php防止sql语句注入

$username=addslashes($_POST['username']);
	$username=str_replace("_","\_",$_POST['username']);
	$username=str_replace("%","\%",$_POST['username']);


你可能感兴趣的:(php防止sql语句注入)