check from
/* Security functions */
PHP Code:
function is_secure($string)
{
if ( !isset($string) or empty($string) ) return '';
if ( is_numeric($string) ) return $string;
$non_displayables = array('/%0[0-8bcef]/', '/%1[0-9a-f]/', '/[\x00-\x08]/', '/\x0b/', '/\x0c/', '/[\x0e-\x1f]/');
foreach ( $non_displayables as $regex )
$string = preg_replace( $regex, '', $string );
$string = str_replace("'", "''", $string );
$string = str_replace('"', '""', $string );
$string = @htmlentities($string);
return $string;
$string = preg_replace(sql_regcase("/(from|select|insert|delete|where|shutdown|drop table|show tables|#|\*|--|\\\\)/"), "", $string);
$string = trim($string);
$string = strip_tags($string);
$string = addslashes($string);
//$string = @mysql_real_escape_string($string);*/
return $string;
}
@mysql_real_escape_string
