All user's data (data entered by users) has to be cast

[samuel89]

Prestashop taught in http://www.prestashop.com/forums/forum/116-development/   that

 

All user's data (data entered by users) has to be cast.

 

Example:

 

$data = Tools::getValue('name');


$myObject->street_number = (int)Tools::getValue('street_number');

The 1st example is not casted. Why?

 

Thanks.

 

 

[math_php]

Hi,

 

Because casting a string will give you the same string. 

'Name' should be validated with regex.

 

Cast is usefull especially for numeric values.

 

Regards

[samuel89]

Thanks for your reply. Is there an example regarding the regex validation you were talking about?

 

Thanks.

[math_php]

For sure look at the class Validate.

 

Examples :

 

$bool_resp = Validate::isName($name)
$bool_resp = Validate::isCatalogName($name)