note 123233 added to function.filter-var

The note from "hek" about HTML5 having patterns thus alleviating the need to filter in PHP is completely wrong: You still must filter input on the server side. The HTML5 form inputs are client-side, meaning they are completely under the user's control. Only when you receive the data in PHP is it server-side and under your control. Once the data is under your control, then you must filter/sanitize it properly. This is true regardless of server-side language. I would encourage the moderators to remove the note from "hek" because it will mislead people with horrible consequences. Steve ---- Server IP: 208.43.231.9 Probable Submitter: 143.236.90.13 ---- Manual Page -- http://php.net/manual/en/function.filter-var.php Edit -- https://master.php.net/note/edit/123233 Del: integrated -- https://master.php.net/note/delete/123233/integrated Del: useless -- https://master.php.net/note/delete/123233/useless Del: bad code -- https://master.php.net/note/delete/123233/bad+code Del: spam -- https://master.php.net/note/delete/123233/spam Del: non-english -- https://master.php.net/note/delete/123233/non-english Del: in docs -- https://master.php.net/note/delete/123233/in+docs Del: other reasons-- https://master.php.net/note/delete/123233 Reject -- https://master.php.net/note/reject/123233 Search -- https://master.php.net/manage/user-notes.php