plugins - Sanitizing file & directory form input

admin管理员组

文章数量:1313736

I'm looking to sanitize admin form input for update_option. The input is for a directory path and file name. The input will look like this:

/directory/subdirectory/

and

/thisfile.min.js

So far, every sanitize I've tried strips out the forward slashes. Any suggestions?

I'm looking to sanitize admin form input for update_option. The input is for a directory path and file name. The input will look like this:

/directory/subdirectory/

and

/thisfile.min.js

So far, every sanitize I've tried strips out the forward slashes. Any suggestions?

• plugins
• plugin-development

Share Improve this question asked Nov 27, 2020 at 15:11 uPromptuPrompt 17299 bronze badges

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 1

The function that you would want to use is sanitize_text_field() which among other things, strips all HTML tags, and remove line breaks, tabs and extra white space.

// This worked fine for me - I got /directory/subdirectory/
$value = sanitize_text_field( '/directory/subdirectory/' );

// And so does this one - I got /thisfile.min.js
$value = sanitize_text_field( '/thisfile.min.js' );

// Even with an actual form input (e.g. <input name="my_field">),
// the function worked just fine (using the same data as above).
$value = sanitize_text_field( $_POST['my_field'] );

So have you already tried that function and are you sure it stripped the /? How about the other similar functions listed here?

本文标签： pluginsSanitizing file amp directory form input