FuelPHP Forums

WanWizard wrote on Tuesday 6th of December 2011:

No, there is not. FuelPHP is a lot more flexible than that. In your config/config.php, in the 'security' section, there is an entry called 'uri_filter'. By default, it only contains htmlentities, but you can add anything that is callable, such as object or static class methods, or other PHP functions. You could add strip_tags to simply strip them, of write a custom class method that mimics CI's behaviour (i.e. use a regex, and throw an error if it doesn't match).

uri_filter's mechanism is great. But I have a question to the default. Is the FuelPHP's default uri_filter, htmlentities really needed? If we output uri data in view, FuelPHP's default output_filter escapes them.
If we output uri data to email, the recipient would see like "H& amp;M"(I intentionally added a space after &, because this forum can't handle HTML character references as it is) and it is not good.
So I can't see the reason that the htmlentities is needed in FuelPHP. Or, if we delete it in config.php, what risk do we take?
P.S.
This forum is something wrong with my Firefox. The page layout is a bit broken. I could not post new topic. Added: I'm sorry. New Topic button is below and works fine. I'll post new topic.

No, there is not. FuelPHP is a lot more flexible than that. In your config/config.php, in the 'security' section, there is an entry called 'uri_filter'. By default, it only contains htmlentities, but you can add anything that is callable, such as object or static class methods, or other PHP functions. You could add strip_tags to simply strip them, of write a custom class method that mimics CI's behaviour (i.e. use a regex, and throw an error if it doesn't match).