PHP包含子字符串测试让一些值通过

Question

We have Java code that creates a GET request using logic such as:

String getReq = "&aParam=" + URLEncoder.encode("valueWithSubstring", "UTF-8");

Then our PHP based reporting system reads this and tries to filter for certain values. The problem is that for whatever reason in some cases they seem to pass through when they shouldn't. The PHP filtering code at it's most basic is:

if(strpos($_GET['aParam'], 'substringToFilter') !== false)
    die();

But for whatever reason the substringToFilter doesn't seem to filter the requests...

Answer 1

When you use UTF-8 encoding use mb_* functions:

mb_strpos

Note: mb_strpos vs strpos, what's the difference?