python 非法字符处理

有勇气的牛排 294 Python 2023-05-18 20:45:36

过滤非法字符

def sql_filter(sql, max_length=20):
    dirty_stuff = ["\"", "\\", "/", "|", "&", "*", "'", "=", "-", "#", ";", "<", ">", "+", "%", "$", "(", ")", "%", "@","!"]
    for stuff in dirty_stuff:
        sql = sql.replace(stuff, "")
    return sql[:max_length]

username = "1234567890!@#!@#!@#$%======$%|&***"

username = sql_filter(username)  # SQL注入
print(username)

# 输出结果是:1234567890

检测是否包含非法字符

import re

# username = "1234567890!@#!@#!@#$%======$%|&***"
username = "1234567890*"

# 检测到非法字符进入if
if not re.search(u'^[_a-zA-Z0-9\u4e00-\u9fa5]+$', username):
    msg = u"用户名不可以包含非法字符(!,@,#,$,%...)"
    print(msg)

参考：
https://www.cnblogs.com/cybermat/articles/473314.html
https://blog.csdn.net/weixin_30707875/article/details/99341309

<h2><a id="_0"></a>过滤非法字符</h2> <pre><div class="hljs"><code class="lang-python">def sql_filter(sql, max_length=20): dirty_stuff = ["\"", "\\", "/", "|", "&", "*", "'", "=", "-", "#", ";", "<", ">", "+", "%", "$", "(", ")", "%", "@","!"] for stuff in dirty_stuff: sql = sql.replace(stuff, "") return sql[:max_length] username = "1234567890!@#!@#!@#$%======$%|&***" username = sql_filter(username) # SQL注入 print(username) # 输出结果是:1234567890 </code></div></pre> <h2><a id="_17"></a>检测是否包含非法字符</h2> <pre><div class="hljs"><code class="lang-python">import re # username = "1234567890!@#!@#!@#$%======$%|&***" username = "1234567890*" # 检测到非法字符进入if if not re.search(u'^[_a-zA-Z0-9\u4e00-\u9fa5]+$', username): msg = u"用户名不可以包含非法字符(!,@,#,$,%...)" print(msg) </code></div></pre> 参考： https://www.cnblogs.com/cybermat/articles/473314.html https://blog.csdn.net/weixin_30707875/article/details/99341309

python 非法字符处理

过滤非法字符

检测是否包含非法字符

留言