Retrieving and Filtering GET and POST requests with JRequest::getVar - Revision history

Wilsonge: Updated to Joomla 2.5 as linked article depends on Joomla 2.5

2013-02-03T20:23:46Z

Updated to Joomla 2.5 as linked article depends on Joomla 2.5

2012-07-14T19:15:03Z

Rearranged contents

2012-02-29T13:54:57Z

‎See also

2011-06-27T00:42:23Z

‎'get': Minor spelling and style

2011-06-05T20:10:40Z

2011-01-15T16:25:33Z

Adjusted link after page move

2010-07-12T22:00:45Z

2010-07-12T21:59:57Z

2010-07-12T21:59:14Z

2010-04-01T08:57:14Z

‎'getVar'

← Older revision		Revision as of 20:23, 3 February 2013
Line 1:		Line 1:
−	{{Notice\|In Joomla! 1.7 {{JVer\|1.7}} and newer, <code>JRequest</code> has been superseded by <code>JInput</code>. See [[Retrieving request data using JInput]].}}	+	{{Notice\|In Joomla! 2.5 {{JVer\|2.5}} and newer, <code>JRequest</code> has been superseded by <code>JInput</code>. See [[Retrieving request data using JInput]].}}

	When writing any web application, it is crucial that you filter input data before using it. Joomla! provides a filtering library to help you accomplish this.		When writing any web application, it is crucial that you filter input data before using it. Joomla! provides a filtering library to help you accomplish this.

@@ Line 1: / Line 1: @@
-When writing any web application, it is crucial that you filter input data before using it. Joomla! provides a set of filtering libraries to help you accomplish this.
+{{Notice|In Joomla! 1.7 {{JVer|1.7}} and newer, <code>JRequest</code> has been superseded by <code>JInput</code>. See [[Retrieving request data using JInput]].}}
 ===Defined in===
@@ Line 83: / Line 87: @@
 * [[JURI]]
 * [[JRoute]]
 [[Category:Development]]

@@ Line 80: / Line 80: @@
 ==See also==
-* [http://api.joomla.org/Joomla-Framework/Environment/JRequest.html JRequest on api.joomla.org]
+* [http://api.joomla.org/1.5/Joomla-Framework/Environment/JRequest.html JRequest on api.joomla.org]
 * [[JURI]]
 * [[JRoute]]

@@ Line 74: / Line 74: @@
 === 'get' ===
-To recieve a whole array filtered. If you would want to get the post data, you can use this.
+To receive a whole array filtered. If you would want to get the POST data, you can use this.
 <source lang="php">JRequest::get( 'post' )</source>
-<nowiki>This returns the standard post array.  You can use it on a template page if needed, or in the models section if convenient, it returns the most recent post.
+<nowiki>This returns the standard POST array.  You can use it on a template page if needed, or in the models section if convenient. It returns the most recent POST.
 Methods of this object were not found in the Framework section where one would expect to find them. </nowiki>
 ==See also==
 * [http://api.joomla.org/Joomla-Framework/Environment/JRequest.html JRequest on api.joomla.org]

@@ Line 1: / Line 1: @@
 When writing any web application, it is crucial that you filter input data before using it. Joomla! provides a set of filtering libraries to help you accomplish this.
@@ Line 86: / Line 85: @@
 ==Security==
-Why not just use the Superglobals? If you are familiar with PHP already you may be wondering, why not just use $_GET / $_POST / $_REQUEST? To make Joomla more secure, all global variables should be read through this function. It removes the possibility for code injection and/or SQL injection. You can also define a default value (as you can see in line 6). Copied and changed from [[Tutorial:Hello_World_WIP || Hello World WIP]].
+Why not just use the Superglobals? If you are familiar with PHP already you may be wondering, why not just use $_GET / $_POST / $_REQUEST? To make Joomla more secure, all global variables should be read through this function. It removes the possibility for code injection and/or SQL injection. You can also define a default value (as you can see in line 6). Copied and changed from [[Creating a simple component - Part 1]].
 [[Category:Development]]

@@ Line 84: / Line 84: @@
 * [[JRoute]]
-==Security (Why not just use the Superglobals?)==
+==Security==
-If you are familiar with PHP already you may be wondering, why not just use $_GET / $_POST / $_REQUEST? To make Joomla more secure, all global variables should be read through this function. It removes the possibility for code injection and/or SQL injection. You can also define a default value (as you can see in line 6). Copied and changed from [[Tutorial:Hello_World_WIP || Hellow World WIP]].
+Why not just use the Superglobals? If you are familiar with PHP already you may be wondering, why not just use $_GET / $_POST / $_REQUEST? To make Joomla more secure, all global variables should be read through this function. It removes the possibility for code injection and/or SQL injection. You can also define a default value (as you can see in line 6). Copied and changed from [[Tutorial:Hello_World_WIP || Hellow World WIP]].
 [[Category:Development]]

@@ Line 65: / Line 65: @@
 Finally, there are some mask constants you can pass in as the fifth parameter that allow you to bypass portions of the filtering:
 <source lang="php">
-$address = JRequest::getVar('address', 'default value goes here', 'post','validation type','mask type');
+$address = JRequest::getVar('address', 'default value goes here', 'post','validation type',mask type);
 </source>
@@ Line 71: / Line 71: @@
 *JREQUEST_ALLOWRAW - bypasses filtering
 *JREQUEST_ALLOWHTML - allows most HTML. If this is not passed in, HTML is stripped out by default.
 === 'get' ===