urlencode - php, how to use strip_tags or urldecode on REQUEST_URI? -


i have link needs ti cleaned bit.

http://'.$_server["server_name"]."".$_server["request_uri"].'" /> 

this link generate this:

http://www.site.com/friends.php 

where friends.php $_server["request_uri"].

sometimes pass id link:

 http://www.site.com/friends.php?id=123456 

what want use strip_tags or urldecode clean link , make sure whatever passed in id int , contains no letters, need on original link: http://'.$_server["server_name"]."".$_server["request_uri"].'" />

edit:

i want link cleaned out can't it:

http://www.site.com/friends.php?id=<script>alert(tk00000006)</script> 

this assumes have id in query string:

echo 'http://'.$_server['server_name']     . $_server['script_name']     .'?id='     .filter_var($_get['id'], filter_sanitize_number_int); 

resulting id id=<script>alert(tk00000006)</script> ?id=00000006.


alternate answer:

echo 'http://'.$_server['server_name']     . $_server['script_name']     .'?id='     .urlencode($_get['id']);  //or same thing using $_server variables, //but more robust handles multiple query parameters: echo 'http://'.$_server['server_name']     . $_server['script_name']     .$_server['query_string']; 

resulting id id=<script>alert(tk00000006)</script> ?id=%3cscript%3ealert%28tk%29%3c%2fscript%3e


Comments

Popular posts from this blog

objective c - Change font of selected text in UITextView -

php - Accessing POST data in Facebook cavas app -

c# - Getting control value when switching a view as part of a multiview -