```php /** * html过滤 * @param array|object $_date * @return string */ function htmlString($_date) { if (is_array($_date)) { foreach ($_date as $_key=>$_value) { $_string[$_key] = Tool::htmlString($_value); //递归 } } elseif (is_object($_date)) { foreach ($_date as $_key=>$_value) { $_string->$_key = Tool::htmlString($_value); //递归 } } else { $_string = htmlspecialchars($_date); } return $_string; } /** * 数据库输入过滤 * @param string $_data * @return string */ function mysqlString($_data) { $_data = trim($_data); return !GPC ? addcslashes($_data) : $_data; } ```