MDL-28345 make sure input parameters do not contain invalid utf-8 chars

2011-07-15 15:00:49 +02:00
parent ecb8829273
commit 78fcdb5fdb
9 changed files with 92 additions and 14 deletions
@@ -58,7 +58,8 @@ function min_optional_param($name, $default, $type) {
 */
 function min_clean_param($value, $type) {
    switch($type) {
-        case 'RAW':      break;
+        case 'RAW':      $value = iconv('UTF-8', 'UTF-8//IGNORE', $value);
+                         break;
        case 'INT':      $value = (int)$value;
                         break;
        case 'SAFEDIR':  $value = preg_replace('/[^a-zA-Z0-9_-]/', '', $value);