PHP - Properly validate and/or sanitize form input

Question

I have a form on a website for visitors to create an account. I need to make sure each field is in a certain format before saving it.

Username - only letters, numbers and underscore.

Password - Anything that's not harmful, how avoid php/html code?

Email - valid email (filter_var()?)

Mobile - 10 digit number (is_numeric()?)

Birthdate - needs to be YYYY-MM-DD, I'm using input type 'date'

Do I need to use Reg Ex to accomplish this?

I already read that, I don't want to sanitize a username. It needs to be a certain format. For example, I couldn't have ef141%2wetw%2 as a username. — jstudios
– jstudios, Commented Nov 26, 2014 at 18:39
"Do I need to use Reg Ex to accomplish this?" No, you don't have to, but it would probably be the most efficient way — Patrick Q
– Patrick Q, Commented Nov 26, 2014 at 18:56

ffab · Accepted Answer · 2014-11-26 21:29:16Z

1

You can also take a look at Php Filter / Validation or event Sanitization http://php.net/manual/en/book.filter.php

answered Nov 26, 2014 at 21:29

ffab

111 silver badge4 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1