表单数据校验

分为客户端和服务器端

 

服务器端

validation类

/** * Validation Class * * @package CodeIgniter * @subpackage Libraries * @category Validation * @author Rick Ellis * @link http://www.codeigniter.com/user_guide/libraries/validation.html */ class Validation { var $error_string = ''; var $_error_array = array(); var $_rules = array(); var $_fields = array(); var $_error_messages = array(); var $_current_field = ''; var $_safe_form_data = FALSE; var $_error_prefix = '<p>'; var $_error_suffix = '</p>'; /** * Constructor * */ function __construct() { } // -------------------------------------------------------------------- /** * Set Fields * * This function takes an array of field names as input * and generates class variables with the same name, which will * either be blank or contain the $_POST value corresponding to it * * @access public * @param string * @param string * @return void */ function set_fields($data = '', $field = '') { if ($data == '') { if (count($this->_fields) == 0) { return FALSE; } } else { if ( ! is_array($data)) { $data = array($data => $field); } if (count($data) > 0) { $this->_fields = $data; } } foreach($this->_fields as $key => $val) { $this->$key = ( ! isset($_POST[$key]) OR is_array($_POST[$key])) ? '' : $this->prep_for_form($_POST[$key]); $error = $key.'_error'; if ( ! isset($this->$error)) { $this->$error = ''; } } } // -------------------------------------------------------------------- /** * Set Rules * * This function takes an array of field names and validation * rules as input ad simply stores is for use later. * * @access public * @param mixed * @param string * @return void */ function set_rules($data, $rules = '') { if ( ! is_array($data)) { if ($rules == '') return; $data[$data] = $rules; } foreach ($data as $key => $val) { $this->_rules[$key] = $val; } } // -------------------------------------------------------------------- /** * Set Error Message * * Lets users set their own error messages on the fly. Note: The key * name has to match the function name that it corresponds to. * * @access public * @param string * @param string * @return string */ function set_message($lang, $val = '') { if ( ! is_array($lang)) { $lang = array($lang => $val); } $this->_error_messages = array_merge($this->_error_messages, $lang); } // -------------------------------------------------------------------- /** * Set The Error Delimiter * * Permits a prefix/suffix to be added to each error message * * @access public * @param string * @param string * @return void */ function set_error_delimiters($prefix = '<p>', $suffix = '</p>') { $this->_error_prefix = $prefix; $this->_error_suffix = $suffix; } // -------------------------------------------------------------------- function lang($key) { $lang = array(); include(SETTING_PATH . DIRSEP . 'validation.php'); if(isset($lang[$key])) return $lang[$key]; else return false; } /** * Run the Validator * * This function does all the work. * * @access public * @return bool */ function run($ctrl=null) { // Do we even have any data to process? Mm? if (count($_POST) == 0 OR count($this->_rules) == 0) { return FALSE; } // Cycle through the rules and test for errors foreach ($this->_rules as $field => $rules) { //Explode out the rules! $ex = explode('|', $rules); // Is the field required? If not, if the field is blank we'll move on to the next text if ( ! in_array('required', $ex, TRUE) AND strpos($rules, 'callback_') === FALSE) { if ( ! isset($_POST[$field]) OR $_POST[$field] == '') { continue; } } /* * Are we dealing with an "isset" rule? * * Before going further, we'll see if one of the rules * is to check whether the item is set (typically this * applies only to checkboxes). If so, we'll * test for it here since there's not reason to go * further */ if ( ! isset($_POST[$field])) { if (in_array('isset', $ex, TRUE) OR in_array('required', $ex)) { if ( ! isset($this->_error_messages['isset'])) { if (FALSE === ($line = $this->lang('isset'))) { $line = 'The field was not set'; } } else { $line = $this->_error_messages['isset']; } $field = ( ! isset($this->_fields[$field])) ? $field : $this->_fields[$field]; $this->_error_array[] = sprintf($line, $field); } continue; } /* * Set the current field * * The various prepping functions need to know the * current field name so they can do this: * * $_POST[$this->_current_field] == 'bla bla'; */ $this->_current_field = $field; // Cycle through the rules! foreach ($ex As $rule) { // Is the rule a callback? $callback = FALSE; if (substr($rule, 0, 9) == 'callback_') { $rule = substr($rule, 9); $callback = TRUE; } // Strip the parameter (if exists) from the rule // Rules can contain a parameter: max_length[5] $param = FALSE; if (preg_match("/(.*?)/[(.*?)/]/", $rule, $match)) { $rule = $match[1]; $param = $match[2]; } // Call the function that corresponds to the rule if ($callback === TRUE and isset($ctrl)) { if ( ! method_exists($ctrl, $rule)) { continue; } $result = $ctrl->$rule($_POST[$field], $param); // If the field isn't required and we just processed a callback we'll move on... if ( ! in_array('required', $ex, TRUE) AND $result !