* Thus wrote Sophie Mattoug ([EMAIL PROTECTED]): > Joseph Szobody wrote: > > >I'm taking some user input, and creating a folder on the server. I'm > >already > >replacing " " with "_", and stripping out a few known illegal characters > >(', > >", /, \, etc). I need to be sure that I'm stripping out every character > >that > >cannot be used for a folder name. What's the best way to do this? Do I have > >to manually come up with a comprehensive list of illegal characters, and > >then str_replace() them one by one? > > > > I think you should use the reverse solution : have a list of authorized > characters and strip out all others ones.
I'd approach it the same way. preg_replace('/[^A-Za-z0-9_]/', '_', $dirname); Curt -- "My PHP key is worn out" PHP List stats since 1997: http://zirzow.dyndns.org/html/mlists/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php