PHP Regex模式混乱

Question

I couldn't make few regex patterns to work so i googled most of them and have encountered issues in the process. I mostly understand rules in play while building regex patterns but don't understand how to create regex that checks if in string is at least 1 certain type of character. This i found online:

'/^((?=.*\\d)(?=.*[az])(?=.*[AZ])(?=.*[@#$%]).{6,20})$/'

What i cant understand is this:

• what this is for ?=.* does it like mean something together or just separate attributes
• why is there . between curly brackets and normal ones ).{ as far as i know its any character, unless it means any of previously mentioned but what makes it to work that way
• the last problem is that regex works the way that it actually checks if demanded characters are provided but also allow to type something like ąó or "(^! when i look at this i don't see anywhere that mentioned characters are allowed

As you already figured it out im trying to build password validation regex and struggling with this.

EDIT

If its possible could someone present alteration to this regex so it will not mean

• require one of digit, lower case, upper case, special char of provided list and than whatever else to fill blanks

so it would instead mean

• require one of digit, lower case, upper case, special char of provided list and fill blanks with characters of mentioned rules, so you can continue typing digits letters and special chars from provided list but not some special things like !óż

Answer 1

(?=...) is a positive lookahead assertion . It asserts that the enclosed regex could match at the current position without actually performing the match. So for example, (?=.*\\d) means "check to see if it's possible to match any number of characters, followed by a digit" which translates to "check if there is at least one digit somewhere ahead in the string".

Breaking the regex down, this means:

^             # Start of string
(             # Match and capture in group 1:
 (?=.*\d)     # Assert that there is at least one digit in the string
 (?=.*[a-z])  # Assert that there is at least one lowercase letter in the string
 (?=.*[A-Z])  # Assert that there is at least one uppercase letter in the string
 (?=.*[@#$%]) # Assert that there is at least one of the characters @#$%
 .{6,20}      # Match 6-20 characters (any character except newlines)
)             # End of group
$             # End of string

The capturing group is wholly unnecessary, by the way.

Answer 2

/^((?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#$%]).{6,20})$/

^ assert position at start of the string

1st Capturing group ((?=.*\\d)(?=.*[az])(?=.*[AZ])(?=.*[@#$%]).{6,20})

(?=.*\\d) Positive Lookahead - Assert that the regex below can be matched

Any amount of any characters, followed by a digit. In other words, string must contain a digit.

(?=.*[az]) Positive Lookahead - Assert that the regex below can be matched

Any amount of any characters, followed by a single character in the range between a and z (case sensitive). In other words, string must contain a lowercase character.

(?=.*[AZ]) Positive Lookahead - Assert that the regex below can be matched

Any amount of any characters, followed by a single character in the range between A and Z (case sensitive). In other words, string must contain an uppercase character.

(?=.*[@#$%]) Positive Lookahead - Assert that the regex below can be matched

Any amount of any characters, followed by a single character in the list @#$% literally. In other words, string must contain @#$%.

.{6,20} matches any character (except newline) between 6 and 20 times.

$ assert position at end of the string

---

Referenced by:

regex101

---

EDIT: Change . to [^__blacklisted_characters_here__]