sanitization
php: two objects from the same class work independent of each other
Good morning, I would like the code in my controller to look something like this: <?php $class = new sanitizeInput()[详细]
2022-12-29 06:47 分类:问答Correct sequence of actions when using Markdown & MySQL?
I want my users to be able to write an article in Markdown, have it stored in the MySQL database (with the option to edit it 开发者_运维问答in the future), and displayed for other users.[详细]
2022-12-29 05:57 分类:问答Strip Javascript on(whatever) events from Code using PHP
I want to strip out all JavaScript from a small snippet (4-6 lines) of HTML, I\'ve read on here before开发者_运维技巧 that its best not to use REGEX on HTML, so if anybody knows a better way, please a[详细]
2022-12-29 04:35 分类:问答php Form to Email sanitizing
im using the following to send a contact us type form, iv looked into security and only found that you need to protect the From: bit of the mail function, as ive hardcoded this does that mean the scri[详细]
2022-12-28 13:13 分类:问答Is there a PHP library that performs MySQL Data Validation and Sanitization According to Column Type?
Do you know of any open source library or framework that can perform some basic validation and escaping functionality for a MySQL Db.[详细]
2022-12-28 01:57 分类:问答Sanitizing strings to make them URL and filename safe?
I am trying to come up with a function that does a good job of sanitizing certain strings so that they are safe to use in the URL (like a post slug) and also safe to use as file names. For example, wh[详细]
2022-12-27 04:41 分类:问答Is preg_match safe enaught in input satinization?
I am building a new web-app, LAMP environment... I am wondering if preg_match can be trusted for user\'s input validation (+ prepared stmt, of course) for all the text-based fields (aka not HTML field[详细]
2022-12-26 06:46 分类:问答How to intercept and pre-process QueryStrings in Asp.Net
We send out registration urls to clients via email. Some of the email clients are turning the url into[详细]
2022-12-24 17:03 分类:问答How much sanatization does this form input need?
Is $username = $_POST[\'username\']; $sanitizedUsername = strip_tags(stripcslashes($username)); enough to prevent malacious sql injections and other types of attacks. If not what else should I use[详细]
2022-12-24 00:14 分类:问答How can I fix this regex to allow a specific string?
This regex comes from Atwood and is used to filter out anchor tags with anything other than the href and a title:[详细]
2022-12-22 22:52 分类:问答