Using the vBulletin Input Cleaner

[Billspaintball]

Ohhh just what I was looking for.

Thanks Alan, its all clear now

[ccasselman]

Is there anyway I can use this class for an external script?

How would I approach that?

chad

[Adrian.]

Does this work on vB 3.0.x?

I can't seem to get it working.

[adhari_com]

Thank you so much for the great useful info, but I need to ask the TYPE_NOHTML does get rid of the <script> entry?

[cashpath]

Does this still work?

I put this..

	 $vbulletin->input->clean_array_gpc
	 ('g', array(
	  'year' => TYPE_UINT,
	  'week' => TYPE_UINT,
	  'teamid' => TYPE_UNIT,
      'team_ident' => TYPE_UNIT,
	  'pid' => TYPE_UINT,
	  'page' => TYPE_NOHTML));
$team_ident=$vbulletin->GPC['team_ident'];

And when I pass

{url}?team_ident=thisisatest

I get a mysql error

Invalid SQL:
SELECT * FROM table_teams WHERE id=thisisatest

[foxfirediego]

Originally Posted by cashpath

Does this still work?

I put this..

	 $vbulletin->input->clean_array_gpc
	 ('g', array(
	  'year' => TYPE_UINT,
	  'week' => TYPE_UINT,
	  'teamid' => TYPE_UNIT,
      'team_ident' => TYPE_UNIT,
	  'pid' => TYPE_UINT,
	  'page' => TYPE_NOHTML));
$team_ident=$vbulletin->GPC['team_ident'];

And when I pass

{url}?team_ident=thisisatest

I get a mysql error

Invalid SQL:
SELECT * FROM table_teams WHERE id=thisisatest

a lil too late
yes, works!
try this out:

PHP Code:

$vbulletin->input->clean_array_gpc('g', array(
      'year' => TYPE_INT,
      'week' => TYPE_INT,
      'teamid' => TYPE_INT,
      'team_ident' => TYPE_INT,
      'pid' => TYPE_INT,
      'page' => TYPE_NOHTML));

$team_ident = $vbulletin->GPC['team_ident']; 


{url}?team_ident=$team_ident

OR

{url}?team_ident=$vbulletin->GPC['team_ident']

also, escape ur mysql statement:

SELECT * FROM table_teams WHERE id = " . $db->escape_string($vbulletin->GPC['team_ident']) . "

[Blaine0002]

Can you define the maxes for both int and num?

Im using num for a post
When i enter 9999999999999 it passes -15304950.76
When i enter 999999999999 it passes 2764471.32
When i enter 99999999999 it passes 13161348.12
When i enter 9999999999 it passes -7273800.68
When i enter 999999999 it passes 12157520.92
When i enter 99999999 it passes 14100653.08
When i enter 9999999 it finally passes 9999999

Whats going on here??

NOTE: before it is displayed it is passed thru this. (truncates the number to 2 decimals without rounding.

function truncate($number, $places){
return intval($mynumber * pow(10,$places))/pow(10,$places);
}
$vbulletin->GPC['num'] = truncate($vbulletin->GPC['num'], 2);

--------------- Added [DATE]1196465816[/DATE] at [TIME]1196465816[/TIME] ---------------

Seems my Truncate function was causing it, But now it passes numbers like
1.0E+17

How do i restrict it from doing this and just passing the number?

[ForgotenDynasty]

How can I use a cleaned variable in a template

[Jafo232]

Does TYPE_NOHTML really clean HTML? I mean, take out script tags, etc?

[Adem GEN?]

Hello,

I could not understand the full

Options delete:
checkbox = submit OR Delete text link

Code safe deleted for?

PHP Code:

("DELETE FROM " . TABLE_PREFIX . "table_name
            WHERE xxx_id = '".$_GET['id_delete']."'"); 


Thanks