urlencode - php, how to use strip_tags or urldecode on REQUEST_URI? -
i have link needs ti cleaned bit.
http://'.$_server["server_name"]."".$_server["request_uri"].'" /> this link generate this:
http://www.site.com/friends.php where friends.php $_server["request_uri"].
sometimes pass id link:
http://www.site.com/friends.php?id=123456 what want use strip_tags or urldecode clean link , make sure whatever passed in id int , contains no letters, need on original link: http://'.$_server["server_name"]."".$_server["request_uri"].'" />
edit:
i want link cleaned out can't it:
http://www.site.com/friends.php?id=<script>alert(tk00000006)</script>
this assumes have id in query string:
echo 'http://'.$_server['server_name'] . $_server['script_name'] .'?id=' .filter_var($_get['id'], filter_sanitize_number_int); resulting id id=<script>alert(tk00000006)</script> ?id=00000006.
alternate answer:
echo 'http://'.$_server['server_name'] . $_server['script_name'] .'?id=' .urlencode($_get['id']); //or same thing using $_server variables, //but more robust handles multiple query parameters: echo 'http://'.$_server['server_name'] . $_server['script_name'] .$_server['query_string']; resulting id id=<script>alert(tk00000006)</script> ?id=%3cscript%3ealert%28tk%29%3c%2fscript%3e
Comments
Post a Comment