📄 intro.filter.html
字号:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html> <head> <title>Introduction</title> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> </head> <body><div style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="book.filter.html">Filter</a></div> <div class="next" style="text-align: right; float: right;"><a href="filter.setup.html">Installing/Configuring</a></div> <div class="up"><a href="book.filter.html">Filter</a></div> <div class="home"><a href="index.html">PHP Manual</a></div></div><hr /><div id="intro.filter" class="preface"> <h1 class="title">Introduction</h1> <p class="para"> This extension serves to validate and filter data coming from some insecure source, such as user input. </p> <p class="para"> The following filters currently exist; be sure to read the <a href="filter.constants.html" class="link">Filter Constants</a> section for information that describes the behavior of each constant: <table border="5"> <caption><b>Existing filters</b></caption> <colgroup> <thead valign="middle"> <tr valign="middle"> <th colspan="1">ID</th> <th colspan="1">Name</th> <th colspan="1">Options</th> <th colspan="1">Flags</th> <th colspan="1">Description</th> </tr> </thead> <tbody valign="middle" class="tbody"> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_INT</tt></b></td> <td colspan="1" rowspan="1" align="left">"int"</td> <td colspan="1" rowspan="1" align="left"> <i><tt class="parameter">min_range</tt></i>, <i><tt class="parameter">max_range</tt></i> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_ALLOW_OCTAL</tt></b>, <b><tt>FILTER_FLAG_ALLOW_HEX</tt></b> </td> <td colspan="1" rowspan="1" align="left">Validates value as integer, optionally from the specified range.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_BOOLEAN</tt></b></td> <td colspan="1" rowspan="1" align="left">"boolean"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_NULL_ON_FAILURE</tt></b> </td> <td colspan="1" rowspan="1" align="left"> <p class="para"> Returns <b><tt>TRUE</tt></b> for "1", "true", "on" and "yes". Returns <b><tt>FALSE</tt></b> otherwise. </p> <p class="para"> If <b><tt>FILTER_NULL_ON_FAILURE</tt></b> is set, <b><tt>FALSE</tt></b> is returned only for "0", "false", "off", "no", and "", and <b><tt>NULL</tt></b> is returned for all non-boolean values. </p> </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_FLOAT</tt></b></td> <td colspan="1" rowspan="1" align="left">"float"</td> <td colspan="1" rowspan="1" align="left"> <i><tt class="parameter">decimal</tt></i> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_ALLOW_THOUSAND</tt></b> </td> <td colspan="1" rowspan="1" align="left">Validates value as float.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_REGEXP</tt></b></td> <td colspan="1" rowspan="1" align="left">"validate_regexp"</td> <td colspan="1" rowspan="1" align="left"> <i><tt class="parameter">regexp</tt></i> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> Validates value against <i><tt class="parameter">regexp</tt></i>, a <a href="book.pcre.html" class="link">Perl-compatible</a> regular expression. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_URL</tt></b></td> <td colspan="1" rowspan="1" align="left">"validate_url"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_PATH_REQUIRED</tt></b>, <b><tt>FILTER_FLAG_QUERY_REQUIRED</tt></b> </td> <td colspan="1" rowspan="1" align="left">Validates value as URL, optionally with required components.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_EMAIL</tt></b></td> <td colspan="1" rowspan="1" align="left">"validate_email"</td> <td class="empty"> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left">Validates value as e-mail.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_VALIDATE_IP</tt></b></td> <td colspan="1" rowspan="1" align="left">"validate_ip"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_IPV4</tt></b>, <b><tt>FILTER_FLAG_IPV6</tt></b>, <b><tt>FILTER_FLAG_NO_PRIV_RANGE</tt></b>, <b><tt>FILTER_FLAG_NO_RES_RANGE</tt></b> </td> <td colspan="1" rowspan="1" align="left"> Validates value as IP address, optionally only IPv4 or IPv6 or not from private or reserved ranges. