XF 2.0 How to secure fetch $_POST when $this->filter does not exist?

[Marcus]

Currently I grab the content_id perfectly like this in XF\Spam\Checker\SpamPhrases which looks a bit funny but is the most straight forward way I could achieve:

$contentId = array_values(json_decode($_POST['attachment_hash_combined'],true)['context'])[0]

But it is usually a good idea to not directly work with POST and GET, I tried to directly go to the XF filter but it did not really work out.

 

[Chris D]

$inputFilterer = \XF::app()->inputFilterer();
$hashCombined = $inputFilterer->filter('attachment_hash_combined', 'json-array');

 

[Marcus]

Wow, thanks !!!!