PHP -Sanitize values of a array

Question

I have a array, which comes from $_POST[] and can have other arrays in it as values, like:

array(  'title' => 'Title',  'data' => array(              'hdr' => 'Header'              'bdy' => 'Body'            ),   'foo' => array(1, 23, 65),   ... ) 

How can I sanitize all values of this big array? for eg. apply a strip_tags() to values like Title, Header, Body, 1, 23, 65 etc ?

Answer 1

Just use the filter extension.

/* prevent XSS. */ $_GET   = filter_input_array(INPUT_GET, FILTER_SANITIZE_STRING); $_POST  = filter_input_array(INPUT_POST, FILTER_SANITIZE_STRING); 

This will sanitize your $_GET and $_POST.

Answer 2

Have a look at array_map

<?php   $a = array( 'title' => 'Title', 'data' => array(     'hdr' => 'Header',     'bdy' => 'Body'     ), 'foo' => array(1, 23, 65) );  $b = array_map("strip_tags", $a); print_r($b); ?> 

Update for 2D array:

function array_map_r( $func, $arr ) {     $newArr = array();      foreach( $arr as $key => $value )     {         $newArr[ $key ] = ( is_array( $value ) ? array_map_r( $func, $value ) : ( is_array($func) ? call_user_func_array($func, $value) : $func( $value ) ) );     }      return $newArr; } 

Usage:

$a = array( 'title' => 'Title', 'data' => array(     'hdr' => 'Header',     'bdy' => 'Body'     ), 'foo' => array(1, 23, 65) );   $ar =array_map_r('strip_tags', $a); print_r($ar); 

Note I found this just by searching the comments for Dimension