用 PHP 对 MongoDb 进行消毒

Question

I have this code:

$pid = $_GET["pid"];

$manager = new MongoDb\Driver\Manager("mongodb://localhost:27017");
$query = new MongoDb\Driver\Query(["pid" => $pid]);

$rows = $manager->executeQuery("shop.products", $query);

Is there a way to sanitize the $pid with php? Thank you.

Answer 1

You can cast $pid to a string in the query to guard against it being a mapping.