php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #50204 FILTER_VALID_EMAIL passes without top level domain
Submitted: 2009-11-17 16:01 UTC Modified: 2009-11-17 18:14 UTC
From: brian dot sulzen at aescreations dot com Assigned:
Status: Not a bug Package: Filter related
PHP Version: 5.2.11 OS: FreeBSD 6.3
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: brian dot sulzen at aescreations dot com
New email:
PHP Version: OS:

 

 [2009-11-17 16:01 UTC] brian dot sulzen at aescreations dot com 
Description:
------------
FILTER_VALIDATE_EMAIL is passes addresses with out top level domain (i.e., .com, .net, etc).

Reproduce code:
---------------
<?php    
    
$email_address = "test2_mail@example";    
var_dump(filter_var($email_address, FILTER_VALIDATE_EMAIL));    
                                                                
$email_address = "test-mail@example.com";    
var_dump(filter_var($email_address, FILTER_VALIDATE_EMAIL));    
    
$email_address = "test+mail@example.com";    
var_dump(filter_var($email_address, FILTER_VALIDATE_EMAIL));    
                                                                        
?>



Expected result:
----------------
bool(false)
string(21) "test-mail@example.com"
string(21) "test+mail@example.com"

Actual result:
--------------
string(18) "test2_mail@example"
string(21) "test-mail@example.com"
string(21) "test+mail@example.com"

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-11-17 16:06 UTC] rasmus@php.net 
That's not a bug.  It only validates that the address looks valid, not whether the email address actually exists.  email addresses without a tld are perfectly valid.  Try sending an email to: root@localhost for example.  Or on my personal server rasmus@colo works.  Same for Intranet applications.  You can have all sorts of valid email addresses that have no TLD.
 [2009-11-17 18:14 UTC] brian dot sulzen at aescreations dot com 
Was not sure if it was a bug or not. All I know is before the php 
portupgrade, addresses without a top level domain would not pass 
validation.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Mon Mar 10 22:01:33 2025 UTC