dpq59734 2015-01-18 08:32
浏览 60

正确的方法来消毒数据

I have some variables from database. So Can anybody tell me What would be the best method to sanitize these data before before using them (echoing)?

This is my variables -

$username
$email
$mobile
$domain
$sub_domain
$cpanel_username
$cpanel_password
$period
$domain_registered

So I tried to sanitize them using these method.

$db_username        = preg_replace("/[^a-zA-Z0-9_\-]+/", "", $username);
$db_email           = filter_var($email, FILTER_SANITIZE_EMAIL);
$db_mobile          = filter_var($mobile,FILTER_SANITIZE_NUMBER_INT);
$db_domain      = filter_var($domain, FILTER_SANITIZE_URL);
$db_subDomain      = filter_var($sub_domain, FILTER_SANITIZE_URL);
$db_cpanelUsername  = preg_replace("/[^a-zA-Z0-9_\-]+/", "", $cpanel_username);
$db_cpanelUassword  = $cpanel_password;
$db_period      = (int)$period; 
$db_domainRegistered = preg_replace("([^0-9-])", "", $domain_registered);

Can somebody tell me this way is correct or not? Thank you.

  • 写回答

0条回答 默认 最新

    报告相同问题?

    悬赏问题

    • ¥15 Python中的request,如何使用ssr节点,通过代理requests网页。本人在泰国,需要用大陆ip才能玩网页游戏,合法合规。
    • ¥100 为什么这个恒流源电路不能恒流?
    • ¥15 有偿求跨组件数据流路径图
    • ¥15 写一个方法checkPerson,入参实体类Person,出参布尔值
    • ¥15 我想咨询一下路面纹理三维点云数据处理的一些问题,上传的坐标文件里是怎么对无序点进行编号的,以及xy坐标在处理的时候是进行整体模型分片处理的吗
    • ¥15 CSAPPattacklab
    • ¥15 一直显示正在等待HID—ISP
    • ¥15 Python turtle 画图
    • ¥15 stm32开发clion时遇到的编译问题
    • ¥15 lna设计 源简并电感型共源放大器