueÖеÄλÖÃ
                $flag=strpos($value,$feifa[$i]);              
                if($flag)
                {                    
                 echo "<script
type=\"text/javascript\">alert('URLÓзǷ¨×Ö·û');</script>";