filter_var_array() multidimensional array

Question

Any ideas why this does not work?

$_POST  = array('edit' => array('name' => 'test'));

die(var_dump(
    filter_var_array($_POST, array(
        'edit["name"]'  => FILTER_SANITIZE_STRING,
        'edit[name]'    => FILTER_SANITIZE_STRING,
    )),
    $_POST
));

How can I sanitize/filter a POST parameter while requiring that it is an array ?

It does for numbers (integers, doubles, etc.) but I don't think it does with Strings. It's just giving me false when trying to sanitize an array of strings. — xil3
– xil3, Commented Jan 28, 2011 at 14:43

ymakux · Accepted Answer · 2018-02-22 01:39:47Z

4

Trim and sanitize nested arrays

$array = $_POST;

array_walk_recursive($array, function (&$v) {
  $v = filter_var(trim($v), FILTER_SANITIZE_STRING);
});

$prepared = $array;

edited Feb 22, 2018 at 1:39

answered Nov 18, 2016 at 13:51

ymakux

3,4952 gold badges37 silver badges44 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Gajus · Accepted Answer · 2011-01-28 16:25:39Z

Didn't know that filter_var_array() does not support recursion. Don't see no reasons why it shouldn't, though. Here is a simple solution:

// 28 01 2010, Gajus Kuizinas
function hp_path_to_array($keys, $value, $data = array())
{
    if(empty($keys))
    {
        return $value;
    }

    $key        = array_shift($keys);

    $data[$key] = hp_path_to_array($keys, $value, $data);


    return $data;
}

function hp_filter_var_array($data, $rules)
{
    $return = array();

    foreach($rules as $k => $options)
    {
        $path   = explode('[', str_replace(']', '', $k));

        if(empty($path))
        {
            continue;
        }

        if(!is_array($options))
        {
            $filter     = $options;
            $options    = array();
        }
        else
        {
            $filter     = $options['filter'];

            unset($options['filter']);
        }

        $value          = $data;

        foreach($path as $key)
        {
            if(isset($value[$key]))
            {
                $value  = $value[$key];
            }
            else
            {
                $value  = NULL;
                break;
            }
        }

        $return += hp_path_to_array($path, filter_var($value, $filter, $options));

        unset($rules[$k]);
    }

    $return += filter_var_array($data, $rules);

    return $return;
}

Lorenz Meyer · Accepted Answer · 2021-09-21 15:41:32Z

0

There is a filter flag that does just this: it makes sure that your parameter $_POST['edit'] is an array, and that filters/sanitizes the array's elements instead of the parameter itself.

$_POST  = array('edit' => array('name' => 'test'));

die(var_dump(
    filter_var_array($_POST, array(
        'edit' => [
            'filter' => FILTER_SANITIZE_STRING,
            'flags' => FILTER_REQUIRE_ARRAY
        ]
    ))
));

edited Sep 21, 2021 at 15:41

answered Jan 4, 2018 at 8:15

Lorenz Meyer

20.1k23 gold badges83 silver badges129 bronze badges

Collectives™ on Stack Overflow

filter_var_array() multidimensional array

3 Answers 3

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related