Home  • Programming • PHP

Cleaning variables that are submitted via web forms

Variables that are submitted via web forms always need to be cleaned/sanitized before use in any way, to prevent against all kinds of different malicious intent.
   
 function clean($value) {

           // If magic quotes not turned on add slashes.
           if(!get_magic_quotes_gpc())

           // Adds the slashes.
           { $value = addslashes($value); }

           // Strip any tags from the value.
           $value = strip_tags($value);

           // Return the value out of the function.
           return $value;

    }
Use
    $sample = "<a href='#'>test</a>";
    $sample = clean($sample);
    echo $sample;

Comments 0


Copyright © 2025. Powered by Intellect Software Ltd