preg_match question

[Rdubya]

I am trying to use preg_match to make it so a user cannot enter numbers on the city entry.

What i have been using for most of my checks is:

if (preg_match('/^[[:alnum:]\ \'\-]{1,60}$/', stripslashes(trim($_POST['city']))) )

-----------

that line works, but it doesn't make it letters only.

I tried:

if (preg_match('/^[[a-zA-Z]\ \'\-]{1,60}$/', stripslashes(trim($_POST['city']))) )

That doesn't work...

hoping it is something small i am missing---

thanks for your help!!

-Ryan

[kyle04]

Code: Select all

if(
  preg_match('/[^a-zA-Z]/', stripslashes(trim($_POST['city'])))
){
// nasty characters
} 

[Rdubya]

hi Kyle,

Thanks for the help.

When I tested to see what it would allow me to enter, it would still allow me to enter "test1". If I start the string with a number it won't work, but it seems like I can inject a number after a letter and it will work.

Any fix for that?

Thanks!
Ryan

[seandisanti]

Code: Select all

<?php
$city = "1test1";
$pattern = '[\d]';
$city = preg_replace($pattern,'',$city);
echo $city;
?>