You may also write:
<?php
if (isset($_POST) && $_POST != NULL ){
foreach ($_POST as $key => $value) {
// perform validation of each item
}
?>
Here's a more detailed example:
<?php
if (isset($_POST) && $_POST != NULL) {
$clean = array();
foreach ($_POST as $key => $value) {
switch($key)
{
case "a":
if (ctype_digit($value)){
$clean[$key] = $value;
} break;
case "b":
if ( ctype_alpha($value)){
$clean[$key] = $value;
} break;
case "c":
if ( ctype_alnum($value)){
$clean[$key] = $value;
} break;
case "d":
if (ctype_punct($value)){
$clean[$key] = $value;
} break;
default: echo $value, " is invalid data\n";
}
}
var_dump($clean);
}
?>
So, if you had a form with input fields a,b,c,d and someone spoofed your form and added a field e, then the preceding code would not accept the value from field e.