Validation of not allowed username string in input form

Question

I have a collection of string stored in database table separated by comma.

Table "not_allowed" content :

admin,administrator,register,email,password,username,database,computer,... etc. (as admin defind)

In user registration, I want that collection of string is "not allowed" as their username input.

How to make the validation in php in relation with database table content?

Manual scipt I have :

$notallowed = array('admin','administrator','register','email','password','username','database','computer',... etc);

if (in_array($username, $notallowed, true)) {
    $errors[] = 'The Selected username is not allowed! ';
}

@MarkM, I don't want to type all the 'string' in the script, I need to get it from database table that the content can be edited by administrator. — user3706926
– user3706926, Commented Nov 10, 2014 at 2:47

Mark Miller · Accepted Answer · 2014-11-10 02:50:22Z

1

Create a table in the DB called not_allowed. Use it to store all the not allowed strings. When a user signs in, query that table to get all the not allowed strings. Store the result in a variable and use it in the same way you use it now.

Depending on your program structure this can be done in different ways, but here's the basic idea using mysqli:

$query = $mysqli->query("SELECT * FROM not_allowed");
$not_allowed = $query->fetch_array();

if (in_array($username, $not_allowed, true)) {
    $errors[] = 'The Selected username is not allowed! ';
}

answered Nov 10, 2014 at 2:50

Mark Miller

7,4472 gold badges19 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

user3706926 Over a year ago

Nice answer, I just don't realize that fetch_array() is a function too.. I am really stupid.

user3706926 Over a year ago

public function SelectNotAllowed() { $query = $this->db->prepare("Select not_allowed FROM website_setting` "); { $query->execute(); return $rows = $query->FETCH_ARRAY(); } catch (PDOException $e){die($e->getMessage());} } is not working!

user3706926 Over a year ago

Fatal error: Call to undefined method PDOStatement::FETCH_ARRAY()

Mark Miller Over a year ago

@user3706926 Looks like you are using PDO. The equivalent function is fetchAll()

Collectives™ on Stack Overflow

Validation of not allowed username string in input form

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related