== FALSE) { continue 2; } } else { if ( ! method_exists($this, $rule)) { /* * Run the native PHP function if called for * * If our own wrapper function doesn't exist we see * if a native PHP function does. Users can use * any native PHP function call that has one param. */ if (function_exists($rule)) { $_POST[$field] = $rule($_POST[$field]); $this->$field = $_POST[$field]; } continue; } if ($rule == 'filter_c' and in_array('required',$ex)) { $result = $this->filter_c($_POST[$field], $param); if ($result != $_POST[$field]) { $rule = 'filter_c'; $line = "%s中有不被允许的字符"; $result = false; $flag = false; } } else $result = $this->$rule($_POST[$field], $param); } // Did the rule test negatively? If so, grab the error. if ($result === FALSE) { if ( ! isset($this->_error_messages[$rule])) { if (FALSE === ($line = $this->lang($rule))) { $line = 'Unable to access an error message corresponding to your field name.'; } } else { $line = $this->_error_messages[$rule];; } // Build the error message $mfield = ( ! isset($this->_fields[$field])) ? $field : $this->_fields[$field]; $mparam = ( ! isset($this->_fields[$param])) ? $param : $this->_fields[$param]; $message = sprintf($line, $mfield, $mparam); // Set the error variable. Example: $this->username_error $error = $field.'_error'; $this->$error = $this->_error_prefix.$message.$this->_error_suffix; // Add the error to the error array $this->_error_array[] = $message; continue 2; } else { if ($rule == 'filter_c' or $rule == 'filter_r' or $rule == 'filter_t') { $_POST[$field] = $this->$rule($_POST[$field]); $this->$field = $_POST[$field]; } } } } $total_errors = count($this->_error_array); /* * Recompile the class variables * * If any prepping functions were called the $_POST data * might now be different then the corresponding class * variables so we'll set them anew. */ if ($total_errors > 0) { $this->_safe_form_data = TRUE; } $this->set_fields(); // Did we end up with any errors? if ($total_errors == 0) { return TRUE; } // Generate the error string foreach ($this->_error_array as $val) { $this->error_string .= $this->_error_prefix.$val.$this->_error_suffix; } return FALSE; } // -------------------------------------------------------------------- /** * Required * * @access public * @param string * @return bool */ function required($str) { if ( ! is_array($str)) { return (trim($str) == '') ? FALSE : TRUE; } else { return ( ! empty($str)); } } // -------------------------------------------------------------------- /** * Match one field to another * * @access public * @param string * @return bool */ function matches($str, $field) { if ( ! isset($_POST[$field])) { return FALSE; } return ($str !== $_POST[$field]) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Minimum Length * * @access public * @param string * @return bool */ function min_length($str, $val) { if ( ! is_numeric($val)) { return FALSE; } return (mb_strlen($str,'utf-8') < $val) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Max Length * * @access public * @param string * @return bool */ function max_length($str, $val) { if ( ! is_numeric($val)) { return FALSE; } return (mb_strlen($str,'utf-8') > $val) ? FALSE : TRUE; } /** * Max Number * * @access public * @param numeric * @return bool */ function max_data($str,$val) { return ($str > $val) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Exact Length * * @access public * @param string * @return bool */ function exact_length($str, $val) { if ( ! is_numeric($val)) { return FALSE; } return (mb_strlen($str,'utf-8') != $val) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Valid Email * * @access public * @param string * @return bool */ function valid_email($str) { return ( ! preg_match("/^([a-z0-9/+_/-]+)(/.[a-z0-9/+_/-]+)*@([a-z0-9/-]+/.)+[a-z]{2,6}$/ix", $str)) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Validate IP Address * * @access public * @param string * @return string */ function valid_ip($ip) { return ( ! preg_match( "/^[0-9]{1,3}/.[0-9]{1,3}/.[0-9]{1,3}/.[0-9]{1,3}$/", $ip)) ? FALSE : TRUE; } //-------------------------------------------------------------------- /** * Validate date * * @access public * @param int * @return bool */ function valid_date($date) { return ( preg_match("/^/d{4}-/d{2}-/d{2}$/",$date)) ? TRUE : FALSE; } // -------------------------------------------------------------------- /** * Validate identity * * @access public * @param int * @return bool */ function valid_identify($identity) { return ( preg_match("/^(/d{15}|/d{17}[x0-9])$/i",$identity)) ? TRUE : FALSE; } // -------------------------------------------------------------------- /** * Validate mobile phone * * @access public * @param int * @return bool */ function valid_mobile($mobile) { return ( preg_match("/^1[3|5|8]/d{9}$/",$mobile)) ? TRUE : FALSE; } // -------------------------------------------------------------------- /** * Alpha * * @access public * @param string * @return bool */ function alpha($str) { return ( ! preg_match("/^([-a-z])+$/i", $str)) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Alpha-numeric * * @access public * @param string * @return bool */ function alpha_numeric($str) { return ( ! preg_match("/^([-a-z0-9])+$/i", $str)) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Alpha-numeric with underscores and dashes * * @access public * @param string * @return bool */ function alpha_dash($str) { return ( ! preg_match("/^([-a-z0-9_-])+$/i", $str)) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Numeric * * @access public * @param int * @return bool */ function numeric($str) { return ( ! ereg("^[0-9/.]