WebApp Sec mailing list archives

PHP variable sanitization functions


From: "Gavin Zuchlinski" <gzuchlinski () pgsit org>
Date: Sun, 24 Aug 2003 19:52:26 -0400

Hello list,
I wrote a couple of sanitization routines that are better suited for certain
situations (arguments to system(), variables in SQL, paranoid, etc...) for
everyone to use. Everything is based off of some simple regular expressions
so it should be pretty portable to other languages.
Now please help me make these functions a little bit better and more
versatile :-).  Let me know all the ways to break this to still do nasty
things that these routines are meant to stop, and also if sanitization
breaks anything.
Finally.... http://libox.net/sanitize.php

-Gavin Zuchlinski
http://libox.net/




Current thread: