News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Michael Girouard's Blog:
FIEO with PHP 5 Interceptors
November 08, 2007 @ 08:41:00

Michael Girouard has a post on his blog about something that's becoming more and more wide-spread in the PHP community (thankfully) - filtering input from users and escaping the output to ensure the safety of your application.

The idea itself is simple. When data comes into your application, it must be filtered prior to it actually being used for any reason. This means all data. Form values, URL values, and yes, even the values in the forever useful $_SERVER superglobal. [...] Before leaving your application, data should be properly escaped with the specific output medium in mind.

Previously he showed how, using an interceptor method in PHP5, you could build "collections of data". He uses the same sort of method here, appling custom filters to the data based on the output call. Code is included for both the filtering interface and two example filters - one for SQL and the other for HTML.

You can also grab the code if you just want to play with that.

0 comments voice your opinion now!
fieo php5 interceptor filter input escape output fieo php5 interceptor filter input escape output


blog comments powered by Disqus

Similar Posts

Zend Developer Zone: Migrating applications from PHP 4 to Zend Core 2.5 w/support for IBM Informix

Ivo Jansch's Blog: Mixins in PHP

DevShed: Implementing Yahoo Image Search Web Service with PHP 5

DevShed: Improving Exception Throwing when Auto Loading Classes in PHP 5

PHPit.net: PHP 5 Objects, Patterns and Practice


Community Events





Don't see your event here?
Let us know!


package opinion laravel bugfix interview release voicesoftheelephpant podcast introduction library series community language api install unittest deployment zendserver symfony framework

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework