note 111137 added to function.filter-var
| From: | php dot net at vizzy dot de | Date: | Fri, 18 Jan 2013 12:49:48 +0000 |
| Subject: | note 111137 added to function.filter-var | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-193203@lists.php.net to get a copy of this message | ||
seems this function implies false security to some coders....
this function accepts also totally invalid urls. so you should really not believe in it. the regex
in source is also weird and seems to accept almost everything.
this function is almost useless to check for valid urls, esp. userinput!
i wonder how many sites will get hacked where coders believe in php internal check
'features'.
check comment #3 to get an idea of whats possible :)
----
Server IP: 69.147.83.199
Probable Submitter: 79.216.196.159
----
Manual Page -- http://php.net/manual/en/function.filter-var.php
Edit -- https://master.php.net/note/edit/111137
Del: integrated -- https://master.php.net/note/delete/111137/integrated
Del: useless -- https://master.php.net/note/delete/111137/useless
Del: bad code -- https://master.php.net/note/delete/111137/bad+code
Del: spam -- https://master.php.net/note/delete/111137/spam
Del: non-english -- https://master.php.net/note/delete/111137/non-english
Del: in docs -- https://master.php.net/note/delete/111137/in+docs
Del: other reasons-- https://master.php.net/note/delete/111137
Reject -- https://master.php.net/note/reject/111137
Search -- https://master.php.net/manage/user-notes.php