note 19524 deleted from function.escapeshellarg by didou
| From: | didou@php.net | Date: | Sun, 18 May 2003 04:43:37 +0000 |
| Subject: | note 19524 deleted from function.escapeshellarg by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-48424@lists.php.net to get a copy of this message | ||
Note Submitter: ghopper
----
I suggest that you use some variation of this to clean your user-submitted inputs:
$arg = preg_replace ("/[^A-Za-z0-9]/","",$arg);
This function will remove any characters that you do not expect from the user. Add any legal
characters that you expect in the input to the regular expression.