ThinkPHP input filtering

Never trust the data submitted by the client, so it is imperative to filter the input data. we suggest: 1. token verification prevents remote data submission; 2. the automatic verification and automatic completion mechanism are used for preliminary filtering; 3. user-input data is effectively filtered (based on your application). common security filtering functions include stripslashes, htmlentities, htmlspecialchars, and ORG. util. input never trust the data submitted by the client. Therefore, filtering Input data is imperative. we recommend that you:

1. token verification prevents remote data submission;

2. automatic verification and automatic completion mechanism for preliminary filtering;

3. user-input data is effectively filtered (based on your application). common security filtering functions include stripslashes, htmlentities, htmlspecialchars, and ORG. util. the Input class provides a better solution;