- preg_match: documentation ( source)
- phpinfo: documentation ( source)
- preg_replace: documentation ( source)
<?php
$query = "{${phpinfo()}}";
$query = filter_string($query);
function check_string($str) {
return preg_match("/^\w+$/", (string)$str);
}
function filter_string($str) {
return preg_replace('/^(.*)$/ie', "filter_function(\"\\1\")", $str);
}
function filter_function($str) {
// do encoding / filtering etc. here
return $str;
}
?>