Thread: Filltering

how do I fillter chars like ` & ^ %

you can try something like this:

PHP Code:

$text = preg_replace('/[^[:alnum:]\-\.\_\^]/', '', $text); 


How would I put that in an if statment?

why into if statement?

Ok here is what I got

PHP Code:

$text = preg_replace('/[^[:alnum:]\-\.\_\^]/', '', $username);
if($text == true)
        {
        die ("Unsupported character(s)");
                } 


no, for what you need the filtering? password or username?

I want to remove any special characters from username, password to help prevent mysql injection as for the email I need to allow the @ symbol

to prevent mysql injection use: mysql_real_escape_string

Is that all I should use?

yes thats all