StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POUsing PHP to filter out injections and only return domain.tld
primarykey
Id
16740420
data
AcceptedAnswerId
16740471
AnswerCount
1
ClosedDate
CommentCount
0
CommunityOwnedDate
CreationDate
2013-05-24T17:19:26.407
FavoriteCount
0
LastActivityDate
2013-05-24T17:23:25.220
LastEditDate
LastEditorUserId
0
OwnerUserId
378506
ParentId
0
PostTypeId
1
Score
0
ViewCount
126
LastEditorDisplayName
text
Body
So i'm having a hell of a time trying to figure out a way to sanitize input from a site to prevent URL injections, and only return domain.tld (google.com, etc) Basically i've got a site i've created people can use to get a website's IP address (getwebsiteip.com) and i want to make sure i prevent any malicious injection and at the same time return only google.com no matter if they input <a href="http://google.com" rel="nofollow">http://google.com</a>, <a href="https://google.com" rel="nofollow">https://google.com</a> udp://google.com and so on. I do want to keep subdomains in tact, and technically www is a subdomain, and www.google.com could have a different A record than google.com does. I'm just taking the URL from user input, checking the DNS record, and displaying it. So i've tried a couple different methods and read around online but want to make sure i'm doing this the right way. Read this site: <a href="http://www.phpro.org/tutorials/Filtering-Data-with-PHP.html" rel="nofollow">http://www.phpro.org/tutorials/Filtering-Data-with-PHP.html</a> And the filtering does work, but you have to put in the http for it to validate, otherwise it does not. I found this: <a href="http://snipplr.com/view.php?codeview&id=12616" rel="nofollow">http://snipplr.com/view.php?codeview&id=12616</a> Which does a good job of striping out the domain itself, but from everything i found it seems like it would take a lot of code to accomplish something that seems like it should be fairly simple. In a perfect world, i would want users to only input subdomain.domain.com or domain.com, but if they use http:// or https:// i still want to strip that out and output the IP. I also want to prevent anybody from trying to inject malicious code. Can anybody point me in the right direction or help out? I think i've got a bald spot now from scratching my head too much :P
Tags
<php><validation><filtering><code-injection>
Title
Using PHP to filter out injections and only return domain.tld
singulars
PostAcceptedAnswerId
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. This table or related slice is empty.
UserOwnerUserId
1. USsMyles
plurals
PostLinksPostIdRelatedPostId
1. This table or related slice is empty.
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
1. This table or related slice is empty.
CommentsPostId
1. This table or related slice is empty.

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.