首页 > php教程 > php手册 > 正文

PHP过滤HTML标签的三种方法

php中文网
发布: 2016-10-28 15:03:26
原创
1580人浏览过

在做项目的过程中,我们经常需要用到过滤一些html标签来实现提高数据的安全性,其实就是删除那些对应用程序有潜在危害的数据。它用于去除标签以及删除或编码不需要的字符。
首先分享一些比较常见的

<span style="color: #800080">$str</span>=<span style="color: #008080">preg_replace</span>("/<s*imgs+[^>]*?srcs*=s*('|")(.*?)\1[^>]*?/?s*>/i","", <span style="color: #800080">$str</span><span style="color: #000000">); //过滤img标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/s+/","", <span style="color: #800080">$str</span><span style="color: #000000">); //过滤多余回车  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<[ ]+/si","<",<span style="color: #800080">$str</span>); //过滤<__("<"<span style="color: #000000">号后面带空格)  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<!--.*?-->/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //注释  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(!.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤DOCTYPE  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?html.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤html标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?head.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤head标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?meta.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤meta标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?body.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤body标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?link.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤link标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?form.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤form标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/cookie/si","COOKIE",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤COOKIE标签  
// http://www.manongjc.com/article/1345.html  
</span><span style="color: #800080">$str</span>=preg_replace("/<(applet.*?)>(.*?)<(/applet.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤applet标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?applet.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤applet标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(style.*?)>(.*?)<(/style.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤style标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?style.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤style标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(title.*?)>(.*?)<(/title.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤title标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?title.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤title标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(<span style="color: #0000ff">object</span>.*?)>(.*?)<(/<span style="color: #0000ff">object</span>.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤object标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?objec.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤object标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(noframes.*?)>(.*?)<(/noframes.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤noframes标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?noframes.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤noframes标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(i?frame.*?)>(.*?)<(/i?frame.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤frame标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?i?frame.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤frame标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(script.*?)>(.*?)<(/script.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/<(/?script.*?)>/si","",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/javascript/si","Javascript",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/vbscript/si","Vbscript",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/on([a-z]+)s*=/si","On\1=",<span style="color: #800080">$str</span><span style="color: #000000">); //过滤script标签  
   
</span><span style="color: #800080">$str</span>=preg_replace("/&<span style="color: #008000">#</span><span style="color: #008000">/si","&#",$str); //过滤script标签  </span>
登录后复制

更简单些的写法:

<span style="color: #0000ff">function</span> delhtml(<span style="color: #800080">$str</span>){  <span style="color: #008000">//</span><span style="color: #008000">清除html标签  </span>
<span style="color: #800080">$st</span>=-1; <span style="color: #008000">//</span><span style="color: #008000">开始  </span>
<span style="color: #800080">$et</span>=-1; <span style="color: #008000">//</span><span style="color: #008000">结束  </span>
<span style="color: #800080">$stmp</span>=<span style="color: #0000ff">array</span><span style="color: #000000">();  
</span><span style="color: #800080">$stmp</span>[]=" "<span style="color: #000000">;  
</span><span style="color: #800080">$len</span>=<span style="color: #008080">strlen</span>(<span style="color: #800080">$str</span><span style="color: #000000">);  
</span><span style="color: #0000ff">for</span>(<span style="color: #800080">$i</span>=0;<span style="color: #800080">$i</span><<span style="color: #800080">$len</span>;<span style="color: #800080">$i</span>++<span style="color: #000000">){  
  </span><span style="color: #800080">$ss</span>=<span style="color: #008080">substr</span>(<span style="color: #800080">$str</span>,<span style="color: #800080">$i</span>,1<span style="color: #000000">);  
  </span><span style="color: #0000ff">if</span>(<span style="color: #008080">ord</span>(<span style="color: #800080">$ss</span>)==60){ <span style="color: #008000">//</span><span style="color: #008000">ord("<")==60 http://www.manongjc.com/article/1345.html  </span>
  <span style="color: #800080">$st</span>=<span style="color: #800080">$i</span><span style="color: #000000">;  
  }  
  </span><span style="color: #0000ff">if</span>(<span style="color: #008080">ord</span>(<span style="color: #800080">$ss</span>)==62){ <span style="color: #008000">//</span><span style="color: #008000">ord(">")==62  </span>
  <span style="color: #800080">$et</span>=<span style="color: #800080">$i</span><span style="color: #000000">;  
  </span><span style="color: #0000ff">if</span>(<span style="color: #800080">$st</span>!=-1<span style="color: #000000">){  
   </span><span style="color: #800080">$stmp</span>[]=<span style="color: #008080">substr</span>(<span style="color: #800080">$str</span>,<span style="color: #800080">$st</span>,<span style="color: #800080">$et</span>-<span style="color: #800080">$st</span>+1<span style="color: #000000">);  
  }  
  }  
}  
</span><span style="color: #800080">$str</span>=<span style="color: #008080">str_replace</span>(<span style="color: #800080">$stmp</span>,"",<span style="color: #800080">$str</span><span style="color: #000000">);  
</span><span style="color: #0000ff">return</span> <span style="color: #800080">$str</span><span style="color: #000000">;  
} </span>
登录后复制

再来一个:

<span style="color: #0000ff">function</span> clear_html_label(<span style="color: #800080">$html</span><span style="color: #000000">)   
{   
</span><span style="color: #800080">$search</span> = <span style="color: #0000ff">array</span> ("'<script[^>]*?>.*?</script>'si", "'<[/!]*?[^<>]*?>'si", "'([rn])[s]+'", "'&(quot|#34);'i", "'&(amp|#38);'i", "'&(lt|#60);'i", "'&(gt|#62);'i", "'&(nbsp|#160);'i", "'&(iexcl|#161);'i", "'&(cent|#162);'i", "'&(pound|#163);'i", "'&(copy|#169);'i", "'&#(d+);'e"<span style="color: #000000">);   
</span><span style="color: #800080">$replace</span> = <span style="color: #0000ff">array</span> ("", "", "1", """, "&", "<", ">", " ", chr(161), chr(162), chr(163), chr(169), "<span style="color: #008080">chr</span>(1)"<span style="color: #000000">);  
return preg_replace(</span><span style="color: #800080">$search</span>, <span style="color: #800080">$replace</span>, <span style="color: #800080">$html</span><span style="color: #000000">);   
}  </span>
登录后复制
PHP速学教程(入门到精通)
PHP速学教程(入门到精通)

PHP怎么学习?PHP怎么入门?PHP在哪学?PHP怎么学才快?不用担心,这里为大家提供了PHP速学教程(入门到精通),有需要的小伙伴保存下载就能学习啦!

下载
来源:php中文网
本文内容由网友自发贡献,版权归原作者所有,本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容,请联系admin@php.cn
最新问题
开源免费商场系统广告
热门教程
更多>
最新下载
更多>
网站特效
网站源码
网站素材
前端模板
关于我们 免责申明 意见反馈 讲师合作 广告合作 最新更新
php中文网:公益在线php培训,帮助PHP学习者快速成长!
关注服务号 技术交流群
PHP中文网订阅号
每天精选资源文章推送
PHP中文网APP
随时随地碎片化学习
PHP中文网抖音号
发现有趣的

Copyright 2014-2025 https://www.php.cn/ All Rights Reserved | php.cn | 湘ICP备2023035733号