Input validation with filter functions
Introduction
Although PHP has a lot of filter functions available, I found that still to many people are using (often incorrect) regular expressions to validate user input. The filter extension is simple, standard available and will fulfill the common validations. Below some pratical examples and things to consider when working with PHP filter functions.
Which are available?
Below a shameless copy paste of the PHP documentation.
- filter_has_var — Checks if variable of specified type exists
- filter_id — Returns the filter ID belonging to a named filter
- filter_input_array — Gets external variables and optionally filters them
- filter_input — Gets a specific external variable by name and optionally filters it
- filter_list — Returns a list of all supported filters
- filter_var_array — Gets multiple variables and optionally filters them
- filter_var — Filters a variable with a specified filter
Pratical use
Sanitizing
“Filter input escape output” every developer knows this but it is a repetitive job but with the filter extension filterering input became a lot easier. When you correctly filter input you drastically lower the change of application vulnerabilities.
Sanitizing a single variable
$sText = ' ';
$sText = filter_var($sText, FILTER_SANITIZE_STRING);
echo $sText; // This is a comment from a alert("scriptkiddie");
Sanitizing multiple variables, same principle as above but with an array, the filter will sanitize all values inside the array
filter_var_array($_POST, FILTER_SANITIZE_STRING);
Validating an email address
if(filter_var($sEmail, FILTER_VALIDATE_EMAIL) === false) {
$this->addError('Invalid email address', $sEmail);
}
Validation a complete array
Validating all your data at once with a single filter will make your code clear, all in one place and is more easy to maintain an example below.
$aData = array(
'student' => 'Sjoerd Maessen',
'class' => '21',
'grades' => array(
'math' => 9,
'geography' => 66,
'gymnastics' => 7.5
)
);
$aValidation = array(
'student' => FILTER_SANITIZE_STRING,
'class' => FILTER_VALIDATE_INT,
'grades' => array(
'filter' => FILTER_VALIDATE_INT,
'flags' => FILTER_FORCE_ARRAY,
'options'=> array('min_range'=>0, 'max_range'=>10))
);
echo '';
var_dump(filter_var_array($aData, $aValidation));
/*array(3) {
["student"]=>
string(14) "Sjoerd Maessen"
["class"]=>
int(21) // Thats strange, my string is converted
["grades"]=>
array(3) {
["math"]=>
int(9)
["geography"]=>
bool(false) // 66 is > 10
["gymnastics"]=>
bool(false) // 7.5 is not an int
}
}*/
Note: okay I did not expect that the string '21' would validate true against FILTER_VALIDATE_INT, after some more testing I also noticed that min_range and max_range only work with FILTER_VALIDATE_INT, when using floats or scalars the options are just ignored, so be aware!
The sanitizing examples above can be made easily more restrictive by adding flags like FILTER_FLAG_STRIP_LOW to the sanitize filter, FILTER_FLAG_STRIP_LOW will for example strip all characters that have a numerical value below 32.
Things to consider
Although the filter functions are some time available some of them aren't flawless, at some points the documentation is missing or very unclear. Another example is the filter_var validation for IPv6 addresses. (see bug report #50117). So it is always a good thing to check if the filter is really doing what you expect it does. Write testcases before using. If you use it correctly you can write your validations in the blink of an eye, and this extension will be your new best friend.
Links
Filter functions
Filter flags
https://t.me/Official_1xbet_1xbet/s/1002
AlbertEnark
16 Oct 25 at 7:28 pm
https://t.me/Official_1xbet_1xbet/s/821
AlbertEnark
16 Oct 25 at 7:29 pm
https://t.me/Official_1xbet_1xbet/s/1138
AlbertEnark
16 Oct 25 at 7:30 pm
hip
MichaelSig
16 Oct 25 at 7:34 pm
discreet ED pills delivery in the US: cialis – safe online pharmacy for Cialis
Andresstold
16 Oct 25 at 7:39 pm
https://t.me/Official_1xbet_1xbet/s/162
AlbertEnark
16 Oct 25 at 7:43 pm
https://t.me/Official_1xbet_1xbet/s/369
AlbertEnark
16 Oct 25 at 7:54 pm
https://t.me/Official_1xbet_1xbet/s/328
AlbertEnark
16 Oct 25 at 7:55 pm
https://t.me/Official_1xbet_1xbet/s/479
AlbertEnark
16 Oct 25 at 8:08 pm
https://t.me/Official_1xbet_1xbet/s/420
AlbertEnark
16 Oct 25 at 8:20 pm
https://t.me/Official_1xbet_1xbet/s/119
AlbertEnark
16 Oct 25 at 8:21 pm
https://t.me/Official_1xbet_1xbet/s/823
AlbertEnark
16 Oct 25 at 8:22 pm
betting offers Online betting promo codes give you the edge you need. From sign-up bonuses to reload offers, enjoy extra funds and boosted odds. Start your winning online journey today!
