urlencode - php, how to use strip_tags or urldecode on REQUEST_URI? -
i have link needs ti cleaned bit.
http://'.$_server["server_name"]."".$_server["request_uri"].'" />
this link generate this:
http://www.site.com/friends.php
where friends.php
$_server["request_uri"]
.
sometimes pass id link:
http://www.site.com/friends.php?id=123456
what want use strip_tags or urldecode clean link , make sure whatever passed in id
int , contains no letters, need on original link: http://'.$_server["server_name"]."".$_server["request_uri"].'" />
edit:
i want link cleaned out can't it:
http://www.site.com/friends.php?id=<script>alert(tk00000006)</script>
this assumes have id in query string:
echo 'http://'.$_server['server_name'] . $_server['script_name'] .'?id=' .filter_var($_get['id'], filter_sanitize_number_int);
resulting id id=<script>alert(tk00000006)</script>
?id=00000006
.
alternate answer:
echo 'http://'.$_server['server_name'] . $_server['script_name'] .'?id=' .urlencode($_get['id']); //or same thing using $_server variables, //but more robust handles multiple query parameters: echo 'http://'.$_server['server_name'] . $_server['script_name'] .$_server['query_string'];
resulting id id=<script>alert(tk00000006)</script>
?id=%3cscript%3ealert%28tk%29%3c%2fscript%3e
Comments
Post a Comment