Safe site search via ASCII

[l4ci]

Hey there,

wondering if anyone knows what this topic will be about okay lets start:

 

I have a search function on my site. Basically I do this:

 

if $_POST -> redirect ?search=$_POST

if $_GET['search'] - > sql_query($search);

 

Of course I am working with functions like

mysql_real_escape_string - addslashes - htmlspecialchars , but I have the following problem:

 

when redirecting chars like & % ? ! kill my $_GET var.

 

Which function solves this?

 

My solution:

I convert every char in $_POST into an ascii code -> redirect ?search=$ascii_codes

convert back into $string and do safe search.

 

 

[l4ci]

urlencode()

does the trick

 

anway if someone needs to convert a string into an asci string and back here you go:

 

Convert into ASCII:

$wort = trim(stripslashes($wort));
$c = strlen($wort);

$asci = "";
$i = 0;
while($i<=$c){
	if($i != $c){
		$asci .= ord($wort[$i]);
		if($i+1 != $c){
			$asci .= "_";
		}
	}
$i++;
}

$query = $asci;

 

Convert back:

$asci = trim($asci);
$array = explode("_",$asci);
$string = "";
foreach ($array as $value){
	$string .= chr($value);
}