Skip to content
PHP Logo

Are there any potential pitfalls in using file_get_contents and file_put_contents for downloading HTML content?

Using file_get_contents and file_put_contents to download HTML content can potentially lead to security vulnerabilities if the input is not properly sanitized. To prevent this, it's important to validate and sanitize the input URL before using it in file_get_contents. Additionally, it's recommended to use cURL for more control over the HTTP request and response.

php 
$url = filter_var($_GET['url'], FILTER_SANITIZE_URL);

if (filter_var($url, FILTER_VALIDATE_URL)) {
    $html = file_get_contents($url);

    if ($html !== false) {
        file_put_contents('downloaded.html', $html);
        echo 'HTML content downloaded successfully.';
    } else {
        echo 'Failed to download HTML content.';
    }
} else {
    echo 'Invalid URL.';
}

Related questions