阻止人们注册与您的根文件夹相同的用户名

Question

I'm using .htaccess to load a social network profile

RewriteEngine on
RewriteRule ^([a-zA-Z0-9_-]+)$ /users/users.php?username=$1

But the problem is anyone could register a username that is the same as maybe "admin"

Is there any way to prevent that with either .htaccess or php?

Answer 1

I found a solution!

<?php
$dir    = '/var/www';
$files = scandir($dir);

if (in_array("forum", $files)) {

echo "username Exists";

}
?>

Answer 2

You can do this with a negative lookahead assertion ( (?!…) ):

RewriteRule ^(?!admin)([a-zA-Z0-9_-]+)$ /users/users.php?username=$1

However, I'd recommend performing validation at the time the user is created and then validating that the user exists in the database before allowing access to any files. Even better, consider redesigning your system so that user information isn't stored in a directory structure, but in the database somewhere. Alternatively, if you really have to store user files on the file system you can make sure each user has a unique numeric user id and use that as the folder name.