Description: ------------ Nearly anything ;-) validates as an URI Reproduce code: --------------- var_export(Validate::uri('')); var_export(Validate::uri('fff')); var_export(Validate::uri('http;//sdfsdf/')); var_export(Validate::uri('http;asdasd//')); Expected result: ---------------- false false false false Actual result: -------------- true true true true

Thank you for taking the time to write to us, but this is not a bug. That's actually because it should validate var_dump(Validate::uri('fff', array('allowed_schemes' => array('http')))); Would give you false the URI function isn't only validating URL like http://www.example.com and such, but it takes on what RFC2396 specifies, so please look at that, even look at the RFC and tell us if there is still a problem...