+$", $str)) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Is Numeric * * @access public * @param string * @return bool */ function is_numeric($str) { return ( ! is_numeric($str)) ? FALSE : TRUE; } // -------------------------------------------------------------------- /** * Set Select * * Enables pull-down lists to be set to the value the user * selected in the event of an error * * @access public * @param string * @param string * @return string */ function set_select($field = '', $value = '') { if ($field == '' OR $value == '' OR ! isset($_POST[$field])) { return ''; } if ($_POST[$field] == $value) { return ' selected="selected"'; } } // -------------------------------------------------------------------- /** * Set Radio * * Enables radio buttons to be set to the value the user * selected in the event of an error * * @access public * @param string * @param string * @return string */ function set_radio($field = '', $value = '') { if ($field == '' OR $value == '' OR ! isset($_POST[$field])) { return ''; } if ($_POST[$field] == $value) { return ' checked="checked"'; } } // -------------------------------------------------------------------- /** * Set Checkbox * * Enables checkboxes to be set to the value the user * selected in the event of an error * * @access public * @param string * @param string * @return string */ function set_checkbox($field = '', $value = '') { if ($field == '' OR $value == '' OR ! isset($_POST[$field])) { return ''; } if ($_POST[$field] == $value) { return ' checked="checked"'; } } // -------------------------------------------------------------------- /** * Prep data for form * * This function allows HTML to be safely shown in a form. * Special characters are converted. * * @access public * @param string * @return string */ function prep_for_form($str = '') { if ($this->_safe_form_data == FALSE OR $str == '') { return $str; } return str_replace(array("'", '"', '<', '>'), array("'", """, '<', '>'), stripslashes($str)); } // -------------------------------------------------------------------- /** * Prep URL * * @access public * @param string * @return string */ function prep_url($str = '') { if ($str == 'http://' OR $str == '') { $_POST[$this->_current_field] = ''; return; } if (substr($str, 0, 7) != 'http://' && substr($str, 0, 8) != 'https://') { $str = 'http://'.$str; } $_POST[$this->_current_field] = $str; } // -------------------------------------------------------------------- /** * Strip Image Tags * * @access public * @param string * @return string */ function strip_image_tags($str) { $_POST[$this->_current_field] = $this->input->strip_image_tags($str); } // -------------------------------------------------------------------- /** * XSS Clean * * @access public * @param string * @return string */ function xss_clean($str) { $input = new Input(); $_POST[$this->_current_field] = $input->xss_clean($str); } // -------------------------------------------------------------------- /** * Convert PHP tags to entities * * @access public * @param string * @return string */ function encode_php_tags($str) { $_POST[$this->_current_field] = str_replace(array('<?php', '<?PHP', '<?', '?>'), array('<?php', '<?PHP', '<?', '?>'), $str); } /** * 关键字过滤，替换 */ function filter_r($str) { return $this->filter_keywords($str,'replace'); } /** * 关键字过滤，提示 */ function filter_c($str) { return $this->filter_keywords($str, 'clear'); } /** * 关键字过滤处理 */ function filter_keywords($originalstr, $type='replace') { $filter_file = DATA_PATH.DIRSEP.'filter.php'; $keywords = array(); if(file_exists($filter_file)) { include $filter_file; if(!is_array($keywords)) $keywords = array(); } if (empty($keywords)) { return $originalstr; } if ($type == 'replace') { $words = array(); foreach ($keywords as $word) { if (!empty($word)) { array_push($words, trim($word)); } } return str_replace($words, '**', $originalstr); } else if ($type == 'clear') { foreach ($keywords as $word) { if (!empty($word)) { $pos = strpos($originalstr, trim($word)); if (!($pos === false)) { return false; } } } return $originalstr; } return $originalstr; } function required_chinese($str) { $f = 0; if (preg_match("/em:/is", $str) || preg_match("/^([".chr(228)."-".chr(233)."]{1}[".chr(128)."-".chr(191)."]{1}[".chr(128)."-".chr(191)."]{1}){1}/",$str) || preg_match("/([".chr(228)."-".chr(233)."]{1}[".chr(128)."-".chr(191)."]{1}[".chr(128)."-".chr(191)."]{1}){1}$/",$str) || preg_match("/([".chr(228)."-".chr(233)."]{1}[".chr(128)."-".chr(191)."]{1}[".chr(128)."-".chr(191)."]{1}){2,}/",$str)){ $f = 1; } return $f == 1 ? true : false; } function html_filter($str, $entities=false, $mode = "advanced") { $input = new Input(); $_POST[$this->_current_field] = $input->html_filter($str, $entities=false, $mode = "advanced"); } } // END Validation Class

