php資料過濾

function SqlFilter($Variable='',$method='text'){
  if(empty($Variable))return '';
  $methods = explode(",", $method);
  foreach($methods as $method){
    switch($method){
  //去除前後空白
    case "trim":
   $Variable=trim($Variable);
  break;
  ////特殊字符轉義
  case "addslashes":
   $Variable=(! get_magic_quotes_gpc()) ? addslashes($Variable) : $Variable;
  break;
  ////去除html、php標籤
  case "strip_tags":
   $Variable=strip_tags($Variable);
  break;
  //轉換特殊字元成為HTML實體
  case "htmlspecialchars":
   $Variable=htmlspecialchars($Variable);
  break;
    case "intval":
   $Variable=intval($Variable);
  break;
  default:
  break;
    }
  }
  return  $Variable ;
}

//---------------------------------------------------------------------------------------
$cu_name=SqlFilter($_POST['cu_name'],"trim,addslashes,strip_tags,htmlspecialchars");
//----------------------------------------------------------------------------------------