WebApp Sec mailing list archives

Re: PHP variable sanitization functions


From: Jan Pieter Kunst <jpk () akamail com>
Date: Tue, 26 Aug 2003 20:02:21 +0200

Something like this (warning! untested code!) might be useful:

function sane_integer($val, $min, $max)
{
  if (!preg_match('/^-?[0-9]+$/', $val))
    return false;

  if (($val < $min) or ($val > $max))
    return false;

  return true;
}


Maybe this one would be faster? As it doesn't use the regular expression engine.

function sane_integer($val, $min, $max)
{
  if (!is_numeric($val))
    return false;

  if (($val < $min) or ($val > $max))
    return false;

  return true;
}

JP


Current thread: