Simple parameter checking function, here just want the % to be allowed
- by abas_rafiq
I'm using PDO's bindParam.
This is the function which checks every GET variable on the website. After changing it will echo it out:
function Check_Get_Param($val){
$value1=addslashes($val);
$string1=htmlspecialchars($value1);
$string2=strip_tags($string1);
$string3=intval($string2);
return $string3;
}
Hhere this will output the result:
Check_Get_Param($_GET['id']);
Now the idea is any id or id= any or id = %
$_GET['id'] = % will result 0 as % is not integer. How to allow % also?
How do I modify this function or any other function that I could filter the GET parameters so I could keep out the web from injections?
