Posted by Greg Donald on 06/02/05 21:24

On 6/2/05, Sebastian <sebastian@broadbandgaming.net> wrote:
> what is a safe way to clean a post/get before echoing it.
> example. input form, user enters some text, hits enter.

set_magic_quotes_runtime( 0 );

if( get_magic_quotes_gpc() == 0 )
{
$_GET = isset( $_GET ) ? array_map( 'slashes', $_GET ) : array();
$_POST = isset( $_POST ) ? array_map( 'slashes', $_POST ) : array();
$_COOKIE = isset( $_COOKIE ) ? array_map( 'slashes', $_COOKIE ) : array();
}

function slashes( $var )
{
if( is_array( $var ) )
{
return array_map( 'slashes', $var );
}

return addslashes( $var );
}


--
Greg Donald
Zend Certified Engineer
http://destiney.com/

• Next in forum: Exporting to MS Word or Excel
• Prev in forum: Re: [PHP] OO DB in PHP?
• Thread view: Re: [PHP] sanitizing get vars

[Reply to this message]