XSS Class

[drisate]

How to use this http://www.phpclasses.org/browse/package/2189.html?download=zip

On a global scale for $_POST $_GET and $_REQUEST

With out doing it one by one for every outputs

[drisate]

Nobody?

[awpti]

Post the code.

 

Most of us don't feel like wading through the absolute mess that is phpclasses.org

[therealwesfoster]

Here's something simple I do.

 

<?php
$post = array(); // empty var
foreach ($_POST as $key => $value)
{
  $post[$key] = addslashes( htmlspecialchars( $value ) );
}

echo $post['username'];
?>

 

So now, $post['username'] is the same at $_POST['username'].. except it's cleaned up

 

Or, do it this way to make it a function.

 

 

<?php
function cleanRequest()
{
  $post = array();
  foreach ($_POST as $key => $value)
  {
    $post[$key] = addslashes( htmlspecialchars( $value ) );
  }
  return $post;
}

$post = cleanRequest();
echo $post['username'];
?>

[drisate]

lol yeah np hehe

I attached the class to this message

 

But from what i can see it's a one by one output filtrer ... how to make it global?

 

(Thx Wesf90  but the XSS class seams to be alot more secure and since this is for a very big project i need to be the moste secure i can.)

[drisate]

Any idea?