s_get Get_ id deny_words array union char select group order benchmark

1
2
3
4
5
6
$s_get=$Get_['id']
$deny_words = array("union","char","select","group","order","benchmark", "%", "_");
str_replace($deny_words, "", strtolower($s_get), $count);
if ($count > 0) {
exit('404');
$s_get= "SELECT user FROM userslist WHERE userid=".intval($_GET['id']);