PHP filter_require_array is failing

Question

I got an AJAX file which can get an array as POST variable. The array looks like this:

array(
    'NAME' => PRICE,
    'NAME2' => PRICE2
)

For example, here's a var_dump about one possibility: (var_dump($_POST['additions']))

array(2) {
    ["vloer"]=>
    string(5) "50.00"
    ["dak"]=>
    string(5) "20.00"
}

To filter the array, I use the following line:

$additions = filter_input(INPUT_POST, 'additions', FILTER_REQUIRE_ARRAY);

To my shock, it returns false for some reason. I tried filter_input_array as well which didn't work. Even without the FILTER_REQUIRE_ARRAY it didn't work.

Your POST variables doesn't seems to contain any 'additions' values. So why it's not normal that filter_input returns false when you call it ? — Guillaume Sainthillier
– Guillaume Sainthillier, Commented Mar 7, 2017 at 10:00
It does? As I said, the var_dump on $_POST['additions'] clearly returns values. So it does contain additions. — Joshua Bakker
– Joshua Bakker, Commented Mar 7, 2017 at 10:01
var_dump(filter_input(INPUT_POST, 'additions', FILTER_DEFAULT , FILTER_REQUIRE_ARRAY)); — bxN5
– bxN5, Commented Mar 7, 2017 at 10:05

Community · Accepted Answer · 2017-05-23 11:54:58Z

5

Thanks to @bxN5 (PHP filter_require_array is failing):

Changing

$additions = filter_input(INPUT_POST, 'additions', FILTER_REQUIRE_ARRAY);

Into

$additions = filter_input(INPUT_POST, 'additions', FILTER_DEFAULT , FILTER_REQUIRE_ARRAY));

Did the job.

edited May 23, 2017 at 11:54

CommunityBot

11 silver badge

answered Mar 7, 2017 at 10:08

Joshua Bakker

2,3783 gold badges38 silver badges67 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

tiomno · Accepted Answer · 2017-03-07 10:35:02Z

4

If you're filtering float values (prices) I'd recommend to filter those with the flag FILTER_FLAG_ALLOW_FRACTION as FILTER_DEFAULT == FILTER_UNSAFE_RAW and you can end up with an undesired injection in the input.

$additions = filter_input( 
                 INPUT_POST, 
                 'additions', 
                 FILTER_SANITIZE_NUMBER_FLOAT, 
                 FILTER_REQUIRE_ARRAY + FILTER_FLAG_ALLOW_FRACTION
);

I split the parameters in separate lines just for easier reading here :)

answered Mar 7, 2017 at 10:35

tiomno

2,25730 silver badges33 bronze badges

1 Comment

Joshua Bakker Over a year ago

Thanks for the answer, didn't really think of this. Deserves a cookie. Will accept answer.

Collectives™ on Stack Overflow

PHP filter_require_array is failing

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related