filter-var

Why does PHP filter_var say that this is a valid email address?

由 我的未来我决定 提交于 2019-12-08 15:53:42
问题 I use the filter_var PHP function to validate email address when a user signs up to my site. I use this code from the post: $email = filter_var($_POST['email'], FILTER_VALIDATE_EMAIL); then later I do: if(!$email) { // return to the form } else { // send registration info } now when I var_dump($email) , I get the output: string(23) "user."name"@example.com" I would like to know why this does not return false. I think the double quotes are not acceptable, so why does PHP say it’s valid? 回答1:

Editing form to sanitize/validate phone number

由 本秂侑毒 提交于 2019-12-05 04:31:05
I have very limited experience with PHP and I'm really hoping someone can help me. What I want to do is sanitize/validate the phone number input so that only numbers are allowed. I think I need to use FILTER_SANITIZE_NUMBER_INT but I'm not sure where or how to use it. Here is my code: <?php // Replace the email address with the one that should receive the contact form inquiries. define('TO_EMAIL', '########'); $aErrors = array(); $aResults = array(); /* Functions */ function stripslashes_if_required($sContent) { if(get_magic_quotes_gpc()) { return stripslashes($sContent); } else { return

Validating non-private IP addresses with PHP

由 青春壹個敷衍的年華 提交于 2019-12-03 12:18:25
I'm trying to check whether or not an IP address is an internal-only (i.e. private) IP, but I'm getting a curious result: filter_var('173.194.66.94', FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE); // returns 173.194.66.94 filter_var('192.168.0.1', FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE); // returns false filter_var('127.0.0.1', FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE); // returns 127.0.0.1? Surely 127.0.0.1 counts as a private IP? I found this bug report from 2010 which reports this as an issue, but it's marked as fixed. Is this a regression, or am I misunderstanding what this

filter_var vs htmlentities vs htmlspecialchars

由 喜夏-厌秋 提交于 2019-12-01 02:41:23
Disclaimer This is not a question about whether we should be escaping for database input. This is strictly looking at the technical differences between the three functions in the title. There is this question discussing the difference between htmlentities() and htmlspecialchars() . But, it doesn't really discuss filter_var() and the information I found on Google was more along the lines of "Make sure you escape user input before it is echo'd!" My questions are: Why are htmlspecialchars() and htmlentities() commonly used over filter_var() ? Is there some performance hit from using filter_var()

filter_var using FILTER_VALIDATE_REGEXP

由 早过忘川 提交于 2019-11-30 22:33:43
问题 I'm practicing my beginner php skills and would like to know why this script always returns FALSE? What am i doing wrong? $namefields = '/[a-zA-Z\s]/'; $value = 'john'; if (!filter_var($value,FILTER_VALIDATE_REGEXP,$namefields)){ $message = 'wrong'; echo $message; }else{ $message = 'correct'; echo $message; } 回答1: The regexp should be in an options array. $string = "Match this string"; var_dump( filter_var( $string, FILTER_VALIDATE_REGEXP, array( "options" => array("regexp"=>"/^M(.*)/") ) ) )

filter_var vs htmlentities vs htmlspecialchars

由 ぃ、小莉子 提交于 2019-11-30 22:15:01
问题 Disclaimer This is not a question about whether we should be escaping for database input. This is strictly looking at the technical differences between the three functions in the title. There is this question discussing the difference between htmlentities() and htmlspecialchars(). But, it doesn't really discuss filter_var() and the information I found on Google was more along the lines of "Make sure you escape user input before it is echo'd!" My questions are: Why are htmlspecialchars() and

PHP filter_var() - FILTER_VALIDATE_URL

由 耗尽温柔 提交于 2019-11-29 10:45:59
The FILTER_VALIDATE_URL filter seems to have some trouble validating non-ASCII URLs: var_dump(filter_var('http://pt.wikipedia.org/wiki/', FILTER_VALIDATE_URL)); // http://pt.wikipedia.org/wiki/ var_dump(filter_var('http://pt.wikipedia.org/wiki/Guimarães', FILTER_VALIDATE_URL)); // false Why isn't the last URL correctly validated? And what are the possible workarounds? Running PHP 5.3.0. I'd also like to know where I can find the source code of the FILTER_VALIDATE_URL validation filter. The parsing starts here: http://svn.php.net/viewvc/php/php-src/trunk/ext/filter/logical_filters.c?view=markup

Does FILTER_VALIDATE_EMAIL make a string safe for insertion in database?

由 北战南征 提交于 2019-11-28 13:46:45
$str = '"mynam@blabl"@domanin.com'; filter_var($str, FILTER_VALIDATE_EMAIL);//return valid email. the above email returns true... Fair enough that RFC 2822 says it's a legal email address. my question is if you validate an email using the above could an email carry sql injections that can harm the db even though you have filtered it with filter_var? my question is if you validate an email using the above could an email carry sql injections that can harm the db even though you have filtered it with filter_var? filter_var is not a replacement for database specific sanitation like mysql_real

PHP filter_var() - FILTER_VALIDATE_URL

由 心不动则不痛 提交于 2019-11-28 03:57:16
问题 The FILTER_VALIDATE_URL filter seems to have some trouble validating non-ASCII URLs: var_dump(filter_var('http://pt.wikipedia.org/wiki/', FILTER_VALIDATE_URL)); // http://pt.wikipedia.org/wiki/ var_dump(filter_var('http://pt.wikipedia.org/wiki/Guimarães', FILTER_VALIDATE_URL)); // false Why isn't the last URL correctly validated? And what are the possible workarounds? Running PHP 5.3.0. I'd also like to know where I can find the source code of the FILTER_VALIDATE_URL validation filter. 回答1:

Does FILTER_VALIDATE_EMAIL make a string safe for insertion in database?

由 大憨熊 提交于 2019-11-27 07:52:59
问题 $str = '"mynam@blabl"@domanin.com'; filter_var($str, FILTER_VALIDATE_EMAIL);//return valid email. the above email returns true... Fair enough that RFC 2822 says it's a legal email address. my question is if you validate an email using the above could an email carry sql injections that can harm the db even though you have filtered it with filter_var? 回答1: my question is if you validate an email using the above could an email carry sql injections that can harm the db even though you have
订阅 filter-var