如何在php中删除要插入mysql数据库的特殊字符

Question

I have a textfield and if any special characters are attached to the string the value should not be inserted into the database. How can this be achieved in php? Thanks for the help in advance.

 if (preg_match('/[\'^£$%&*()"}{@#~?><>,|=_+¬-]/', $i)) {
  echo '<script language="javascript">'; 
  echo 'alert("Enter a valid Insurance Type.")'; echo '</script>'; 
}

Answer 1

If by "special" you mean non alpha-numeric, you could do something like this to strip out those characters before inserting them:

preg_replace("/[^a-zA-Z0-9\s\p{P}]/", "", $your_string);

Otherwise you could just check if the string is alpha-numeric, and only insert the record if it is:

if (ctype_alnum($your_string)) {
    // Do your MySQL insert
}