function existSqlKeywords($inputStr)
{
    //Add space to position 0, and last pos
    $inputStr = '$ ' . $inputStr . ' ';
    //$ is required due to . properties.
    //Make all same case
    $inputStr = strtolower($inputStr);
    //INSERT
    $list = strpos_r($inputStr, " insert ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //SELECT
    $list = strpos_r($inputStr, " select ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //CREATE
    $list = strpos_r($inputStr, " create ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //UPDATE
    $list = strpos_r($inputStr, " update ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //DELETE
    $list = strpos_r($inputStr, " delete ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //DROP
    $list = strpos_r($inputStr, " drop ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //JOIN
    $list = strpos_r($inputStr, " join ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    //GRANT
    $list = strpos_r($inputStr, " grant ");
    if ($list !== false) {
        if (count($list) != 0) {
            return true;
        }
    }
    return false;
}
Example #2
0
<?php

$file = file_get_contents('v.txt');
// $words = preg_split("#\r?\n#", $file, -1, PREG_SPLIT_NO_EMPTY);
#Added to escape metacharacters as mentioned by @ridgerunner
function strpos_r($haystack, $needle)
{
    $seeks = array();
    while ($seek = strrpos($haystack, $needle)) {
        array_push($seeks, $seek);
        $haystack = substr($haystack, 0, $seek);
    }
    return $seeks;
}
echo "<br>'php' :";
var_dump(strpos_r($file, "<?php"));
echo "<br><br><hr>";
echo "<br>'?>' :";
var_dump(strpos_r($file, "?>"));
echo "<br><br><hr>";
echo "<br>'<=?' :";
var_dump(strpos_r($file, "<? "));