Prevent attacks, $_POST data security, wp_strip_all_tags
Question
When writing code that accepts input from users I always sanitize data one variable at a time.
Example:
$title = wp_strip_all_tags($_POST['title']);
$content = wp_strip_all_tags($_POST['content']);
I had the idea of simplifying things by sanitizing everything at once, inside a loop:
foreach ($_POST as $key => $value) $_POST[$key] = wp_strip_all_tags($value);
When something more specific is needed, I may later add
if (!is_email($_POST['email'])) die();
Do you think this is a good approach, given that I won’t be accepting html tags in this case?
Am I safe from sql injection attacks or some other sort of maliciusness?
Thanks
0
security, wp-kses
4 years
2020-03-26T00:53:09-05:00
2020-03-26T00:53:09-05:00 0 Answers
114 views
0
Leave an answer