From 57e54e9ee022fa6fdbbae0d3528759df0086a697 Mon Sep 17 00:00:00 2001 From: Subhamoy Biswas Date: Sat, 18 Nov 2023 21:38:28 +0530 Subject: [PATCH] (refactor): improved search security by filtering input keyword given by the user --- htdocs/core/handle_search.php | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/htdocs/core/handle_search.php b/htdocs/core/handle_search.php index 6456b2d..4e14d76 100644 --- a/htdocs/core/handle_search.php +++ b/htdocs/core/handle_search.php @@ -2,9 +2,17 @@ require 'connection.php'; require 'query_functions.php'; +function input_filter($data){ + $data = trim($data); + $data = stripslashes($data); + $data = htmlspecialchars($data); + return $data; +} + if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST['keyword'])) { $keyword = $_POST['keyword']; + $keyword = input_filter($keyword); $results_array = [ $results_projects = fetch_search_results_projects($conn, $keyword), $results_socials = fetch_search_results_socials($conn, $keyword),