I have created a site for practice and I have already asked a question on Stack Overflow about XSS.
Someone tell me to show your php functions on this site that i created using
filter_Var
These are two PHP functions I created that sanitize/validate user input and after passing the the user input in these function I save the user input in my server (storage).
function Meg_selfvalidator_html($data){//Validator
if(is_array ($data)){
$arrayLen = count($data);
for($i=0;$i<$arrayLen;$i++){
$data[$i] = trim($data[$i]);
$data[$i] = stripslashes($data[$i]);
$data[$i] = htmlentities($data[$i], ENT_QUOTES);
$data[$i] = filter_var($data[$i], FILTER_SANITIZE_STRIPPED, FILTER_FLAG_STRIP_HIGH );
$data[$i] = filter_var($data[$i], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH);
$data[$i] = filter_var($data[$i], FILTER_SANITIZE_STRIPPED, FILTER_SANITIZE_STRING);
}
return $data;
}else{
$data= trim($data);
$data= htmlentities($data, ENT_QUOTES);
$data = stripslashes($data);
$secured_output = filter_var($data, FILTER_SANITIZE_STRIPPED, FILTER_FLAG_STRIP_HIGH );
$secured_output = filter_var($secured_output, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH );
$secured_output = filter_var($secured_output, FILTER_SANITIZE_STRIPPED, FILTER_SANITIZE_STRING);
return $secured_output;
}
}
This is my second PHP function:
function selfValidator($data) {//Validator
if(is_array ($data)){
$arrayLen = count($data);
for($i=0;$i<$arrayLen;$i++){
$data[$i] = trim($data[$i]);
$data[$i] = stripslashes($data[$i]);
$data[$i] = strip_tags($data[$i]);
$data[$i] = htmlspecialchars($data[$i]);
$data[$i] = filter_var($data[$i], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH);
}
return $data;
}else{
$data = trim($data);
$data = stripslashes($data);
$data = strip_tags($data);
$data = htmlspecialchars($data);
return $data;
}
}
Which one is the best function or what is bad in these functions? How do I add a filter to validate the link?