CodeIgniter Forums

Full Version: URL disallowed characters with routes
You're currently viewing a stripped down version of our content. View the full version with proper formatting.

El Forum

Hey, I had just a question about changing this in the config.php file.
$config['permitted_uri_chars'] = 'a-z 0-9~%.:_\-';
$config['permitted_uri_chars'] = '';
I know this is a security risk, but what if my routes is like this
$route['default_controller'] = "home";
$route[':any'] = "avatar/execute";
Will it be safe since the url will not point at any class or function?
If not, what characters is a security risk?

Thank you for your answers!

El Forum

$route[':any'] = "avatar/execute"; -> is like having the default controller (not tested it though). And why would you do that?