php完美过滤HTML代码的函数

$str = '<a href="#">href</a>';
echo htmlspecialchars($str);
echo strip_tags($str);

输出结果为

&lt;a href=&quot;#&quot;&gt;href&lt;/a&gt;

href

function uh($str)
 {
     $farr = array(
         "/s+/",                                                                   
                        //过滤多余的空白
         "/<(/?)(script|i?frame|style|html|body|title|link|meta|?|%)([^>]*?)>/isu",
   //过滤 <script 等可能引入恶意内容或恶意改变显示布局的代码,如果不需要插入flash等,还可
 以加入<object的过滤
         "/(<[^>]*)on[a-za-z]+s*=([^>]*>)/isu",                                    
 //过滤网页特效的on事件
     
    );
    $tarr = array(
         " ",
         "＜123＞",           //如果要直接清除不安全的标签，这里可以留空
         "12",
    );
  $str = preg_replace( $farr,$tarr,$str);
    return $str;
 }

<?php
$str = preg_replace( "@<script(.*?)</script>@is", "", $str );
$str = preg_replace( "@<iframe(.*?)</iframe>@is", "", $str );
$str = preg_replace( "@<style(.*?)</style>@is", "", $str );
$str = preg_replace( "@<(.*?)>@is", "", $str );
?>

<?php
class Crypt3Des {
var $key;
function Crypt3Des($key){
$this->key = $key;
}

function encrypt($input){
$size = mcrypt_get_block_size(MCRYPT_3DES,'ecb');
$input = $this->pkcs5_pad($input, $size);
$key = str_pad($this->key,24,'0');
$td = mcrypt_module_open(MCRYPT_3DES, '', 'ecb', '');
$iv = @mcrypt_create_iv (mcrypt_enc_get_iv_size($td), MCRYPT_RAND);
@mcrypt_generic_init($td, $key, $iv);
$data = mcrypt_generic($td, $input);
mcrypt_generic_deinit($td);
mcrypt_module_close($td);
//$data = base64_encode($this->PaddingPKCS7($data));
$data = base64_encode($data);
return $data;
}

function decrypt($encrypted){
$encrypted = base64_decode($encrypted);
$key = str_pad($this->key,24,'0');
$td = mcrypt_module_open(MCRYPT_3DES,'','ecb','');
$iv = @mcrypt_create_iv(mcrypt_enc_get_iv_size($td),MCRYPT_RAND);
$ks = mcrypt_enc_get_key_size($td);
@mcrypt_generic_init($td, $key, $iv);
$decrypted = mdecrypt_generic($td, $encrypted);
mcrypt_generic_deinit($td);
mcrypt_module_close($td);
$y=$this->pkcs5_unpad($decrypted);
return $y;
}

function pkcs5_pad ($text, $blocksize) {
$pad = $blocksize - (strlen($text) % $blocksize);
return $text . str_repeat(chr($pad), $pad);
}

function pkcs5_unpad($text){
$pad = ord($text{strlen($text)-1});
if ($pad > strlen($text)) {
   return false;
}
if (strspn($text, chr($pad), strlen($text) - $pad) != $pad){
   return false;
}
return substr($text, 0, -1 * $pad);
}

function PaddingPKCS7($data) {
$block_size = mcrypt_get_block_size(MCRYPT_3DES, MCRYPT_MODE_CBC);
$padding_char = $block_size - (strlen($data) % $block_size);
$data .= str_repeat(chr($padding_char),$padding_char);
return $data;
}
}

用法:

$crypt = new Crypt3Des('密钥');
$a = '待加密字符串';
$code = $crypt->encrypt($a);//加密
echo $crypt->decrypt($code);//解密

加密函数

/*
*功能：对字符串进行加密处理
*参数一：需要加密的内容
*参数二：密钥
*/
function passport_encrypt($str,$key){ //加密函数
 srand((double)microtime() * 1000000);
 $encrypt_key=md5(rand(0, 32000));
 $ctr=0;
 $tmp='';
 for($i=0;$i<strlen($str);$i++){
  $ctr=$ctr==strlen($encrypt_key)?0:$ctr;
  $tmp.=$encrypt_key[$ctr].($str[$i] ^ $encrypt_key[$ctr++]);
 }
 return base64_encode(passport_key($tmp,$key));
}