Caseypeash
16 Oct 25 at 8:25 pm
https://t.me/Official_1xbet_1xbet/s/1137
AlbertEnark
16 Oct 25 at 8:34 pm
https://t.me/Official_1xbet_1xbet/s/136
AlbertEnark
16 Oct 25 at 8:45 pm
https://t.me/Official_1xbet_1xbet/s/541
AlbertEnark
16 Oct 25 at 8:46 pm
https://tadalifepharmacy.shop/# discreet ED pills delivery in the US
MervinWoorE
16 Oct 25 at 8:47 pm
https://t.me/Official_1xbet_1xbet/s/572
AlbertEnark
16 Oct 25 at 8:48 pm
https://t.me/Official_1xbet_1xbet/s/240
AlbertEnark
16 Oct 25 at 9:00 pm
https://t.me/Official_1xbet_1xbet/s/485
AlbertEnark
16 Oct 25 at 9:11 pm
https://t.me/Official_1xbet_1xbet/s/970
AlbertEnark
16 Oct 25 at 9:11 pm
https://t.me/Official_1xbet_1xbet/s/700
AlbertEnark
16 Oct 25 at 9:13 pm
https://t.me/Official_1xbet_1xbet/s/1401
AlbertEnark
16 Oct 25 at 9:25 pm
https://t.me/Official_1xbet_1xbet/s/76
AlbertEnark
16 Oct 25 at 9:36 pm
https://t.me/Official_1xbet_1xbet/s/1379
AlbertEnark
16 Oct 25 at 9:37 pm
https://t.me/Official_1xbet_1xbet/s/852
AlbertEnark
16 Oct 25 at 9:39 pm
https://t.me/Official_1xbet_1xbet/s/1228
AlbertEnark
16 Oct 25 at 9:52 pm
https://t.me/Official_1xbet_1xbet/s/1031
AlbertEnark
16 Oct 25 at 10:04 pm
https://t.me/Official_1xbet_1xbet/s/1218
AlbertEnark
16 Oct 25 at 10:06 pm
https://t.me/Official_1xbet_1xbet/s/595
AlbertEnark
16 Oct 25 at 10:19 pm
Estou louco por Richville Casino, oferece uma aventura de cassino que brilha como um lustre de cristal. As opcoes de jogo no cassino sao ricas e reluzentes, oferecendo sessoes de cassino ao vivo que brilham como joias. O servico do cassino e confiavel e majestoso, com uma ajuda que reluz como ouro. As transacoes do cassino sao simples como abrir um cofre, as vezes mais giros gratis no cassino seria opulento. No fim das contas, Richville Casino vale a pena explorar esse cassino com urgencia para os jogadores que adoram apostar com classe! E mais a plataforma do cassino reluz com um estilo digno de um palacio, o que torna cada sessao de cassino ainda mais reluzente.
richville place|
zanybubblebear6zef
16 Oct 25 at 10:23 pm
Adoro o swing de RioPlay Casino, oferece uma aventura de cassino que pulsa como um tamborim. A gama do cassino e simplesmente um bloco de carnaval, com slots de cassino tematicos de festa. A equipe do cassino entrega um atendimento que e puro carnaval, com uma ajuda que e puro gingado. O processo do cassino e limpo e sem tropecos, mas queria mais promocoes de cassino que botam pra quebrar. No fim das contas, RioPlay Casino garante uma diversao de cassino que e uma folia total para os folioes do cassino! Alem disso a plataforma do cassino brilha com um visual que e puro samba, o que torna cada sessao de cassino ainda mais animada.
