如何在我的网站上显示验证错误?

时间:2018-01-08 22:50:56

标签: php html forms validation

我只是希望这个PHP代码在我的网站上显示表单验证错误,只要有人不正确地使用表单。这是代码,我还将包含表单的HTML。

该代码仅供参考,如果您有更好的方法,请告诉我。

<?php

if (isset($_POST['submit'])) {

    include_once 'dbh.inc.php';

    $first = mysqli_real_escape_string($conn, $_POST['first']);
    $last = mysqli_real_escape_string($conn, $_POST['last']);
    $email = mysqli_real_escape_string($conn, $_POST['email']);
    $number = mysqli_real_escape_string($conn, $_POST['number']);
    $uid = mysqli_real_escape_string($conn, $_POST['uid']);
    $pwd = mysqli_real_escape_string($conn, $_POST['pwd']);

    // Error handlers
    // Check for empty fields

    if (empty($first) || empty($last) || empty($email) || empty($number) || empty($uid) || empty($pwd)) {
        header("Location: ../signup.php?signup=empty");
        exit(); 
    } else {
        // Check if input characters are valid
        if (!preg_match("/^[a-zA-Z'-]+$/",$first) || !preg_match("/^[a-zA-Z'-]+$/",$last)) {
            header("Location: ../signup.php?signup=invalid");
            exit(); 
        } else {
            // Check if email is valid
            if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
                header("Location: ../signup.php?signup=invalidemail");
                exit(); 
            } else {
                if (preg_match("/^[0-9]{3}-[0-9]{4}-[0-9]{4}$/", $number)) {
                    header("Location: ../signup.php?signup=invalidnumber");
                    exit();
            } else {
                $sql = "SELECT * FROM users WHERE user_uid='$uid'";
                $result = mysqli_query($conn, $sql);
                $resultcheck = mysqli_num_rows($result);

                if ($resultcheck > 0) {
                    header("Location: ../signup.php?signup=usertaken");
                    exit(); 
                } else {
                   // Hashing the password
                    $hashedPwd = password_hash($pwd, PASSWORD_DEFAULT);
                   // Insert the user into the database
                    $sql = "INSERT INTO users (user_first, user_last, user_email, user_number, user_uid, user_pwd) VALUES ('$first', '$last', '$email', '$number', '$uid', '$hashedPwd');";
                    mysqli_query($conn, $sql);
                    header("Location: ../accountcreated.php");
                    exit(); 

                }
            }
        }
    }

} else {
    header("Location: ../signup.php");
    exit();
}

以下是HTML代码:

<form class="memberform" action="includes/signup.inc.php" method="POST" novalidate>

                <input id="spfirst" class="form_fname" type="text" name="first" placeholder="First Name">
                <span class="error_form"></span>

                <input id="splast" class="form_lname" type="text" name="last" placeholder="Last Name">
                <span class="error_form"></span>

                <input class="form_email" type="email" name="email" placeholder="E-mail">
                <span class="error_form"></span>

                <input id="spnumber" class="form_tel" type="tel" name="number" placeholder="Phone number">
                <span class="error_form"></span>

                <input id="spuser" class="form_user" type="text" name="uid" placeholder="Username">
                <span class="error_form"></span>

                <input class="form_password" type="password" name="pwd" placeholder="Password">
                <span class="error_form"></span>

                <button type="submit" name="submit">Create Account</button>

                  </form>

好的就是。我已经尝试了很多东西似乎没什么用......可能是因为我对PHP的知识有限。

2 个答案:

答案 0 :(得分:1)

在我看来,这不是最好的方法,但是按照您当前的代码,我建议您这样做。

signup.php文件中,将其添加到您希望显示错误消息的位置(如果需要,可以在HTML中):

<?php
if(isset($_GET['signup'])){
    switch($_GET['signup']){
        case 'empty':
            $msg = 'Empty fields';
            break;
        case 'invalid':
            $msg = 'Invalid input';
            break;
        case 'invalidemail':
            $msg = 'Invalid email';
            break;
        case 'invalidnumber':
            $msg = 'Invalid number';
            break;
        case 'usertaken':
            $msg = 'User taken';
            break;
        default:
            $msg = ''; // Default message, if any
            break;
    }
    echo '<div class="error_div">'.$msg.'</div>'; // here's where the message appears
}
?>

这将显示您的消息。显然,随意更改类名称并根据需要设置样式。

或者您可以简单地执行此类操作(根据您要查找的结果更改文本和内容):

<?php
if(isset($_GET['signup'])){
    if($_GET['signup'] == 'empty'){
        echo '<span class="error_form">Empty values</span>';
    }
}
?>

答案 1 :(得分:0)

由于您将用户重定向到具有特定错误消息的注册页面(例如:usertaken),您可以使用$_GET来处理错误。

因此,在您的注册页面中,执行此操作

$error should = "" ;
if(isset($_GET['signup'])) {
    $error = $_GET['signup'];
    if(!empty($error){
        //check for specific errors
        if($error == "usertaken"){
             $errorMsg = "The username has already been taken, try again";
        } 
    } 
}

您可以在HTML中使用$errorMsg并将其放在要显示错误的位置并相应地进行设计。

注意:我没有进行任何消毒,试图保持这种简短。