PHP Filters

PHP provides a set of built-in functions to filter and validate data. Filters can be used to sanitize user input, ensuring that it meets specific criteria before processing.

Using Filters

<?php
$email = "user@example.com";
if (filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo "Valid email address.";
} else {
    echo "Invalid email address.";
}
?>

Explanation: This example uses filter_var() with FILTER_VALIDATE_EMAIL to validate an email address.

Sanitizing Input

<?php
$input = "<script>alert ('Hi');</script>";
$sanitized_input = filter_var($input, FILTER_SANITIZE_STRING);

echo $sanitized_input;
?>

Explanation: This example sanitizes a string by removing any HTML tags using FILTER_SANITIZE_STRING.

Common Filters

Here are some commonly used filters in PHP:

  • FILTER_VALIDATE_EMAIL: Validates an email address.
  • FILTER_VALIDATE_URL: Validates a URL.
  • FILTER_SANITIZE_STRING: Removes HTML tags from a string.
  • FILTER_SANITIZE_EMAIL: Sanitizes an email address.
  • FILTER_SANITIZE_URL: Sanitizes a URL.

Example of Validating a URL

<?php
$url = "https://www.example.com";
if (filter_var($url, FILTER_VALIDATE_URL)) {
    echo "Valid URL.";
} else {
    echo "Invalid URL.";
}
?>

Explanation: This example checks if a URL is valid using FILTER_VALIDATE_URL.