Deprecated: Constant FILTER_SANITIZE_STRING is deprecated in /home/clients/641f6c78b2fb4be841cb107cf09f47d4/web/tests/injections.php on line 23

Deprecated: Constant FILTER_SANITIZE_STRING is deprecated in /home/clients/641f6c78b2fb4be841cb107cf09f47d4/web/tests/injections.php on line 24

Deprecated: Constant FILTER_SANITIZE_STRING is deprecated in /home/clients/641f6c78b2fb4be841cb107cf09f47d4/web/tests/injections.php on line 25

Deprecated: Constant FILTER_SANITIZE_STRING is deprecated in /home/clients/641f6c78b2fb4be841cb107cf09f47d4/web/tests/injections.php on line 26

Deprecated: Constant FILTER_SANITIZE_STRING is deprecated in /home/clients/641f6c78b2fb4be841cb107cf09f47d4/web/tests/injections.php on line 27
PHP: Caractères spéciaux, injection & échappements | Kode.ch

Caractères spéciaux, injection & échappements

Afin d'éviter les problèmes d'affichage et les injections il est recommandé d'encoder ou supprimer les caractères suivants pour les documents HTML et XML.

Exemples de traitements de chaînes

Tester une chaîne

Expression Résultat
$string <p>paragraphe <a href="http://kode.ch">Lien</a></p>
htmlspecialchars($string) &lt;p&gt;paragraphe &lt;a href=&quot;http://kode.ch&quot;&gt;Lien&lt;/a&gt;&lt;/p&gt;
htmlspecialchars($string,ENT_QUOTES) &lt;p&gt;paragraphe &lt;a href=&quot;http://kode.ch&quot;&gt;Lien&lt;/a&gt;&lt;/p&gt;
htmlentities($string) &lt;p&gt;paragraphe &lt;a href=&quot;http://kode.ch&quot;&gt;Lien&lt;/a&gt;&lt;/p&gt;
strip_tags($string) paragraphe Lien
strip_tags($string,'<a>') paragraphe <a href="http://kode.ch">Lien</a>
filter_var($string, FILTER_SANITIZE_STRING) paragraphe Lien
filter_var($string, FILTER_SANITIZE_SPECIAL_CHARS) &#60;p&#62;paragraphe &#60;a href=&#34;http://kode.ch&#34;&#62;Lien&#60;/a&#62;&#60;/p&#62;
filter_var($string, FILTER_SANITIZE_FULL_SPECIAL_CHARS) &lt;p&gt;paragraphe &lt;a href=&quot;http://kode.ch&quot;&gt;Lien&lt;/a&gt;&lt;/p&gt;
addslashes($string) <p>paragraphe <a href=\"http://kode.ch\">Lien</a></p>

Sources