PHP Filter, how to filter input array

Question

I am using PHP filter to perfom basic sanitization and validation of form data.

The principle problem I am having is that I mark my form up so that all the data is in one array for the POST input. e.g. form fields, page[name], page[slug], page[body], page[status], etc.

Using the following:

filter_input(INPUT_POST, 'page[name]', FILTER_SANITIZE_STRING);
OR
filter_input(INPUT_POST, "page['name']", FILTER_SANITIZE_STRING);

I am unable to access the variable. Can someone please tell me the correct name to use to access array data using filter_input()

@anthony yes it does have a value, if i send it through as name it is fine. just not sure of the notation to access an array key using this filter method. — user137621
– user137621, Commented May 3, 2010 at 20:26
Not easy at the time, PHP needs to make filter_input_array recursive... For the moment accessing $_POST directly in this case is still much easier. — Jorge Orpinel Pérez
– Jorge Orpinel Pérez, Commented Oct 6, 2014 at 23:39

salathe · Accepted Answer · 2010-05-03 21:08:27Z

16

I don't think that you can access the single value (easily, as you want), however you could just filter the page array and get the value that you want.

$page = filter_input(INPUT_POST, 'page', FILTER_SANITIZE_STRING, FILTER_REQUIRE_ARRAY);
if (array_key_exists('name', $page)) {
    $name = $page['name'];
}

Or, if you're OK with losing the ability to work with the raw input then you could just use:

if (isset($_POST['page']['name'])) {
    $name = filter_var($_POST['page']['name'], FILTER_SANITIZE_STRING);
}

Both, however, are pretty ugly.

edited May 3, 2010 at 21:08

answered May 3, 2010 at 20:39

salathe

52.1k12 gold badges108 silver badges134 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

user137621 Over a year ago

yeah, both are super ugly. i might as well switch the form to single var names, and avoid the problem. shame that is not supported.

salathe Over a year ago

Absolutely. Single names are much more convenient (for the filter extension) to work with in your case; unfortunately.

patrick Over a year ago

Please check @Fletcher Moore's answer. Very elegant and effective!

Fletcher Moore · Accepted Answer · 2010-05-03 20:34:22Z

8

How about

$_POST['page'] = filter_var_array($_POST['page'], FILTER_SANITIZE_STRING);

answered May 3, 2010 at 20:34

Fletcher Moore

13.9k11 gold badges43 silver badges59 bronze badges

Collectives™ on Stack Overflow

PHP Filter, how to filter input array

2 Answers 2

3 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related