What are PHP filters? What kinds of filters are there?
The previous article introduced you to "How to use PHP to write E-mail program files? 》, this article continues to introduce to you what is a PHP filter? What kinds of filters are there? Let’s go together!
#What are PHP filters?
#PHP filters are used to validate and filter data from non-secure sources.
Testing, validating, and filtering user input or custom data is an important part of any web application.
# Filter extensions for PHP are designed to make data filtering easier and faster.
#PHP filters are used to validate and filter data from non-secure sources, such as user input.
Why use filters?
Nearly all web applications rely on external input. This data usually comes from users or other applications (such as web services). By using filters, you can ensure that your application gets the correct input type.
You should always filter external data!
Input filtering is one of the most important application security topics.
What is external data?
Input data from forms
Cookies
Web services data
Server variables
Database query results
Function and Filter
To filter a variable, use one of the following filter functions:
filter_var() - Filter by a specified filter to filter a single variable
filter_var_array() - filter multiple variables with the same or different filters
-
filter_input - Gets an input variable and filters it
filter_input_array - Gets multiple input variables and runs them through the same or different filters Filter
In the following example, we use the filter_var() function to verify an integer:
<?php $int = 123; if(!filter_var($int, FILTER_VALIDATE_INT)) { echo("不是一个合法的整数"); } else { echo("是个合法的整数"); } ?>
The result of running the code is as follows:
Validating and Sanitizing
There are two types of filters:
Validating filter:
Used to validate user input
Strict format rules (such as URL or E-Mail validation)
Returns the expected type if successful or FALSE if failed
##Sanitizing filter:
- Used to allow or prohibit specified characters in a string
- No data format rules
- Always returns a string
- # Options and flags Options and flags are used to add additional filtering options to the specified filter.
- Different filters have different options and flags.
<?php $var=300; $int_options = array( "options"=>array ( "min_range"=>0, "max_range"=>256 ) ); if(!filter_var($var, FILTER_VALIDATE_INT, $int_options)) { echo("不是一个合法的整数"); } else { echo("是个合法的整数"); } ?>Just like the code above, options must be put into a related array called "options". If using flags, they don't need to be in an array. Since the integer is "300", which is not within the specified range, the output of the above code will be The result of running the code is as follows:
Filter multiple inputs
<?php $filters = array ( "name" => array ( "filter"=>FILTER_SANITIZE_STRING ), "age" => array ( "filter"=>FILTER_VALIDATE_INT, "options"=>array ( "min_range"=>1, "max_range"=>120 ) ), "email"=> FILTER_VALIDATE_EMAIL ); $result = filter_input_array(INPUT_GET, $filters); if (!$result["age"]) { echo("年龄必须在 1 到 120 之间。<br>"); } elseif(!$result["email"]) { echo("E-Mail 不合法<br>"); } else { echo("输入正确"); } ?>
The result is as follows:
Explanation of examples:
The above example has three input variables (name, age and email) transmitted through the "GET" method: Set an array that contains the name of the input variable and the filter for the specified input variable
If this parameter is the ID of a single filter, then the specified filter will filter all values in the input array.
If the parameter is an array, then the array must follow the following rules:
Must be an associative array in which the input variables are the keys of the array ( For example, "age" input variable)
The value of this array must be the ID of the filter, or an array specifying filters, flags and options
Recommended learning : "PHP Video Tutorial"
The above is the detailed content of What are PHP filters? What kinds of filters are there?. For more information, please follow other related articles on the PHP Chinese website!

The article compares ACID and BASE database models, detailing their characteristics and appropriate use cases. ACID prioritizes data integrity and consistency, suitable for financial and e-commerce applications, while BASE focuses on availability and

The article discusses securing PHP file uploads to prevent vulnerabilities like code injection. It focuses on file type validation, secure storage, and error handling to enhance application security.

Article discusses best practices for PHP input validation to enhance security, focusing on techniques like using built-in functions, whitelist approach, and server-side validation.

The article discusses strategies for implementing API rate limiting in PHP, including algorithms like Token Bucket and Leaky Bucket, and using libraries like symfony/rate-limiter. It also covers monitoring, dynamically adjusting rate limits, and hand

The article discusses the benefits of using password_hash and password_verify in PHP for securing passwords. The main argument is that these functions enhance password protection through automatic salt generation, strong hashing algorithms, and secur

The article discusses OWASP Top 10 vulnerabilities in PHP and mitigation strategies. Key issues include injection, broken authentication, and XSS, with recommended tools for monitoring and securing PHP applications.

The article discusses strategies to prevent XSS attacks in PHP, focusing on input sanitization, output encoding, and using security-enhancing libraries and frameworks.

The article discusses the use of interfaces and abstract classes in PHP, focusing on when to use each. Interfaces define a contract without implementation, suitable for unrelated classes and multiple inheritance. Abstract classes provide common funct


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.

Atom editor mac version download
The most popular open source editor

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

VSCode Windows 64-bit Download
A free and powerful IDE editor launched by Microsoft

Zend Studio 13.0.1
Powerful PHP integrated development environment