The filter_var() function is used to validate and sanitize form data.
The filter_var() function filters a single variable with a specified filter. It takes two parameters:
The first is variable you want to check or validate.
The type of data check to use such as int, flolat, string etc.
$user_name = filter_var($_POST['name'], FILTER_SANITIZE_STRING);
$user_age = filter_var($_POST['age'], FILTER_SANITIZE_INT);
$mob = mysqli_real_escape_string($sql, filter_var($_POST['phone'], FILTER_VALIDATE_INT));
The mysqli_real_escape_string() Or real_escape_string() function escapes special characters from a string for use in an SQL query.
Example :
<?php
$name = "<h1>Sana!</h1>";
$new_name = filter_var($name, FILTER_SANITIZE_STRING);
echo $new_name;
?>
How to filter an Integer
<?php
$age = 36;
if (!filter_var($age, FILTER_VALIDATE_INT) === false) {
echo("Age is valid");
} else {
echo("Age is not valid");
}
?>
How to Validate and Sanitize an Email ?
<?php
$email_id = "sana@ittutorial.in";
// Remove all illegal characters from email
$email = filter_var($email_id , FILTER_SANITIZE_EMAIL);
// Validate e-mail
if (!filter_var($email_id , FILTER_VALIDATE_EMAIL) === false) {
echo("$email_id is a valid email");
} else {
echo("$email_id is not a valid email");
}
?>
Trending Tutorials