better validation of possible user input (get)

1 files changed, 27 insertions, 0 deletions

diff --git a/inc/functions.inc.php b/inc/functions.inc.php
new file mode 100644
index 0000000..2906530
--- /dev/null
+++ b/inc/functions.inc.php
@@ -0,0 +1,27 @@
+<?php
+
+# global functions
+
+function validate_get($value, $type) {
+        switch($type) {
+                case 'host':
+                        if (!preg_match('/^[\d\w\W]+$/', $value))
+                                return NULL;
+                break;
+                case 'plugin':
+                case 'type':
+                        if (!preg_match('/^\w+$/', $value))
+                                return NULL;
+                break;
+                case 'pinstance':
+                case 'tinstance':
+                        if (!preg_match('/^[\d\w-]+$/', $value))
+                                return NULL;
+                break;
+        }
+
+        return $value;
+}
+
+
+?>