验证

private function order_validation() { $validate = new Validation(); //设置验证规则 $rules['cname'] = 'trim|required|xss_clean'; $rules['ctel'] = 'trim|required|xss_clean'; $rules['caddress'] = 'trim|required|xss_clean'; $rules['cemail'] = 'trim|required|xss_clean'; $rules['czip'] = 'trim|numeric|xss_clean'; $rules['cid'] = 'trim'; $validate->set_rules($rules) ; $validate->set_error_delimiters('<span style="color:red;" mce_style="color:red;">','</span>') ; //设置各域的显示用的名字 $fields['cname'] = '联系人姓名'; $fields['ctel'] = '联系电话'; $fields['caddress'] = '联系地址'; $fields['cemail'] = '邮箱地址'; $fields['czip'] = '邮编'; $rules['cid'] = 'cid'; $validate->set_fields($fields); return array('success'=>$validate->run(),'data'=>$validate) ; 

结果处理

$validate = $order_validation['data']; //验证通过 if(!$order_validation['success']) {//失败返回 //...错误提示$validate->error_string } else { $_contact = array('uid' => $user->uid, 'name' => $validate->cname, 'email' => $validate->cemail, 'tel' => $validate->ctel, 'address' => $validate->caddress, 'zip' => $validate->czip }

有错误返回表单并提示error_string

 

