how do you control the input???

[localhost]

Hello!
Can you please indicate me the methods u use to control malicius input??
what do you do in the several cases(select box,radio,text etc)
and in the varius form methods??
thanks in advance!

[diego25]

Well, if setup correctly, all the form variable will end up in the $_POST array as a string, so there's nothing special in checking that -- you're just checking strings. Hence you can use any of the string functions or the regular expression functions to check the input.

Diego

[philipolson]

It depends, just keep in mind that users are evil and should never be trusted. REQUEST data is GET, POST and COOKIE ... it's never to be trusted. So verify your data. Your question needs to be more specific, there is no "check_if_user_is_being_evil" php directive ;-)

[bastien]

http://www.aspfaqs.com/ASPScripts/PrintFAQ.asp?FAQID=194

[localhost]

so one solution is using regular expressions
is there anything else that you could advice me to do??
thanks a lot!!

[Weedpacket]

Read this, as well

Basically, assume that someone will try to break your site. Any defensive tactic is potentially valid.

Yes, that is vague, but it's a vague question.