validation - Securely validate php form field for 5-digit numeric value -


i have functioning form page user can update zip code based on username, saved session variable.

everything works except new feature validate zip code. have html5 pattern in place if enter 4 digits, prompts them follow 5 digit format. however, i"m required validate securely on server side well.

i've opted regular expression match 5 digits between 0 , 9, , i've nested in if statement being used preform sql queries. issue if enter 123 zip code, still submits.

obviously, need submit if it's 5 digits, otherwise print error message. i'm wondering if it's in structure or syntax.

here's code, help:

if (isset($_session['missingzipuser'])) {  if(!preg_match("/^[0-9]{5}$/", $_post['zip'])) { echo "the zip code must 5-digit number."; }else{    //query updating main table first   $sql = " update " . table. "       set zip= ?       uname ?";   $stmt = odbc_prepare($connect, $sql);   $success = odbc_execute($stmt, array($_post['zip'],   $_session['missingzipuser']));    //query updating both fields in secondary table   $sql2 = " update " . table. "       set zip1= ?, zip2= ?       uname= ?";   $stmt2 = odbc_prepare($connect, $sql2);   $success2 = odbc_execute($stmt2, array($_post['zip'], $_post['zip'],   $_session['missingzipuser'])); } }

update contrary of comments below, update code still passing info successful.

just fix condition , go:

if (isset($_session['missingzipuser']) && isset($_post['zip'])) {     if (is_string($_post['zip']) && 1 === preg_match("/^[0-9]{5}$/", $_post['zip'])) {         // update record in database     } else {         echo "the zip code must 5-digit number.";     } }

you can simplify regular expression:

if (isset($_session['missingzipuser']) && isset($_post['zip'])) {     if (is_string($_post['zip']) && 1 === preg_match("/^\d{5}$/", $_post['zip'])) {         // update record in database     } else {        echo "the zip code must 5-digit number.";     } }

note pointed out, both original simplified regular expression verify whether string 5-digit number. not 5-digit numbers valid zip codes.


Comments

Post a Comment

Popular posts from this blog

node.js - Node js - Trying to send POST request, but it is not loading javascript content -

i have been trying send post request website, , has not been loading full site. i guessing problem node js not loading javascript content, executing it. can see javascript in response, though never loads content javascript files producing in html. what mean is, doesn't execute javascript. how make node js code overcome this, , wait the full website load? have tried native code, , "request' module, both producing same errors. if helps, don't need native javascript. modules fine. some code have tried (request module): var options = { method: 'post', uri: 'https://url', formdata: { 'email': 'email', 'prize': '0', 'transactional': 'on' }, headers: { /* 'content-type': 'application/x-www-form-urlencoded' */ // set automatically } }; rp(options) .then(function (body) { console.log(body) }) .catch(function (err) { console.log(err) }); when fetch content...
Read more

javascript - Replicate keyboard event with html button -

i have tried few ways make happen. have javascript pinball game uses keyboard keys controls. converting application touch screen display. workaround, hoping overlay buttons when clicked simulate keyboard strokes. have done research , sounds should work. using jquery v3.2.1 here things have tried far... html element: <input type="button" class="coil"></input> $('.coil').trigger({type: 'keydown', which: 40, keycode: 40}); with this, not errors, nothing happens. var coilkey = $('body').keydown(function(e) { switch (e.keycode) { case 40: break;} }) $('.coil').click(coilkey); this 1 returns error in console... ((jquery.event.special[handleobj.origtype] || (intermediate value)).handle || handleobj.handler).apply not function below javascript game engine handles key listeners... addkeylistener: function (keyandlistener) { this.keylisteners.push(keyandlistener); }, // gi...
Read more

javascript - Web audio api 5.1 surround example not working in firefox -

i've been playing lott lately web audio api on both firefox , chrome. few days ago started experiment surround set. when trying surround audio in web audio api came notice example works fine in chrome v59 not in firefox v54. // create web audio api context var audioctx = new (window.audiocontext || window.webkitaudiocontext)(); audioctx.destination.channelinterpretation = 'discrete'; audioctx.destination.channelcountmode = 'explicit'; audioctx.destination.channelcount = 6; var oscillators = []; var merger = audioctx.createchannelmerger(6); console.log(audioctx.destination, merger); //merger.channelinterpretation = 'discrete'; //merger.channelcountmode = 'explicit'; //merger.channelcount = 6; var addoscilator = function(channel, frequency) { var oscillator = audioctx.createoscillator(); oscillator.frequency.value = frequency; // value in hertz oscillator.connect(merger,0,channel); oscillator.start(); oscillators.push(o...
Read more