roblox lite rioplay|
wildpineapplegator3zef
16 Oct 25 at 10:28 pm
Sou viciado no role de JabiBet Casino, tem uma vibe de jogo que e puro tsunami. Tem uma enxurrada de jogos de cassino irados, incluindo jogos de mesa de cassino cheios de vibe. Os agentes do cassino sao rapidos como uma onda, garantindo suporte de cassino direto e sem tempestade. Os saques no cassino sao velozes como um redemoinho, as vezes mais bonus regulares no cassino seria top. Resumindo, JabiBet Casino e um cassino online que e uma onda gigante para os viciados em emocoes de cassino! E mais a interface do cassino e fluida e cheia de energia oceanica, aumenta a imersao no cassino como uma onda gigante.
jabibet apk|
zippyoctopus4zef
16 Oct 25 at 10:31 pm
https://t.me/Official_1xbet_1xbet/s/908
AlbertEnark
16 Oct 25 at 10:32 pm
https://t.me/Official_1xbet_1xbet/s/1079
AlbertEnark
16 Oct 25 at 10:35 pm
https://t.me/Official_1xbet_1xbet/s/445
AlbertEnark
16 Oct 25 at 10:47 pm
Tenho uma paixao ardente por PlayPIX Casino, oferece um prazer carnavalesco. A variedade de titulos e deslumbrante, oferecendo jogos de mesa imersivos. 100% ate €500 + 200 rodadas gratis. Os agentes respondem com rapidez, oferecendo respostas claras. Os ganhos chegam sem demora, as vezes ofertas mais generosas dariam um toque especial. Em sintese, PlayPIX Casino e indispensavel para jogadores para jogadores em busca de adrenalina ! Vale notar o design e moderno e vibrante, facilita uma imersao total. Igualmente impressionante os pagamentos seguros em cripto, proporciona vantagens personalizadas.
Saber mais|
SambaRiserX9zef
16 Oct 25 at 10:49 pm
Sou viciado em BETesporte Casino, proporciona uma aventura competitiva. Ha uma multidao de jogos emocionantes, com slots modernos e tematicos. Fortalece seu saldo inicial. O acompanhamento e impecavel, com suporte preciso e rapido. Os pagamentos sao seguros e fluidos, as vezes ofertas mais generosas dariam um toque especial. Em sintese, BETesporte Casino garante diversao a cada rodada para entusiastas de jogos modernos ! Vale destacar a plataforma e visualmente impactante, adiciona um toque de estrategia. Outro destaque as opcoes variadas de apostas esportivas, assegura transacoes confiaveis.
Ler mais|
FutebolFogoM4zef
16 Oct 25 at 10:51 pm
https://t.me/Official_1xbet_1xbet/s/1492
AlbertEnark
16 Oct 25 at 10:59 pm
https://t.me/Official_1xbet_1xbet/s/968
AlbertEnark
16 Oct 25 at 11:00 pm
https://t.me/Official_1xbet_1xbet/s/387
AlbertEnark
16 Oct 25 at 11:02 pm
https://t.me/Official_1xbet_1xbet/s/397
AlbertEnark
16 Oct 25 at 11:14 pm
https://t.me/Official_1xbet_1xbet/s/1204
AlbertEnark
16 Oct 25 at 11:27 pm
https://t.me/Official_1xbet_1xbet/s/147
AlbertEnark
16 Oct 25 at 11:28 pm
https://t.me/Official_1xbet_1xbet/s/1054
AlbertEnark
16 Oct 25 at 11:29 pm
safe online pharmacy for Cialis: safe online pharmacy for Cialis – TadaLife Pharmacy
AndrewPal
16 Oct 25 at 11:30 pm
https://t.me/Official_1xbet_1xbet/s/137
AlbertEnark
16 Oct 25 at 11:42 pm
Деревянные лестницы https://rosslestnica.ru под заказ в любом стиле. Прямые, винтовые, маршевые конструкции из массива. Замеры, 3D-проект, доставка и установка. Гарантия качества и точности исполнения.
rosslestnica-390
16 Oct 25 at 11:51 pm
https://t.me/Official_1xbet_1xbet/s/895
AlbertEnark
16 Oct 25 at 11:53 pm
Лестницы в Москве https://лестницы-в-москве.рф продажа и изготовление под заказ. Прямые, винтовые, модульные и чердачные конструкции. Качество, гарантия и монтаж по всем стандартам.
lestnicy-v-moskve-407
16 Oct 25 at 11:56 pm