1) Use in built functions
\nfilter_input, filter_var, filter_input_array <\/p>\n
$search_html = filter_input(INPUT_GET, ‘search’, FILTER_SANITIZE_SPECIAL_CHARS);<\/p>\n
$args = array(
\n ‘product_id’ => FILTER_SANITIZE_ENCODED,
\n ‘component’ => array(‘filter’ => FILTER_VALIDATE_INT,
\n ‘flags’ => FILTER_REQUIRE_ARRAY,
\n ‘options’ => array(‘min_range’ => 1, ‘max_range’ => 10)
\n ),
\n ‘versions’ => FILTER_SANITIZE_ENCODED,
\n ‘doesnotexist’ => FILTER_VALIDATE_INT,
\n ‘testscalar’ => array(
\n ‘filter’ => FILTER_VALIDATE_INT,
\n ‘flags’ => FILTER_REQUIRE_SCALAR,
\n ),
\n ‘testarray’ => array(
\n ‘filter’ => FILTER_VALIDATE_INT,
\n ‘flags’ => FILTER_REQUIRE_ARRAY,
\n )<\/p>\n
);
\n$myinputs = filter_input_array(INPUT_POST, $args);<\/p>\n
2) htmlspecialchars()
\nThe htmlspecialchars() function converts special characters to HTML entities. This means that it will replace HTML characters like < and > with < and >. This prevents attackers from exploiting the code by injecting HTML or Javascript code (Cross-site Scripting attacks) in forms.<\/p>\n
3) stripslashes($data)<\/p>\n
4) Use PHP Data Objects (PDO) for binding query parameters and prepared statements to avoid sql injection: PDO provides a data-access abstraction layer, which means that, regardless of which database you’re using, you use the same functions to issue queries and fetch data.<\/p>\n","protected":false},"excerpt":{"rendered":"
1) Use in built functions filter_input, filter_var, filter_input_array $search_html = filter_input(INPUT_GET, ‘search’, FILTER_SANITIZE_SPECIAL_CHARS); $args = array( ‘product_id’ => FILTER_SANITIZE_ENCODED, ‘component’ => array(‘filter’ => FILTER_VALIDATE_INT, ‘flags’ => FILTER_REQUIRE_ARRAY, ‘options’ => array(‘min_range’ => 1, ‘max_range’ => 10) ), ‘versions’ => FILTER_SANITIZE_ENCODED, ‘doesnotexist’ => FILTER_VALIDATE_INT, ‘testscalar’ => array( ‘filter’ => FILTER_VALIDATE_INT, ‘flags’ => FILTER_REQUIRE_SCALAR, ), ‘testarray’ => array( … Continue reading Input Validation<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-238","post","type-post","status-publish","format-standard","hentry","category-php"],"_links":{"self":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts\/238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=238"}],"version-history":[{"count":7,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts\/238\/revisions"}],"predecessor-version":[{"id":240,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts\/238\/revisions\/240"}],"wp:attachment":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=238"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}