CodeIgniter Forums
URL disallowed characters with routes - Printable Version

+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: Archived Discussions (https://forum.codeigniter.com/forum-20.html)
+--- Forum: Archived Development & Programming (https://forum.codeigniter.com/forum-23.html)
+--- Thread: URL disallowed characters with routes (/thread-36388.html)



URL disallowed characters with routes - El Forum - 11-30-2010

[eluser]Unknown[/eluser]
Hey, I had just a question about changing this in the config.php file.
Code:
$config['permitted_uri_chars'] = 'a-z 0-9~%.:_\-';
to
Code:
$config['permitted_uri_chars'] = '';
I know this is a security risk, but what if my routes is like this
Code:
$route['default_controller'] = "home";
$route[':any'] = "avatar/execute";
Will it be safe since the url will not point at any class or function?
If not, what characters is a security risk?

Thank you for your answers!


URL disallowed characters with routes - El Forum - 11-30-2010

[eluser]keithics[/eluser]
$route[':any'] = "avatar/execute"; -> is like having the default controller (not tested it though). And why would you do that?