Am 01.08.2016 um 10:23 schrieb Yasuo Ohgaki: > P.S. It's possible to return array that contains offending values. It > is not included since users can store whole offending input array. > Whole input is more useful for attack analysis.
Actually I wanted to suggest exactly that for ppl. who want to give Feedback to their users, what values failed to validate to the users. Probably with a fourth optional param, like `$return_invalid = false`? Of course logging is a different topic and should always use the whole offending input array. Regards, Christian Stadler -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php