|
|
发表于 2015-3-2 13:28:00
|
显示全部楼层
include/safe.func.php
function dsafe($string, $type = 1) {
if(is_array($string)) {
return array_map('dsafe', $string);
} else {
$string = preg_replace("/\/", "", $string);
$string = preg_replace("/\/\*([\s\S]*?)\*\//", "", $string);
$string = preg_replace("/&#([a-z0-9]+)([;]*)/i", "", $string);
if(preg_match("/&#([a-z0-9]+)([;]*)/i", $string)) return nl2br(strip_tags($string));
$match = array("/s[\s]*c[\s]*r[\s]*i[\s]*p[\s]*t/i","/d[\s]*a[\s]*t[\s]*a[\s]*\:/i","/b[\s]*a[\s]*s[\s]*e/i","/e[\\\]*x[\\\]*p[\\\]*r[\\\]*e[\\\]*s[\\\]*s[\\\]*i[\\\]*o[\\\]*n/i","/i[\\\]*m[\\\]*p[\\\]*o[\\\]*r[\\\]*t/i","/on([a-z]{2,})([\(|\=|\s]+)/i","/about/i","/frame/i","/link/i","/meta/i","/textarea/i","/eval/i","/alert/i","/confirm/i","/prompt/i","/cookie/i","/document/i","/newline/i","/colon/i","/cript","data:","base","expression","import","on\\1\\2","about","frame","link","meta","textarea","eval","alert","/confirm/i","prompt","cookie","document","newline","colon","x");
if($type) {
return str_replace(array('isShowabout'), array('isShowAbout'), preg_replace($match, $replace, $string));
} else {
return str_replace(array('', '<sty1e'), array('', '<style'), $string);
}
}
}
把默认的dsafe函数修改一下,然后把资讯内容的视频重新上传一下。
按照这种方式可以解决 |
|