Filltering

[ripkk2tfk]

how do I fillter chars like ` & ^ %

[GumSlone]

you can try something like this:

$text = preg_replace('/[^[:alnum:]\-\.\_\^]/', '', $text); 

[ripkk2tfk]

How would I put that in an if statment?

[GumSlone]

why into if statement?

[ripkk2tfk]

Ok here is what I got

$text = preg_replace('/[^[:alnum:]\-\.\_\^]/', '', $username);
if($text == true)
        {
        die ("Unsupported character(s)");
                } 

[GumSlone]

no, for what you need the filtering? password or username?

[ripkk2tfk]

I want to remove any special characters from username, password to help prevent mysql injection as for the email I need to allow the @ symbol

[GumSlone]

to prevent mysql injection use: mysql_real_escape_string
PHP: mysql_real_escape_string - Manual

[ripkk2tfk]

Is that all I should use?

[GumSlone]

yes thats all

[ripkk2tfk]

Thanks Gumslone

[GiLL]

one other way

put this in your confg.php or ini.php

function scharin($word)
{
  $chars = "abcdefghijklmnopqrstuvwxyz0123456789";
  for($i=0;$i<strlen($word);$i++)
  {
    $ch = substr($word,$i,1);
  $nol = substr_count($chars,$ch);
  if($nol==0)
  {
    return true;
  }
  }
  return false;
} 

put this line in your register.php and you replace $login to your user name etc

if(scharin($login) == true) $error=$error.'Invalid Characters in Nick!<br/>'; 

and

if(strlen($login)<3) $error=$error.'Nick should be Minimum of 3 words!<br/>'; 

if you need more and strong filter send me pm will tell you

[GumSlone]

put this in your confg.php or ini.php

function scharin($word)
{
  $chars = "abcdefghijklmnopqrstuvwxyz0123456789";
  for($i=0;$i<strlen($word);$i++)
  {
    $ch = substr($word,$i,1);
  $nol = substr_count($chars,$ch);
  if($nol==0)
  {
    return true;
  }
  }
  return false;
} 

put this line in your register.php and you replace $login to your user name etc

if(scharin($login) == true) $error=$error.'Invalid Characters in Nick!<br/>'; 

and

if(strlen($login)<3) $error=$error.'Nick should be Minimum of 3 words!<br/>'; 

if you need more and strong filter send me pm will tell you

this is not a good solution to prevent mysql injection

[ripkk2tfk]

It would be nice just be use
1234567890abcdefghijklmnopqrstuvwxyz
nothing else

[ripkk2tfk]

This thread is going to help alot of people who are new to Php I personally find filtering to be a pain.