Re: [PHP] Sterilize user input function

Hi, You might want to have a look at http://www.thewebmasters.net/php/Validator.phtml is a class for validating serveral things. It is a PHP class. You can have a look at the regexps they have used. But as stated before it would be better to check the syntax instead... if it is not a phone numbe

Re: [PHP] Sterilize user input function

On Sunday 09 September 2001 04:46, Kevin wrote: > I think my question could be restated to: What characters are > potentially lethal in user input. I can do the regex. But don't know > what to parse out of the strings. > > would removing \ / . do the trick? You mean http://php.net/addslashes

Re: [PHP] Sterilize user input function

>I think my question could be restated to: What characters are potentially >lethal in user input. I can do the regex. But don't know what to parse out >of the strings. > >would removing \ / . do the trick? Why whould you want to strip things? Check if the input meets a certain requirement.

Re: [PHP] Sterilize user input function

It really depends on what you use the user input for. If you are just storing into a database and splashing it out to a html page later, htmlspecialchars( ) is adequete protection. If this is a filename, then checks for the prefix "http://"; and '..' and quotes in the file name, and a base dire

Re: [PHP] Sterilize user input function

I think my question could be restated to: What characters are potentially lethal in user input. I can do the regex. But don't know what to parse out of the strings. would removing \ / . do the trick? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTE

Re: [PHP] Sterilize user input function

For emails I've seen some nice work somewhere in the annoted manual. I think it's in the chapter about regular expressions.. http://www.php.net/manual/en/function.ereg.php You might not only want to kill anything dangerous.. Checking email address is also handy to prevent your database to be fi

[PHP] Sterilize user input function

I am looking for general a function to that would render user input harmless. I would write my own but don't know what to strip from the input that could make it potentially damaging on linux boxes. I need to accept email and phone numbers. Thanks in advance, Kevin -- PHP General Mailing Li