解密代码如下：

/*
*功能：对字符串进行解密处理
*参数一：需要解密的密文
*参数二：密钥
*/
function passport_decrypt($str,$key){ //解密函数
 $str=passport_key(base64_decode($str),$key);
 $tmp='';
 for($i=0;$i<strlen($str);$i++){
  $md5=$str[$i];
  $tmp.=$str[++$i] ^ $md5;
 }
 return $tmp;
}

辅助函数：

/*
*辅助函数
*/
function passport_key($str,$encrypt_key){
 $encrypt_key=md5($encrypt_key);
 $ctr=0;
 $tmp='';
 for($i=0;$i<strlen($str);$i++){
  $ctr=$ctr==strlen($encrypt_key)?0:$ctr;
  $tmp.=$str[$i] ^ $encrypt_key[$ctr++];
 }
 return $tmp;
}

使用如下所示

$str='作者：www.111cn.net';
$key='123456';
$encrypt=passport_encrypt($str,$key);
$decrypt=passport_decrypt($encrypt,$key);

echo '原文：',$str."<br><hr>";
echo '密文：',$encrypt."<br><hr>";
echo '译文：',$decrypt."<br><hr>";

<?php
class DES
{
 var $key;
 var $iv; //偏移量
 
 function DES( $key, $iv=0 ) {
 //key长度8例如:1234abcd
  $this->key = $key;
  if( $iv == 0 ) {
   $this->iv = $key;
  } else {
   $this->iv = $iv; //mcrypt_create_iv ( mcrypt_get_block_size (MCRYPT_DES, MCRYPT_MODE_CBC), MCRYPT_DEV_RANDOM );
  }
 }
 
 function encrypt($str) {
 //加密，返回大写十六进制字符串
  $size = mcrypt_get_block_size ( MCRYPT_DES, MCRYPT_MODE_CBC );
  $str = $this->pkcs5Pad ( $str, $size );
  return strtoupper( bin2hex( mcrypt_cbc(MCRYPT_DES, $this->key, $str, MCRYPT_ENCRYPT, $this->iv ) ) );
 }
 
 function decrypt($str) {
 //解密
  $strBin = $this->hex2bin( strtolower( $str ) );
  $str = mcrypt_cbc( MCRYPT_DES, $this->key, $strBin, MCRYPT_DECRYPT, $this->iv );
  $str = $this->pkcs5Unpad( $str );
  return $str;
 }
 
 function hex2bin($hexData) {
  $binData = "";
  for($i = 0; $i < strlen ( $hexData ); $i += 2) {
   $binData .= chr ( hexdec ( substr ( $hexData, $i, 2 ) ) );
  }
  return $binData;
 }
 
 function pkcs5Pad($text, $blocksize) {
  $pad = $blocksize - (strlen ( $text ) % $blocksize);
  return $text . str_repeat ( chr ( $pad ), $pad );
 }
 
 function pkcs5Unpad($text) {
  $pad = ord ( $text {strlen ( $text ) - 1} );
  if ($pad > strlen ( $text ))
   return false;
  if (strspn ( $text, chr ( $pad ), strlen ( $text ) - $pad ) != $pad)
   return false;
  return substr ( $text, 0, - 1 * $pad );
 }
 
}
?>

以下是测试结果：

$str = '12345678';

$key = '1234abcd';
$crypt = new DES($key);
$mstr = $crypt->encrypt($str);
$str = $crypt->decrypt($mstr);

echo  $str.' <=> '.$mstr;

/**
*加密需通过get方式在url中传递的参数
*/
function args_encode($data) {
if(is_array($data)) {
$string = http_build_query($data);
return base64_encode($string);
} else {
return false;
}
}

/**
*获取url中get方式传递的参数
*/
function getargs() {
$string = base64_decode($_GET['args']);
parse_str($string,$g);
return $g;
}

include('nf.php');

$score = $filter -> GetScore($_FILES['img']['tmp_name']);

if($score >= 60){
/*Message*/
}

<form method="post" enctype="multipart/form-data" action="<?php echo $SERVER['PHP_SELF'];?> ">
Upload image:
<input type="file" name="img" id="img" />
<input type="submit" value="Sumit Image" />
</form>