在我的注册表格验证不工作


Validation in my registration form is not working

我在php中使用PDO创建了一个简单的注册表单存储在后端。当我输入空格键时,它将在后端作为空字段,如果我没有输入任何内容,它不会显示任何错误消息。

<?php
session_start();
$errmsg_arr = array();
$errflag = false;
// configuration
$dbhost     = "localhost";
$dbname     = "pdo_ret";
$dbuser     = "root";
$dbpass     = "";
// database connection
$conn = new PDO("mysql:host=$dbhost;dbname=$dbname",$dbuser,$dbpass);
// new data
$fname = $_POST['fname'];
$lname = $_POST['lname'];
$age = $_POST['age'];
if($fname == '') {
    $errmsg_arr[] = 'You must enter your First Name';
    $errflag = true;
}
if($lname == '') {
    $errmsg_arr[] = 'You must enter your Last Name';
    $errflag = true;
}
if($age == '') {
    $errmsg_arr[] = 'You must enter your Age';
    $errflag = true;
}
if($errflag) {
    $_SESSION['ERRMSG_ARR'] = $errmsg_arr;
    session_write_close();
    header("location: index.php");
    exit();
}
// query
$sql = "INSERT INTO members (fname,lname,age) VALUES (:sas,:asas,:asafs)";
$q = $conn->prepare($sql);
$q->execute(array(':sas'=>$fname,':asas'=>$lname,':asafs'=>$age));
header("location: index.php");
 ?>

如果只有空格的字符串是错误的,您应该使用trim函数:

if(trim($fname) == '') {
    $errmsg_arr[] = 'You must enter your First Name';
    $errflag = true;
}
if(trim($lname) == '') {
    $errmsg_arr[] = 'You must enter your Last Name';
    $errflag = true;
}
if(trim($age) == '') {
    $errmsg_arr[] = 'You must enter your Age';
    $errflag = true;
}

您应该使用trim函数,但不是在条件中,而是在分配$_POST数据

代替:

$fname = $_POST['fname'];
$lname = $_POST['lname'];
$age = $_POST['age'];

你应该有代码:

$fname = trim($_POST['fname']);
$lname = trim($_POST['lname']);
$age = trim($_POST['age']);

否则,你将把数据放入数据库中,可能有白色字符,这将导致未来的问题