PHP: Stripping special characters out of input

richieboy · 21 Jun 2006 at 22:01

I have a form with an input "username". I would like to strip special characters out of the username before it is inserted into my DB. I currently have:

Code:

$username = preg_replace('#\s+#s', ' ', $username);

Which removes multiple whitespaces and converts them into one, but how can i modify it to remove special characters aswell? When i say special characters i mean stuff like:

-_!"£$%^&*()#~`¬¦€

I ONLY want a person to be able to have a-z, A-Z, and 0-9 in their username...help?! How do i change that line to incorporate removing the special characters? I dont want hypens or underscores either!

Berserker · 21 Jun 2006 at 22:19

Code:

$username = preg_replace('/[^a-zA-Z0-9]/', '', $username);

Doubtless there's a more 'elegant' solution.

richieboy · 21 Jun 2006 at 22:25

Berserker said:
Code:

$username = preg_replace('/[^a-zA-Z0-9]/', '', $username);

Doubtless there's a more 'elegant' solution.

Thanks...will that sort my whitespaces out aswell? If not is there any way to "add" the whitespaces bit in there too, or will the above not allow whitespaces anyway because they arent a-z/A-Z or 0-9?

Really appreciate your help

richieboy · 21 Jun 2006 at 22:32

Never mind, unless you say otherwise i have been testing it and it now converts me inputting:

test---user 1 2 3 #

to:

testuser123

Perfect. You sir, are a kind man.

robmiller · 21 Jun 2006 at 22:52

More "elegant" but with the implicit addition of underscores:

Code:

$username = preg_replace('/\W/', '', $username);

(Strips everything except A-Z, a-z, 0-9 and _)

If you don't want underscores then the Beserker's is the only way

Berserker · 21 Jun 2006 at 22:58

I knew one of the \ shortcuts would fit, but I'm no Perl guy.