php 过滤非法与特殊字符串的方法

提供几段函数，实现非法字符串、特殊字符串的过滤方法。

代码：

<?php
//简单过滤JS 、PHP标签  
 function cleanJs($html){  
    $html=trim($html);  
    $html=str_replace(array('<?','?>'),array('<?','?>'),$html);  
    $pattern=array(  
   "'<script[^>]*?>.*?</script>'si",  
   "'<style[^>]*?>.*?</style>'si",  
   "'<frame[^>]*?>'si",  
   "'<iframe[^>]*?>.*?</iframe>'si",  
   "'<link[^>]*?>'si"  
   );  
   $replace=array("","","","","");  
   return   preg_replace($pattern,$replace,$html);  
 }  
 /* Remove JS/CSS/IFRAME/FRAME 过滤JS/CSS/IFRAME/FRAME/XSS等恶意攻击代码(可安全使用) 
  * Return string 
  */  
 function cleanJsCss($html){  
    $html=trim($html);  
    $html=preg_replace('/+/', '', $html);  
$html=preg_replace('/(\0)+/', '', $html);  
$html=preg_replace('#(&#*w+)[x00-x20]+;#u',"1;",$html);  
$html=preg_replace('#(&#x*)([0-9A-F]+);*#iu',"12;",$html);  
$html=preg_replace("/%u0([a-z0-9]{3})/i", "&#x1;", $html);  
$html=preg_replace("/%([a-z0-9]{2})/i", "&#x1;", $html);  
    $html=str_replace(array('<?','?>'),array('<?','?>'),$html);  
   $html=preg_replace('#t+#',' ',$html);  
$scripts=array('javascript','vbscript','script','applet','alert','document','write','cookie','window');  
foreach($scripts as $script){  
    $temp_str="";  
    for($i=0;$i<strlen($script);$i++){  
        $temp_str.=substr($script,$i,1)."s*";  
    }  
    $temp_str=substr($temp_str,0,-3);  
    $html=preg_replace('#'.$temp_str.'#s',$script,$html);  
    $html=preg_replace('#'.ucfirst($temp_str).'#s',ucfirst($script),$html);  
}  
$html=preg_replace("#<a.+?href=.*?(alert(|alert&#40;|javascript:|window.|document.|.cookie|<script|<xss).*?>.*?</a>#si", "", 
$html);  
$html=preg_replace("#<img.+?src=.*?(alert(|alert&#40;|javascript:|window.|document.|.cookie|<script|<xss).*?>#si", "", $html);  
$html=preg_replace("#<(script|xss).*?>#si", "<1>", $html);  
$html=preg_replace('#(<[^>]*?)(onblur|onchange|onclick|onfocus|onload|onmouseover|onmouseup|onmousedown|onselect|onsubmit|onunload|
onkeypress|onkeydown|onkeyup|onresize)[^>]*>#is',"1>",$html);  
//$html=preg_replace('#<(/*s*)(alert|applet|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|
html|ilayer|iframe|input|layer|link|meta|object|plaintext|style|script|textarea|title|xml|xss)([^>]*)>#is', "<123>", $html);  
$html=preg_replace('#<(/*s*)(alert|applet|basefont|base|behavior|bgsound|blink|body|expression|form|frameset|frame|head|html|ilayer
|iframe|input|layer|link|meta|object|plaintext|style|script|textarea|title|xml|xss)([^>]*)>#is', "<123>", $html);  
$html=preg_replace('#(alert|cmd|passthru|eval|exec|system|fopen|fsockopen|file|file_get_contents|readfile|unlink)(s*)((.*?))#si',
 "12(3)", $html);  
$bad=array(  
'document.cookie'   => '',  
'document.write'    => '',  
'window.location'   => '',  
"javascripts*:"    => '',  
"Redirects+302"    => '',  
'<!--'               => '<!--',  
'-->'                => '-->'  
);  
foreach ($bad as $key=>$val){  
    $html=preg_replace("#".$key."#i",$val,$html);  
}  
   return   $html;  
 }  
 //过滤html标签以及敏感字符  
  
 function cleanHtml($html){  
    return cleanYellow(htmlspecialchars($html));  
 }  
 //过滤部分HTML标签  
  
