What is the best practice for reading values from a URL parameter in PHP?

When reading values from a URL parameter in PHP, it is important to sanitize and validate the input to prevent security vulnerabilities such as SQL injection or cross-site scripting attacks. One common approach is to use the $_GET superglobal array to retrieve the parameter value and then sanitize it using functions like htmlspecialchars() or filter_input(). Additionally, it is recommended to validate the input against expected data types or formats before further processing. 

// Retrieve and sanitize the value from the URL parameter
$parameter = isset($_GET['parameter']) ? htmlspecialchars($_GET['parameter']) : '';

// Validate the input against expected data types or formats
if (filter_var($parameter, FILTER_VALIDATE_INT)) {
    // Process the parameter value
    echo "Parameter value: " . $parameter;
} else {
    echo "Invalid parameter value";
}

Keywords

PHP URL parameter $_GET parsing validation

Related Questions