Re: PHP class files without <?php at the top
| From: | Ángel González | Date: | Sat, 07 Apr 2012 20:07:07 +0000 |
| Subject: | Re: PHP class files without <?php at the top | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-59441@lists.php.net to get a copy of this message | ||
On 07/04/12 19:29, Rasmus Lerdorf wrote:
> On 04/07/2012 10:23 AM, Ángel González wrote:
>
>> And I like the idea of providing a function for auto escaping <?= echos.
> Turn on your default input filter and all data that comes from the user
> will automatically be escaped.
>
> -Rasmus
I'm not interested in filtering *input* but *output*. I'm of the opinion
that variables should hold their real values up to the last step before
being used in the context which needs escaping (hmtl,, sql...).