PHP對全局變量_GET、_POST中特殊字符的過濾

  $sVariablesOrder = ini_get( 'variables_order' );
  
  $request = array();
  
  //過濾不安全數據
  for ( $i = 0; $i < strlen( $sVariablesOrder ); $i++ ){
   $cVariableFlat = strtolower( $sVariablesOrder[$i] );
   
   switch ( $cVariableFlat ){
    case 'e':
     
     $filtered = filter_input_array ( INPUT_ENV, FILTER_SANITIZE_SPECIAL_CHARS );
     break;
     
    case 'g':
     
     $filtered = filter_input_array ( INPUT_GET, FILTER_SANITIZE_SPECIAL_CHARS );
     break;
    
    case 'p':
     
     $filtered = filter_input_array ( INPUT_POST, FILTER_SANITIZE_SPECIAL_CHARS );
     break;
     
    case 'c':
     
     $filtered = filter_input_array ( INPUT_COOKIE, FILTER_SANITIZE_SPECIAL_CHARS );
     break;
     
    case 's':
     
     $filtered = filter_input_array ( INPUT_SERVER, FILTER_SANITIZE_SPECIAL_CHARS );
     break;
    
   }
   
   if ( !empty( $filtered ) ){
        $request = array_merge( $request, $filtered );
   }   
   
  }