Question

The URI you submitted has disallowed characters.

How do I intercept this error? Is their a callback_ function? This error occurs when I try to use an = in the URL. E.g. I put 1=1 — I get this this error. Instead of the error page I want to redirect('main/cate/page');

How do I catch this error and redirect instead of displaying “An error was encountered page”

Answer 1

Looks like the error is being thrown in system/core/URI.php. Luckily, you can extend core classes. Create a file in application/core called MY_URI.php and override the function:

class MY_URI extends CI_URI{
    function __construct(){
        parent::__construct();
    }
    function _filter_uri($str){
        if ($str != '' && $this->config->item('permitted_uri_chars') != '' && $this->config->item('enable_query_strings') == FALSE)
        {
            // preg_quote() in PHP 5.3 escapes -, so the str_replace() and addition of - to preg_quote() is to maintain backwards
            // compatibility as many are unaware of how characters in the permitted_uri_chars will be parsed as a regex pattern
            if ( ! preg_match("|^[".str_replace(array('\\-', '\-'), '-', preg_quote($this->config->item('permitted_uri_chars'), '-'))."]+$|i", $str))
            {
                redirect('main/cate/page');
            }
        }

        // Convert programatic characters to entities
        $bad    = array('$',        '(',        ')',        '%28',      '%29');
        $good   = array('$',    '(',    ')',    '(',    ')');

        return str_replace($bad, $good, $str);
    }
}