gistfile1.inc

<?php
// filter_input examples
 
// Make sure it is an integer
$integer = filter_input(INPUT_POST, 'variable_name', FILTER_SANITIZE_NUMBER_INT);
 
// Make it safe to use in a URL
$url_string = filter_input(INPUT_POST, 'variable_name', FILTER_SANITIZE_ENCODED);
 
// Make sure it is a valid URL
$url = filter_input(INPUT_POST, 'variable_name', FILTER_VALIDATE_URL);

// prevent XSS
$url = filter_var($url, FILTER_SANITIZE_STRING);

// html encode
$url = htmlentities($url, ENT_COMPAT, 'UTF-8');