|
|
S-254: Vulnerabilities in GDI
|
|
MB_EREGI_REPLACE(3) 1 MB_EREGI_REPLACE(3) mb_eregi_replace - Replace regular expression with multibyte support ignoring case SYNOPSIS
string mb_eregi_replace (string $pattern, string $replace, string $string, [string $option = "msri"]) DESCRIPTION
Scans $string for matches to $pattern, then replaces the matched text with $replacement. PARAMETERS
o $pattern - The regular expression pattern. Multibyte characters may be used. The case will be ignored. o $replace - The replacement text. o $string - The searched string. o $option -$option has the same meaning as in mb_ereg_replace(3). RETURN VALUES
The resultant string or FALSE on error. NOTES
Note The internal encoding or the character encoding specified by mb_regex_encoding(3) will be used as the character encoding for this function. Warning Never use the e modifier when working on untrusted input. No automatic escaping will happen (as known from preg_replace(3)). Not taking care of this will most likely create remote code execution vulnerabilities in your application. SEE ALSO
mb_regex_encoding(3), mb_ereg_replace(3). PHP Documentation Group MB_EREGI_REPLACE(3)
