you can create a class as utility of your project which gets , sanitizes and returns it's value , so you don't need to repeat your code every time .
for example here is my getParam
class that i use , for getting GET
& POST
parameters .
this class returns an object containing status
and parameter value
class getparam
{
public static function getParam($name, $method = 'POST', $encodeHTML = 0, $necessary = 1, $escape = 1)
{
$result = (object) [];
$result->status = 1;
$method = strtoupper($method);
$baseModelInstance = new baseModel();
if ($method == "POST") {
if (isset($_POST[$name])) {
if (!is_array($_POST[$name])) {
$param = htmlspecialchars($_POST[$name]);
$param = stripslashes($param);
$param = $encodeHTML == 1 ? htmlentities($param, ENT_HTML5, 'UTF-8') : $param;
$param = trim($param);
$param = $escape == 1 ? $baseModelInstance->real_escape_string($param) : $param;
} else {
$param = $_POST[$name];
}
} elseif ($necessary) {
$result->status = 0;
$result->message = "$name has not been setted";
return $result;
} else {
$param = null;
}
} elseif ($method == "GET") {
if (isset($_GET[$name])) {
if (!is_array($_GET[$name])) {
$param = htmlspecialchars($_GET[$name]);
$param = stripslashes($param);
$param = $encodeHTML == 1 ? htmlentities($param, ENT_HTML5, 'UTF-8') : $param;
$param = trim($param);
$param = $escape == 1 ? $baseModelInstance->real_escape_string($param) : $param;
} else {
$param = $_GET[$name];
}
} elseif ($necessary) {
$result->status = 0;
$result->message = "$name has not been setted";
return $result;
} else {
$param = null;
}
} else {
$result->status = 0;
$result->message = "unknown method !";
return $result;
}
if (is_null($param) && $necessary) {
$result->status = 0;
$result->message = "$name is null or empty";
return $result;
} else {
$result->param = $param;
return $result;
}
}
}
you can have your own class and methods base on how you need it