Re: Adding validate_var_array()/validate_input_array() to which version?
| From: | Christian Stadler | Date: | Thu, 04 Aug 2016 01:07:05 +0000 |
| Subject: | Re: Adding validate_var_array()/validate_input_array() to which version? | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-94819@lists.php.net to get a copy of this message | ||
Am 01.08.2016 um 10:23 schrieb Yasuo Ohgaki:
> P.S. It's possible to return array that contains offending values. It
> is not included since users can store whole offending input array.
> Whole input is more useful for attack analysis.
Actually I wanted to suggest exactly that for ppl. who want to give
Feedback to their users, what values failed to validate to the users.
Probably with a fourth optional param, like
$return_invalid = false?
Of course logging is a different topic and should always use the whole
offending input array.
Regards,
Christian Stadler