Re: security/sql issues with php
| From: | Robert Cummings | Date: | Wed, 21 Sep 2005 23:43:48 +0000 |
| Subject: | Re: security/sql issues with php | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-222934@lists.php.net to get a copy of this message | ||
On Wed, 2005-09-21 at 19:21, Chris Shiflett wrote:
> Mikey wrote:
> > I have found that adding 0 and then running is_int() usually works.
>
> You mean always works. :-) Casting something to an integer and then
> checking to see if it's an integer doesn't tell you anything useful:
>
> <?php
>
> $int = 'this is not an int';
> $int += 0;
>
> if (is_int($int))
> {
> echo '$int is an integer';
> }
>
> ?>
>
> You're always going to see "$int is an integer" on the screen, even when
> $int is clearly not. As I mentioned, ctype_digit() fits the bill nicely:
Not if it's a float.
<?php
$int = '2.333';
$int += 0;
if (is_int($int))
{
echo '$int is an integer';
}
else
{
echo '$int is probably a float :)';
}
?>
Cheers,
Rob.
--
.------------------------------------------------------------.
| InterJinn Application Framework - http://www.interjinn.com
|
:------------------------------------------------------------:
| An application and templating framework for PHP. Boasting |
| a powerful, scalable system for accessing system services |
| such as forms, properties, sessions, and caches. InterJinn |
| also provides an extremely flexible architecture for |
| creating re-usable components quickly and easily. |
`------------------------------------------------------------'