Holes in most preg_match() filters - PHP Security Blog

During the last week I was performing some audits and like so often it contained preg_match() filters that were not correct. Most PHP developers use ^ and $ within their regular expressions without actually reading the documentation about what they really achieve. You will find a lot of input filters like the following one.<?php $clean = array(); if (preg_match("/^[0-9]+:[X-Z]+$/", $_GET['var']))

[hiro_y]

preg_match関数とD修飾子について。