Re: sanitizing get vars
| From: | Greg Donald | Date: | Thu, 02 Jun 2005 18:24:16 +0000 |
| Subject: | Re: sanitizing get vars | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-216255@lists.php.net to get a copy of this message | ||
On 6/2/05, Sebastian <sebastian@broadbandgaming.net> wrote:
> what is a safe way to clean a post/get before echoing it.
> example. input form, user enters some text, hits enter.
set_magic_quotes_runtime( 0 );
if( get_magic_quotes_gpc() == 0 )
{
$_GET = isset( $_GET ) ? array_map( 'slashes', $_GET ) : array();
$_POST = isset( $_POST ) ? array_map( 'slashes', $_POST ) : array();
$_COOKIE = isset( $_COOKIE ) ? array_map( 'slashes', $_COOKIE ) : array();
}
function slashes( $var )
{
if( is_array( $var ) )
{
return array_map( 'slashes', $var );
}
return addslashes( $var );
}
--
Greg Donald
Zend Certified Engineer
http://destiney.com/