array ( 0 => 'index.php', 1 => 'PHP Manual', ), 'head' => array ( 0 => 'UTF-8', 1 => 'tr', ), 'this' => array ( 0 => 'function.untaint.php', 1 => 'untaint', 2 => 'Remove the taint mark from strings', ), 'up' => array ( 0 => 'ref.taint.php', 1 => 'Taint İşlevleri', ), 'prev' => array ( 0 => 'function.taint.php', 1 => 'taint', ), 'next' => array ( 0 => 'book.ds.php', 1 => 'Data Structures', ), 'alternatives' => array ( ), 'source' => array ( 'lang' => 'en', 'path' => 'reference/taint/functions/untaint.xml', ), 'history' => array ( ), ); $setup["toc"] = $TOC; $setup["toc_deprecated"] = $TOC_DEPRECATED; $setup["parents"] = $PARENTS; manual_setup($setup); contributors($setup); ?>

untaint

(PECL taint >=0.1.0)

untaint — Remove the taint mark from strings

Açıklama

function untaint(string &$string, string &...$strings): bool

Clears the taint mark on the given strings.

The mark is stored on the string itself, not on the variable, so this clears it for every variable sharing the same string at once. Use it to whitelist values you have validated yourself, for example after a strict allow-list check.

Bağımsız Değişkenler

string

A variable holding the string to clean.

strings

Further variables to clean.

Dönen Değerler

Always returns true. When taint.enable is off, the function does nothing and still returns true.

Örnekler

Örnek 1 untaint() example

<?php
$id = "42";
taint($id);
if (preg_match('/^\d+$/', $id)) {
    // strictly validated as digits: safe to trust
    untaint($id);
}
var_dump(is_tainted($id));
?>

Yukarıdaki örnek şuna benzer bir çıktı üretir:

bool(false)

Notlar

Bilginize:

Only string values can carry the mark; passing a non-string is a no-op.

Ayrıca Bakınız