note 111137 deleted from function.filter-var by aharvey
| From: | aharvey@php.net | Date: | Mon, 21 Jan 2013 01:22:31 +0000 |
| Subject: | note 111137 deleted from function.filter-var by aharvey | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-193281@lists.php.net to get a copy of this message | ||
Note Submitter: php dot net at vizzy dot de
----
seems this function implies false security to some coders....
this function accepts also totally invalid urls. so you should really not believe in it. the regex
in source is also weird and seems to accept almost everything.
this function is almost useless to check for valid urls, esp. userinput!
i wonder how many sites will get hacked where coders believe in php internal check
'features'.
check comment #3 to get an idea of whats possible :)