Avoid html tags in laravel string validation

Question

I want to prevent users of using html tags in their username fields when they are registering, how can I do that?

For instance currently I have a user he registered with such username

E7JfyqxE4lsbqQ <html><a href="https://www.apple.com"><img src="https://...../d28/2011/19/93045d3fb9c4.jpg" width="600" height="234" alt="bill"></a> </html>

I just want to allow letters and numbers (a-z, 0-9) that's all.

RegisterController

protected function validator(array $data)
{
    return Validator::make($data, [
        'name' => ['required', 'string', 'max:255'],
        'username' => 'required|string|max:255|unique:users|not_exist',
        'email' => ['required', 'string', 'email', 'max:255', 'unique:users'],
        'password' => ['required', 'string', 'min:8', 'confirmed'],
    ]);
}

try to use regex and include in the regex the <> within this role — Japs
– Japs, Commented Mar 3, 2021 at 3:27
@codeformoney you mean like this? 'name' => ['required', 'string', 'max:255', 'not_regex:<>'], — mafortis
– mafortis, Commented Mar 3, 2021 at 3:28

patricus · Accepted Answer · 2021-03-03 03:32:01Z

2

If you only want to allow alphanumeric characters, you can use Laravel's built in alpha_num validation.

protected function validator(array $data)
{
    return Validator::make($data, [
        'name' => ['required', 'string', 'alpha_num', 'max:255'],
        'username' => 'required|string|alpha_num|max:255|unique:users|not_exist',
        'email' => ['required', 'string', 'email', 'max:255', 'unique:users'],
        'password' => ['required', 'string', 'min:8', 'confirmed'],
    ]);
}

answered Mar 3, 2021 at 3:32

patricus

62.9k15 gold badges157 silver badges154 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Japs · Accepted Answer · 2021-03-03 03:31:53Z

0

You can do something like this

protected function validator(array $data)
{
    return Validator::make($data, [
        'name' => ['required', 'string', 'max:255'],
        'username' => [
          'required',
          'string',
          'max:255',
          'string',
          'unique:users',
          'not_exist',
          'not_regex:<\s*a[^>]*>(.*?)<\s*/\s*a>'
        ],
        'email' => ['required', 'string', 'email', 'max:255', 'unique:users'],
        'password' => ['required', 'string', 'min:8', 'confirmed'],
    ]);
}

You can add more regex if you have more to include

answered Mar 3, 2021 at 3:31

Japs

1,0522 gold badges11 silver badges20 bronze badges

Collectives™ on Stack Overflow

Avoid html tags in laravel string validation

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related