【记录】SQL注入过滤源码分享

$id=check_addslashes($_GET['id']);
$id= preg_replace('/o*r/i',"", $id); //strip out OR (non case sensitive)
$id= preg_replace('/a*nd/i',"", $id); //Strip out AND (non case sensitive)
$id= preg_replace('%26%26',"", $id);
$id= preg_replace('/or/i',"", $id); //strip out or (non case sensitive)
$id= preg_replace('/and/',"", $id); //Strip out and (non case sensitive)
$id= preg_replace('/ /',"", $id); //Strip out space (non case sensitive)
$id= preg_replace('/[\/\*]/',"", $id); //strip out /*
$id= preg_replace('/[--]/',"", $id); //Strip out --.
$id= preg_replace('/[#]/',"", $id); //Strip out #.
$id= preg_replace('/[ ]/',"", $id); //Strip out spaces.
$id= preg_replace('/s*e*l*ec*t/i',"", $id); 
$id= preg_replace('/[\t]/',"",$id) //横向制表
$id= preg_replace('/[\n\v\f\r]/',"", $id); //换行、纵向制表、换页、回车对应%0a、%0b、%0c、%0d
$id= preg_replace('/union\s+select/i',"", $id); //Strip out UNION & SELECT.
$id=base64_decode($id);
$id=base64_decode($id);
$id=preg_replace('/union([[:space:]\/])/i',"",$id);
$id=preg_replace('/and([[:space:]\/])/i',"",$id);
$id=preg_replace('/select([[:space:]\/])/i',"",$id);