A new data validation library

From: Date: Wed, 26 Sep 2018 22:06:12 +0000
Subject: A new data validation library
Groups: php.general 
Request: Send a blank email to php-general+get-326567@lists.php.net to get a copy of this message
Hi all, Existing validation libraries aren't suitable for OWASP TOP 10 A:10 compliance. i.e. Validate _all_ inputs including all headers and $_GET. Validate for PHP is suitable for - full input data validation - DbC data validation - business logic data validation https://github.com/yohgaki/validate-php-scr/tree/validate-0.7 Basic Design - Framework - "Validate" is framework, not an out of box library by itself. Provides easy, yet flexible input data validations. - Secure - No insecure defaults. Everything has to be specified explicitly. i.e. White list. - Fast & Simple - Define data validation rules and use them. No code execution for building validation rules. - Easy to use - Simple PHP array rule specification. Plain PHP code for complex inputs. - Native type - Returns natively typed data by default. Eliminates type conversions and helps faster PHP code execution with type hints. It is planned to write this in C for better performance. Feedbacks are welcomed! Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net

« previous php.general (#326567) next »