Menu
Community /Pin to ProfileBookmark
@NogDogApr 18.2021 — #I would not assume anything about a user's email. Assuming the ")" should be deleted instead of replaced with some other character is just a guess, and might end up pointing to someone else's address instead.
Generally, I would just do the "validate", then if okay proceed to doing the old send a confirmation email thing to that address with a confirmation link, etc. @NogDogApr 21.2021 — #
No, it is not. It is your turn to learn what they do, and decide if they meet your specific functional needs in any given situation. PHP has dozens of functions and options (hundreds?) I've never had any reason to use (that I know of).
My suggestion: don't try to learn every single thing in PHP, but instead work at making something, then searching/studying solutions to those specific things you want to do (and never assuming anything you see in a random PHP tutorial is the best way to do it).
FILTER_SANITIZE_EMAIL Or FILTER_VALIDATE_EMAIL To Use ?
Folks,
FILTER_SANITIZE_EMAIL removes all the invalid characters from users input in my form.
FILTER_VALIDATE_EMAIL checks if the user inputted email on my form is valid or not.
I think using just one would do and no need to use both functions when checking for user input on my form. What you say ?
I say this because of this …
Let’s say you trying to submit to me an invalid email and I use FILTER_SANITIZE_EMAIL and remove all the invalid chars. Now whatever is leftover is surely not your email address (just like whatever you tried submitting is also not your email address).
So not good using FILTER_VALIDATE_EMAIL to validate the email.
Eg.
Your email is
You deliberately tried submitting invalid and wrong email:
<tracknutt@*tracknutter.com>.
Using FILTER_SANITIZE_EMAIL, I am leftover with:
Now I use FILTER_VALIDATE_EMAIL and it gets validated. But really, is your email:
It is not! And so, now my db is with your wrong email.
Conclusion:
None of the two filters can pursuade you to submit your real email.
Sign in
to post a comment6 Comments(s) ↴
0
@NogDogApr 18.2021 — #Generally, I would just do the "validate", then if okay proceed to doing the old send a confirmation email thing to that address with a confirmation link, etc.
0
@NogDogApr 21.2021 — #>@developer_web#1630673 Now it's your turn to show me where the Sanitize will become handy
No, it is not. It is your turn to learn what they do, and decide if they meet your specific functional needs in any given situation. PHP has dozens of functions and options (hundreds?) I've never had any reason to use (that I know of).
My suggestion: don't try to learn every single thing in PHP, but instead work at making something, then searching/studying solutions to those specific things you want to do (and never assuming anything you see in a random PHP tutorial is the best way to do it).