PHP Spoofchecker类

Because Unicode contains such a large number of characters and
incorporates the varied writing systems of the world,incorrect usage
can expose programs or systems to possible security attacks. This
document specifies mechanisms that can be used to detect possible
security problems.

这是我使用Spoofchecker类的简短示例代码.我自己还没有将它用于真实网站,但我认为当你需要从用户输入生成和显示来自URL的外部链接时,它会很有用.如果恶意的人试图将其他访问者带到虚假网站而不是谷歌,Paypal,URL缩短等等,您可以取消链接,或拒绝其提交.

if(!extension_loaded('intl') || !class_exists("Spoofchecker")) {
    exit ('turn on php_intl extension first');
}

$checker = new Spoofchecker();

// false: all letters are in ASCII
var_dump($checker->isSuspicious("goog1e.com"));
// true: the first Cyrillic letter is from different set
var_dump($checker->isSuspicious("Рaypal.com"));

// true: digit one instead of small L
var_dump(
    $checker->areConfusable(
        'google.com','goog1e.com'
    )
);

// false: digit zero and small O are not confusable
var_dump(
    $checker->areConfusable(
        'google.com','g00g1e.com'
    )
);

// true: Cyrillic letter instead of P
var_dump(
    $checker->areConfusable(
        'Рaypal.com','Paypal.com'
    )
);

// true: Japanese Katakana and Hiragana 'he'
var_dump(
    $checker->areConfusable(
        'ヘいせい.com','ヘいせい.com'
    )
);

// true: identical detected as confusable so you might check === first
var_dump(
    $checker->areConfusable(
        'google.com','google.com'
    )
);

您可以在this table查看哪些字符被认为是可混淆的.