我可以一起使用这些PHP函数吗？

Question

Can I use these PHP functions below:

$user = mysql_escape_string($user);
$user = filter_var($user, FILTER_SANITIZE_STRING);
$user = stripslashes($user);
$user = trim($user);

together like this:

$user = mysql_escape_string(stripslashes(trim(filter_var($user, FILTER_SANITIZE_STRING))));

sorry if this is a stupid question.

Answer 1

var_filter validate or sanitize your var according to a list of predefined filters: FILTER_VALIDATE_EMAIL, FILTER_SANITIZE_EMAIL, FILTER_VALIDATE_URL, FILTER_SANITIZE_URL.

trim and stripslashes are old school way to sanitize your vars

mysql_escape_string sanitize your querys for mysql, therefore this function are deprecated, you must use mysql_real_escape_string, the syntax is identical.

var_filter are most elegant and have many options from trim and stripslashes

http://www.php.net/manual/en/filter.filters.php