PHP filter() function - why?

Question

Why would I want to use PHP's filter library? Why wouldn't I?

It seems to try and do a bit of clean-up (it's awful when you have to work with regular expressions), but on the other hand function naming and parameter constants seem to be a disaster, if you ask me. It must have been included in PHP for a reason, but I just don't seem to like it. What am I missing?

Later edit:
Regarding GaryF's answer, I wish to explain a bit why I don't like this function. This isn't about using it in "my case" if it fits. This is about using it wherever it fits. There's a high chance of needing a filter that won't fit PHP's functions, so I'll have to create my own filter. In that case, the application will use two completely different kinds of functions for data filtering. I consider that to be a much worse practice than just inventing a better wheel.

function naming and parameters are a disaster yes but as PHP is a disaster by itself anyway... </controversial> — Keltia
– Keltia, Commented Dec 15, 2008 at 13:19

GaryF · Accepted Answer · 2008-12-15 13:17:49Z

2

Probably the best resource for this is the tutorial linked to from the PHP manual page: http://devolio.com/blog/archives/413-Data-Filtering-Using-PHPs-Filter-Functions-Part-one.html

It's decent enough for simple filtering, but if you don't find your use-case on that page it probably isn't for you.

answered Dec 15, 2008 at 13:17

GaryF

24.4k10 gold badges63 silver badges76 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-05-23 12:30:28Z

1

My stance is that the concept of filtering input data is flawed on a conceptual level. See my reply to the almost similar question What’s the best method for sanitizing user input with PHP?

edited May 23, 2017 at 12:30

CommunityBot

11 silver badge

answered Dec 15, 2008 at 14:02

troelskn

118k27 gold badges135 silver badges156 bronze badges

Comments

Vincent · Accepted Answer · 2008-12-15 14:03:33Z

1

It's about using a well-tested data filtering framework to prevent XSS and SQL Injection attacks.

If you look at all the possibilities, that is the kind of filtering you don't want to implement yourself.

http://www.php.net/manual/en/intro.filter.php

answered Dec 15, 2008 at 14:03

Vincent

23k18 gold badges61 silver badges61 bronze badges

Collectives™ on Stack Overflow

PHP filter() function - why?

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related