Re: Should I check imput for bad chars in this case?
| From: | mirrys.net | Date: | Thu, 26 Apr 2012 13:59:44 +0000 |
| Subject: | Re: Should I check imput for bad chars in this case? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-317698@lists.php.net to get a copy of this message | ||
Thank you for your help Marco & Simon. No doubt, your code is much
cleaner and better.
One more question, without any filter or something could be my
original code somehow compromised (mean some security bug)? Or rather
was a major problem in the possibility of a script crash?
On 4/26/12, marco@behnke.biz <marco@behnke.biz> wrote:
>
> You definitly should. There were some bugs (even in bigger applications
> like Coppermine f.e.) that have been introduced by clients sending
> manipulated ip oder hostname Strings.
>
> For the IP address simply check if it is a valid IP4 or IP6 tupel. There
> are checks for that.