How to prevent symbols from being stored in the database using php?

Question

How do I prevent symbols like / , \\ , ; , etc. being stored in the database? I am already using mysql_real_escape_string() , but if in an input field in my form I put \\mymail@mydomain.com , I find the email stored in the database with the "\\". How can I prevent this?

Answer 1

u need to use regular expression to avoid /, \\, ;, etc in data base. use this regular expression. write this javascript.

regExpNum = /^[\w]+(\.[\w]+)*@([\w-]+\.)+[a-zA-Z]{2,7}$/
if(!regExpNum.test(EmailID))
{
alert("Invalid email address.");
return false;
}

Answer 2

Maybe you need some kind of input validator like the filter_input (PHP >= 5.2.0)

filter_input(INPUT_GET, 'email', FILTER_VALIDATE_EMAIL);

If the result is null, then, you should send an error.

You could read the documentation at http://www.php.net/manual/en/book.filter.php