 function cleanFilter($html){  
    $html=trim($html);  
    $html=preg_replace("/<p[^>]*?>/is","<p>",$html);  
    $html=preg_replace("/<div[^>]*?>/is","<div>",$html);  
    $html=preg_replace("/<ul[^>]*?>/is","<ul>",$html);  
    $html=preg_replace("/<li[^>]*?>/is","<li>",$html);  
    $html=preg_replace("/<span[^>]*?/is","<span>",$html);  
    $html=preg_replace("/<a[^>]*?>(.*)?</a>/is","${1}",$html);  
    $html=preg_replace("/<table[^>]*?>/is","<table>",$html);  
    $html=preg_replace("/<tr[^>]*?>/is","<tr>",$html);  
    $html=preg_replace("/<td[^>]*?>/is","<td>",$html);  
    $html=preg_replace("/<ol[^>]*?>/is","<ol>",$html);  
    $html=preg_replace("/<form[^>]*?>/is","",$html);  
    $html=preg_replace("/<input[^>]*?>/is","",$html);  
    return $html;  
 }  
 //过滤非法的敏感字符串  
 function cleanYellow($txt){  
    $txt=str_replace(  
    array("黄色","性爱","做爱","我日","我草","我靠","尻","共产党","胡锦涛","毛泽东",  
    "政府","中央","研究生考试","性生活","色情","情色","我考","麻痹","妈的","阴道",  
    "淫","奸","阴部","爱液","阴液","臀","色诱","煞笔","傻比","阴茎","法轮功","性交","阴毛","江泽民"),  
    array("*1*","*2*","*3*","*4*","*5*","*6*","*7*","*8*","*9*","*10*",  
    "*11*","*12*","*13*","*14*","*15*","*16*","*17*","*18*","*19*","*20*",  
    "*21*","*22*","*23*","*24*","*25*","*26*","*27*","*28*","*29*","*30*","*31*","*32*","*33*","*34*"),  
    $txt);  
    return $txt;  
 }  
 //过滤敏感字符串以及恶意代码  
 function cleanAll($html){  
    return cleanYellow(cleanJsCss($html));  
 }  
 //全半角字符替换  
 function setFilter($html){  
        $arr=array('０' => '0', '１' => '1', '２' => '2', '３' => '3', '４' => '4',  
                '５' => '5', '６' => '6', '７' => '7', '８' => '8', '９' => '9',  
                'Ａ' => 'A', 'Ｂ' => 'B', 'Ｃ' => 'C', 'Ｄ' => 'D', 'Ｅ' => 'E',  
                'Ｆ' => 'F', 'Ｇ' => 'G', 'Ｈ' => 'H', 'Ｉ' => 'I', 'Ｊ' => 'J',  
                'Ｋ' => 'K', 'Ｌ' => 'L', 'Ｍ' => 'M', 'Ｎ' => 'N', 'Ｏ' => 'O',  
                'Ｐ' => 'P', 'Ｑ' => 'Q', 'Ｒ' => 'R', 'Ｓ' => 'S', 'Ｔ' => 'T',  
                'Ｕ' => 'U', 'Ｖ' => 'V', 'Ｗ' => 'W', 'Ｘ' => 'X', 'Ｙ' => 'Y',  
                'Ｚ' => 'Z', 'ａ' => 'a', 'ｂ' => 'b', 'ｃ' => 'c', 'ｄ' => 'd',  
                'ｅ' => 'e', 'ｆ' => 'f', 'ｇ' => 'g', 'ｈ' => 'h', 'ｉ' => 'i',  
                'ｊ' => 'j', 'ｋ' => 'k', 'ｌ' => 'l', 'ｍ' => 'm', 'ｎ' => 'n',  
                'ｏ' => 'o', 'ｐ' => 'p', 'ｑ' => 'q', 'ｒ' => 'r', 'ｓ' => 's',  
                'ｔ' => 't', 'ｕ' => 'u', 'ｖ' => 'v', 'ｗ' => 'w', 'ｘ' => 'x',  
                'ｙ' => 'y', 'ｚ' => 'z',  
                '（' => '(', '）' => ')', '〔' => '[', '〕' => ']', '【' => '[',  
                '】' => ']', '〖' => '[', '〗' => ']', '“' => '[', '”' => ']',  
                '‘' => '[', '’' => ']', '｛' => '{', '｝' => '}', '《' => '<',  
                '》' => '>',  
                '％' => '%', '＋' => '+', '—' => '-', '－' => '-', '～' => '-',  
                '：' => ':', '。' => '.', '、' => ',', '，' => '.', '、' => '.',  
                '；' => ',', '？' => '?', '！' => '!', '…' => '-', '‖' => '|',  
                '”' => '"', '’' => '`', '‘' => '`', '｜' => '|', '〃' => '"',  
                '　' => ' ');  
    return  strtr($html,$arr);  
 }
 //搜集整理：www.jb200.com
 ?>