客户端

var cname_check = false; var ctel_check = false; var cemail_check = false; var cnick_check = false; var caddress_check = false; var czip_check = true; //检测名字 function check_name() { $('#forcname').empty(); name = $("#cname").val(); var patrn = /^[a-zA-Z0-9/u4e00-/u9fa5]+$/; cname_check = false; if(is_empty(name,"#forcname","请输入联系人名称")==false) { return false; } else if (is_long(name,15,"#forcname","名称不多于15字符,或7个汉字") == false) { return false; } else if(is_illegal(name,patrn,"#forcname","名称含有非法字符") == false) { return false; } else cname_check = true; } //检测电话 function check_tel() { ctel_check = false; $('#forctel').empty(); _tel = $('#ctel').val(); params_mobile = /^1[3|5|8]/d{9}$/ ; params_telephone = /^/d{3,4}-/d{7,8}$/ ; if(_tel == '') { show_error_msg("#forctel","请输入联系电话"); } else if(!params_mobile.exec(_tel) && !params_telephone.exec(_tel)) { show_error_msg("#forctel","电话格式不规范，格式如：021-12345678 或 13812345678"); } else { show_true_msg("#forctel","联系电话格式有效，请继续"); ctel_check = true; } } //检测地址 function check_address() { $('#forcaddress').empty(); _address = $('#caddress').val(); if(_address != '') { if(is_short(_address,4,"#forcaddress","地址太短了") == false) { caddress_check = false; }else{ caddress_check = true; } }else { show_error_msg("#forcaddress","地址不能为空"); caddress_check = false; } } //检测邮编 function check_zip() { $('#forczip').empty(); _zip = $('#czip').val(); params = /^/d{6}$/; if(_zip != '') { if(!params.exec(_zip)) { show_error_msg("#forczip","邮编格式不规范"); czip_check = false; }else{ czip_check = true; } }else czip_check = true; } //检查用户输入的email的合法性 function check_email() { cemail_check = false; email = $("#cemail").val(); var patrn = /^([a-zA-Z0-9_/-/.])+@(([0-2]?[0-5]?[0-5]/.[0-2]?[0-5]?[0-5]/.[0-2]?[0-5]?[0-5]/.[0-2]?[0-5]?[0-5])|((([a-zA-Z0-9/-])+/.)+([a-zA-Z/-])+))$/; if(is_empty(email,"#forcemail","邮件地址不能为空")==false) { return false; } else if (is_long(email,60,"#forcemail","邮件地址不多于60字符") == false) { return false; } else if(is_short(email,4,"#forcemail","邮件地址不少于4个字符") == false) { return false; } else if(is_illegal(email,patrn,"#forcemail","邮件地址不符合规则") == false) { return false; }else { $("#forcemail").html("  <img src='<?php echo base_url();?>site/image/spinner16x16.gif' style='vertical-align:middle'>"); $("#forcemail").css("color","green"); $("#forcemail").html("  邮箱地址有效，请继续"); cemail_check = true; return true; } } //检查输入是否为空 function is_empty(data,msgid,msg) { if(data == '') { show_error_msg(""+msgid+"",""+msg+""); return false; } return true; } //检查是否超长 function is_long(data,rule,msgid,msg) { len = getlength(data); if(len > rule) { show_error_msg(""+msgid+"",""+msg+""); return false; } return true; } //检查是否超短 function is_short(data,rule,msgid,msg) { len = getlength(data); if(len < rule) { show_error_msg(""+msgid+"",""+msg+""); return false; } return true; } //检查是否含有非法字符 function is_illegal(data,rule,msgid,msg) { if(!rule.exec(data)) { show_error_msg(""+msgid+"",""+msg+""); return false; } return true; } //checked email function is_include_at(data, msgid, msg) { s_at = data.substring(0,data.indexOf("@")); at_dot = data.substring(data.indexOf("@"),data.indexOf(".")); if(data.indexOf("@")==-1 || s_at <=0 || at_dot <=0) { show_error_msg(""+msgid+"",""+msg+""); return false; } return true; } //设置错误显示信息 function set_error_message(msg) { str = ''; str = str + '<span class="wronginfonote">'; str = str + '<img src="<?php echo base_url();?>images/icon/icon_wrongcross.gif" width="13" height="13" />'; str = str + ' '+msg+''; str = str + '</span>'; return str; } //设置正确显示信息 function set_true_message(msg) { str = ''; str = str + '<span style="color:green;" mce_style="color:green;">'; str = str + ' '+msg+''; str = str + '</span>'; return str; } //显示错误信息 function show_error_msg(div,error) { $(""+div+"").css("color","red"); msg = set_error_message(""+error+""); $(""+div+"").html(msg); } //显示正确信息 function show_true_msg(div,error) { $(""+div+"").css("color","green"); msg = set_true_message(""+error+""); $(""+div+"").html(msg); } //获取中英文字符的长度。 function getlength(str) { n = str.length; var tmp = 0; var len = 0; var okLen = 0; for(var i=0;i<n;i++) { if(str.charCodeAt(i)>255) tmp += 2; else len += 1; } return tmp+len; } function checkform() { check_name(); check_tel(); check_email(); check_address(); if(!cname_check) { return false; } if(!ctel_check) { return false; } if(!cemail_check) { return false; } if(!caddress_check) { return false; } return true; }

表单提交处onsubmit="return checkform()"

并且可以在每个表单单独验证如onblur="check_name()"