question about stripslashes and real_escape_string
         
               Posted on 
16th Feb 2014 07:03 pm by  
admin
        
        im cleaning up an old app that I wrote fixing some of the vulernabilities from attacks.
I have roughly 30 files. I want to be able to edit every $_POST and $_GET
Code: $value=$_POST['value'];
$value=$_GET['value'];
my instinct would be to edit every file and do it manually 
Code: $value=$_POST['value'];
$value=mysql_real_escape_string($value)
$value=$_GET['value'];
$value=mysql_real_escape_string($value)
but if there was a faster way it would make my life easier. What I would like to do is to maybe create a function i can put at the top of every page or into my global.php which is included into every page that would do something like this
Code:  
 if (get_magic_quotes_gpc()) {
       $value = stripslashes($value);
   }else{
     $value=mysql_real_escape_string($value)
   }
i dont intend to have magic quotes on, but other people might on there servers.
I just need every $_POST or $_GET within my script to be automaticly cleaned or filtered from SQL Injections
I saw something a long time ago where it was something they put at the top of there page, this will be completely wrong, but i will give u an example of what it looked like
Code: $_GET = array_map('mysql_real_escape_string', $_GET);
$_POST = array_map('mysql_real_escape_string', $_POST);
$_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);
$_REQUEST = array_map('mysql_real_escape_string', $_REQUEST);
im not to sure how that goes about effecting everything, where to put it, etc
Any ideas or suggestions? Or am I stuck doing it manually.       
      
       
		No comments posted yet	
	Your Answer:
	        Login to answer
        
291   25
 25  
 
    
    
 
Other forums
Adding meta tags under Zend FW 
Hello there, recently has come to my hands the FTP of a website which is running under Zend, I would
Different payment methods with different cross company requirements in F110     
We are implementing SAP in a company in the shipping industry. They have the following requirement:<
How could I combine these arrays?? 
Hello.. I'm trying to figure out a way to combine these first two arrays to get the last array.. 
DYNPRO_FIELD_CONVERSION 
Hi gurus,
I got a dump when I run one of my program. the dump is described below:
cstdatomic (c++0x std::atomic) / g++ 4.4 
Hello,
 I'm trying to use cstdatomic (std::atomic in the upcoming c++0x standard) in g++ 
Count on multidimensional array 
Hi, i got an array as below:
Array
(    
     => Array
        (
         
C++ Http request? 
Code:
	 string Response = "LOGIN_UNSUCCESSFUL";
                System.Net.WebRequest request = Sy
Place specific image in html page when specific name is typed. 
Hello,
Fairly new to PHP and was curious if someone might know how to solve a fairly simple r
Form help: Syntax & Logic 
Hello again all,
I'm working on a form and ran into a wall (again) and can't seem to think th
SQL query not working well 
Hi,
I made a small table with 5 rows and want to make them an sql consult using rownum