note 75849 added to function.is-numeric
| From: | root at localhost dot de | Date: | Mon, 18 Jun 2007 20:03:53 +0000 |
| Subject: | note 75849 added to function.is-numeric | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-127704@lists.php.net to get a copy of this message | ||
this seems not to be binary safe.
I think it would be helpfull if it was ...
Because checking for a GET Var like this
if(!is_numeric($_GET['article_to_fetch'])) die ("dont try to inject things");
// do something important like reading articles and users ...
could be really fatal if we only check with "is_numeric"
or am i wrong ?
----
Server IP: 69.147.83.197
Probable Submitter: 77.180.146.157
----
Manual Page -- http://www.php.net/manual/en/function.is-numeric.php
Edit -- https://master.php.net/note/edit/75849
Del: integrated -- https://master.php.net/note/delete/75849/integrated
Del: useless -- https://master.php.net/note/delete/75849/useless
Del: bad code -- https://master.php.net/note/delete/75849/bad+code
Del: spam -- https://master.php.net/note/delete/75849/spam
Del: non-english -- https://master.php.net/note/delete/75849/non-english
Del: in docs -- https://master.php.net/note/delete/75849/in+docs
Del: other reasons-- https://master.php.net/note/delete/75849
Reject -- https://master.php.net/note/reject/75849
Search -- https://master.php.net/manage/user-notes.php