check script tag in a string using php

Question

i want to check the script tag in an url

For example: if url have the script tag the below senario is working fine..

<?php
 $url = 'admin/content/test/<script>';
 preg_match('<script>', $url, $match);
 if (count($match) >= 1) {
  print 'It executes';
 }
?>

output: It executes

but in my case if the url have a string "product_description" then also above condition matches

<?php
  $url = 'admin/content/product_description/test';
  preg_match('<script>', $url, $match);
  if (count($match) >= 1) {
   print 'It executes';
  }
?>

output: It executes

Please suggest the right way to check the script tag in an url..

maqjav · Accepted Answer · 2013-06-27 11:35:34Z

2

Try using strpos instead of preg_match:

if (strpos($url,'<script>') !== false) {
   print 'It executes';
}

Here you have the manual of this function: documentation

answered Jun 27, 2013 at 11:35

maqjav

2,4544 gold badges26 silver badges40 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

maqjav Over a year ago

You are welcome. preg_match is sensible to special characters, when strpos isn't.

warch Over a year ago

this does not work with <script type="text/javascript">

Toto · Accepted Answer · 2013-06-27 11:52:43Z

0

You have to put the regex inside delimiters:

preg_match('/<script>/', $url, $match);

You version worked because the pair <> were considered as delimiters, it was the same as:

preg_match('/script/', $url, $match);

and it matched script and also description

answered Jun 27, 2013 at 11:52

Toto

91.7k63 gold badges97 silver badges135 bronze badges

Collectives™ on Stack Overflow

check script tag in a string using php

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related