| Re: Simpler way to validate form fields? [message #179795 is a reply to message #179793] |
Wed, 05 December 2012 10:36   |
Gilles Ganault
Messages: 27
Registered: September 2010
Karma:
|
Junior Member |
|
|
On Wed, 05 Dec 2012 10:56:24 +0100, "M. Strobel"
<sorry_no_mail_here(at)nowhere(dot)dee> wrote:
> Too basic. My user input reader is
>
> function getStringFromForm($key, $l=255, $val=null) {
> return (isset($_REQUEST[$key])) ?
> filter_var(substr($_REQUEST[$key],0,$l), FILTER_SANITIZE_STRING) :
> $val;
> }
>
[...]
> I read $_REQUEST, because the first thing my dispatcher does is a check for GET/POST,
> and POST form values can be as easily manipulated as get values. So EVERY string
> input uses this function.
Thanks much for the code. I'm not sure I understand what you mean
about checking for GET/POST. Do you mean this?
============
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
//Call getStringFromForm, getEmailFromForm, and getIntFromForm
//for each form field
}
============
?
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]