<?php
  $mysql_server_name=$MysqlHostStr;
  $mysql_username=$MysqlNameStr;
  $mysql_password=$MysqlPassStr;
  $mysql_database=$MysqlDateName; 
  $conn = @mysql_connect($mysql_server_name, $mysql_username, $mysql_password) or die ("ǰУʧЧԺʣ"); 
  mysql_select_db($mysql_database) or die ("Unable to select database!"); 
  if(!$conn){ echo "ãڴʱÿ͹࣬ʧܣˢ±ҳ<br>Ϣѷ͵Աγִվӷ< br>лԱվĹעϣܸΪ";} 
  //mysql_query("set names 'gbk'");
foreach ($_POST as $post_key=>$post_var)
{
 if (is_numeric($post_var)) {
  $post[strtolower($post_key)] = get_int($post_var);
 } else {
  
  $post[strtolower($post_key)] = get_str($post_var);
 }
}


foreach ($_GET as $get_key=>$get_var)
{
 if (is_numeric($get_var)) {
  $get[strtolower($get_key)] = get_int($get_var);
 } else {
  $get[strtolower($get_key)] = get_str($get_var);
 }
}



function get_int($number)
{
    return intval($number);
}
function get_str($string)
{
    if (!get_magic_quotes_gpc()) {
        return addslashes(str_replace("'","",$string));
    }
    return $string;
}

//⺯
function FunStringExist($StrFiltrate,$ArrFiltrate)
{
foreach ($ArrFiltrate as $key=>$value)
{
   if (eregi($value,$StrFiltrate))
   {
    return $value;
   }
}
return "";
}

function FunPostGetFilter()
{
//Ҫ˵ķǷַ
$SysFilteringStr="{guanjianzistr}";
$ArrFiltrate=explode("|",$SysFilteringStr);

//ϲ$_POST  $_GET
if(function_exists(array_merge))
{
   $ArrPostAndGet=array_merge($_GET,$_POST);
}
else
{
   foreach($_POST as $key=>$value)
   {
    $ArrPostAndGet[]=$value;
   }
   foreach($_GET as $key=>$value)
   {
    $ArrPostAndGet[]=$value;
   }
}
//֤ʼ
foreach($ArrPostAndGet as $key=>$value){
   $v1="";
   $v1=FunStringExist($value,$ArrFiltrate);
   if ($v1!=""){
    
	  echo "<SCRIPT language=JavaScript>alert('ַ--".$v1."--');window.history.back(-1);</SCRIPT>";

    exit();
   }
}
}
FunPostGetFilter();
?>