|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #71576 FILTER_VALIDATE_URL uses an obsolete URI RFC
Submitted: 2016-02-12 15:33 UTC Modified: -
Avg. Score:5.0 ± 0.0
Reproduced:1 of 2 (50.0%)
Same Version:0 (0.0%)
Same OS:1 (100.0%)
From: apokryfos84 at gmail dot com Assigned:
Status: Open Package: Filter related
PHP Version: 5.6.18 OS: Linux
Private report: No CVE-ID: None
View Add Comment Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please — but make sure to vote on the bug!
Your email address:
Solve the problem:
44 - 18 = ?
Subscribe to this entry?

 [2016-02-12 15:33 UTC] apokryfos84 at gmail dot com
According to

"Validates value as URL (according to ยป"

However RFC 2396 has been made obsolete by RFC 3986. This results in several valid RFC 3986 URIs to not validate correctly, (e.g. protocol agnostic URLs). 

Test script:
echo filter_var("",FILTER_VALIDATE_URL)?"yes":"no";
// Echoes yes

echo filter_var("//",FILTER_VALIDATE_URL)?"yes":"no";
// Echoes no but should echo yes as per section 4.2 of RFC 3986


Add a Patch

Pull Requests

Add a Pull Request

PHP Copyright © 2001-2023 The PHP Group
All rights reserved.
Last updated: Mon Sep 25 14:01:25 2023 UTC