Comments on: Create a Simple Input Sanitation Function With PHP.

By: Solo

Solo — Sat, 27 Nov 2010 20:22:44 +0000

so, why no mysql_real_escape_string use at all??

By: dESiGNERz BLOG » 120 Tips, Tricks, and Tuts from 2009 Worth your Time

dESiGNERz BLOG » 120 Tips, Tricks, and Tuts from 2009 Worth your Time — Thu, 21 Jan 2010 17:23:31 +0000

[...] Create a Simple Input Sanitation Function With PHP [...]

By: 120 Tips, Tricks, and Tuts from 2009 Worth your Time | Tutorial51

120 Tips, Tricks, and Tuts from 2009 Worth your Time | Tutorial51 — Tue, 29 Dec 2009 11:52:14 +0000

[...] Create a Simple Input Sanitation Function With PHP [...]

By: Neil Skoglund » Blog Archive » 120 Tips, Tricks, and Tuts from 2009 Worth your Time

Tue, 29 Dec 2009 02:24:05 +0000

[...] Create a Simple Input Sanitation Function With PHP [...]

By: Apathy

Apathy — Mon, 11 May 2009 18:06:39 +0000

Right. First off empty() is a really bad choice here, since the function returns false if empty() evaluates to true, and since $num = 0; will make empty($num) return 0, well, you get the point. You’re better of with using $str != “”.

Also, you should be consistent with the syntax of the if and else-clauses by always using {} for increased readability.

Regarding arrays I recommend you taking a look at array_map, which is a really handy function, and will probably save some work with writing array-compatible code.

By: Vasili

Vasili — Sun, 03 May 2009 21:21:31 +0000

I don’t understand what you mean.. If you mean stripping the content between the tags, then no; it just removes the tags (and whatever is in them, ie. attributes).

By: sumit

sumit — Sun, 03 May 2009 18:09:24 +0000

does this work for the items between the tags?

By: Vasili

Vasili — Sun, 03 May 2009 16:36:15 +0000

Well, usually if you’re trying to strip links you aren’t going to strip some depending on attributes – at least I don’t. As for XSS, I have a completely different function to check for XSS.

Thanks for the comment.

By: Shawn Stratton

Shawn Stratton — Sun, 03 May 2009 16:28:39 +0000

The only problem I’m noticing is your regex use with strip tags, the regex fails if there are attributes with the tag and striptags has some issues with said attributes as well. Also this will not protect you against XSS if any of the values you’re using wind up inside of a . Otherwise good work.

By: Drew Douglass

Drew Douglass — Sun, 03 May 2009 04:36:55 +0000

Great article Vasili, simple and effective.

I’m personally a fan of always using curly brackets, but in this situation, it’s just a matter of preference I suppose

Hope to see more like this from you.