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_STRING</tt></b></td> <td colspan="1" rowspan="1" align="left">"string"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_NO_ENCODE_QUOTES</tt></b>, <b><tt>FILTER_FLAG_STRIP_LOW</tt></b>, <b><tt>FILTER_FLAG_STRIP_HIGH</tt></b>, <b><tt>FILTER_FLAG_ENCODE_LOW</tt></b>, <b><tt>FILTER_FLAG_ENCODE_HIGH</tt></b>, <b><tt>FILTER_FLAG_ENCODE_AMP</tt></b> </td> <td colspan="1" rowspan="1" align="left">Strip tags, optionally strip or encode special characters.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_STRIPPED</tt></b></td> <td colspan="1" rowspan="1" align="left">"stripped"</td> <td class="empty"> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left">Alias of "string" filter.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_ENCODED</tt></b></td> <td colspan="1" rowspan="1" align="left">"encoded"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_STRIP_LOW</tt></b>, <b><tt>FILTER_FLAG_STRIP_HIGH</tt></b>, <b><tt>FILTER_FLAG_ENCODE_LOW</tt></b>, <b><tt>FILTER_FLAG_ENCODE_HIGH</tt></b> </td> <td colspan="1" rowspan="1" align="left">URL-encode string, optionally strip or encode special characters.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_SPECIAL_CHARS</tt></b></td> <td colspan="1" rowspan="1" align="left">"special_chars"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_STRIP_LOW</tt></b>, <b><tt>FILTER_FLAG_STRIP_HIGH</tt></b>, <b><tt>FILTER_FLAG_ENCODE_HIGH</tt></b> </td> <td colspan="1" rowspan="1" align="left"> HTML-escape <i>'"<>&</i> and characters with ASCII value less than 32, optionally strip or encode other special characters. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_UNSAFE_RAW</tt></b></td> <td colspan="1" rowspan="1" align="left">"unsafe_raw"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_STRIP_LOW</tt></b>, <b><tt>FILTER_FLAG_STRIP_HIGH</tt></b>, <b><tt>FILTER_FLAG_ENCODE_LOW</tt></b>, <b><tt>FILTER_FLAG_ENCODE_HIGH</tt></b>, <b><tt>FILTER_FLAG_ENCODE_AMP</tt></b> </td> <td colspan="1" rowspan="1" align="left">Do nothing, optionally strip or encode special characters.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_EMAIL</tt></b></td> <td colspan="1" rowspan="1" align="left">"email"</td> <td class="empty"> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> Remove all characters except letters, digits and <i>!#$%&'*+-/=?^_`{|}~@.[]</i>. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_URL</tt></b></td> <td colspan="1" rowspan="1" align="left">"url"</td> <td class="empty"> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> Remove all characters except letters, digits and <i>$-_.+!*'(),{}|\\^~[]`<>#%";/?:@&=</i>. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_NUMBER_INT</tt></b></td> <td colspan="1" rowspan="1" align="left">"number_int"</td> <td class="empty"> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> Remove all characters except digits, plus and minus sign. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_NUMBER_FLOAT</tt></b></td> <td colspan="1" rowspan="1" align="left">"number_float"</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left"> <b><tt>FILTER_FLAG_ALLOW_FRACTION</tt></b>, <b><tt>FILTER_FLAG_ALLOW_THOUSAND</tt></b>, <b><tt>FILTER_FLAG_ALLOW_SCIENTIFIC</tt></b> </td> <td colspan="1" rowspan="1" align="left"> Remove all characters except digits, <i>+-</i> and optionally <i>.,eE</i>. </td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_SANITIZE_MAGIC_QUOTES</tt></b></td> <td colspan="1" rowspan="1" align="left">"magic_quotes"</td> <td class="empty"> </td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left">Apply <a href="function.addslashes.html" class="function">addslashes()</a>.</td> </tr> <tr valign="middle"> <td colspan="1" rowspan="1" align="left"><b><tt>FILTER_CALLBACK</tt></b></td> <td colspan="1" rowspan="1" align="left">"callback"</td> <td colspan="1" rowspan="1" align="left"><a href="language.pseudo-types.html#language.types.callback" class="type callback">callback</a> function or method</td> <td class="empty"> </td> <td colspan="1" rowspan="1" align="left">Call user-defined function to filter data.</td> </tr> </tbody> </colgroup> </table> </p> </div><hr /><div style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="book.filter.html">Filter</a></div> <div class="next" style="text-align: right; float: right;"><a href="filter.setup.html">Installing/Configuring</a></div> <div class="up"><a href="book.filter.html">Filter</a></div> <div class="home"><a href="index.html">PHP Manual</a></div></div></body></html>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -