note 75849 rejected from function.is-numeric by nlopess
| From: | nlopess@php.net | Date: | Tue, 19 Jun 2007 12:23:49 +0000 |
| Subject: | note 75849 rejected from function.is-numeric by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-127749@lists.php.net to get a copy of this message | ||
Note Submitter: root at localhost dot de
----
this seems not to be binary safe.
I think it would be helpfull if it was ...
Because checking for a GET Var like this
if(!is_numeric($_GET['article_to_fetch'])) die ("dont try to inject things");
// do something important like reading articles and users ...
could be really fatal if we only check with "is_numeric"
or am i wrong ?