PHP Form Data Validation and Filtering Techniques

With the growth of the Internet, forms have become a crucial way for users to interact with websites, and ensuring the safety and validity of form data is essential for developers. Using PHP functions for data validation and filtering can effectively prevent malicious input and data errors.

1. Data Validation

1. Validate Required Fields

Many forms contain required fields; you can check whether a field is empty using the PHP functions empty() or isset() .

Example code:

if (empty($_POST['username']) || empty($_POST['password'])) {
    echo "Username and password cannot be empty!";
    exit;
}

2. Validate Email Format

To verify that a user‑entered email matches a proper format, use the filter_var() function together with the FILTER_VALIDATE_EMAIL filter.

Example code:

$email = $_POST['email'];

if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo "Invalid email format!";
    exit;
}

3. Validate Phone Number Format

Phone numbers can be validated with a regular expression.

Example code:

$phone = $_POST['phone'];

if (!preg_match("/^1[3456789]\d{9}$/", $phone)) {
    echo "Invalid phone number format!";
    exit;
}

2. Data Filtering

Filtering removes illegal or unnecessary characters from submitted data.

1. Filter HTML Tags

To prevent malicious HTML or scripts, use strip_tags() to strip tags.

Example code:

$content = $_POST['content'];
$filteredContent = strip_tags($content);

2. Filter Special Characters

Use htmlspecialchars() to escape special characters.

Example code:

$content = $_POST['content'];
$filteredContent = htmlspecialchars($content);

3. Prevent SQL Injection

Escape user input before using it in SQL statements with mysqli_real_escape_string() .

Example code:

$username = $_POST['username'];
$password = $_POST['password'];

$username = mysqli_real_escape_string($con, $username);
$password = mysqli_real_escape_string($con, $password);

The above are common validation and filtering methods; you can customize additional rules as needed.

In summary, by applying PHP validation and filtering functions, you can ensure form data safety and effectiveness, choosing appropriate techniques based on business requirements and security needs to enhance user experience and protect website security.

Java learning material download

C language learning material download

Frontend learning material download

C++ learning material download

PHP learning material download