i have a array with words i want to not be allowed to be used in the form submit.
my array is:

PHP Code:

$global_badwords = array("bad1","bad2","bad3"); 


and i have the form, so on the next page when the values are entered into the database here:

PHP Code:

if (isset($_POST['name'])) {
    $name=$_POST['name'];
    if ($name == "") {
        echo "<b><center>You didn't enter anything!</center></b>";
    } elseif ($name == "$global_badwords") {
        echo "<b><center>That is not your name</center></b>";
    } else {
    mysql_query($sql1);
    echo "<b><center>Added $name to $result_event!</center></b>";
    }
} 


but it does not block those words?

thanks

PHP Code:

elseif (in_array($name, $global_badwords)) {
        echo "<b><center>That is not your name</center></b>"; 


http://www.php.net/manual/en/function.in-array.php

thanks, that worked

I don't know PHP.

How does it do string comparisons? Does hi = HI? In .NET, we can use an overload of String.Compare that tells it to do case (in)sensitive comparisons when we want to. People who don't stay up to date usually wind up doing a string.ToUpper() against both. So if someone types hi and your word list has HI or Hi it still gets caught.

--------------------------------------------------------------------------------

Ask yourself if these should go in a table in a database? That would make it a lot easier for you to change anything (like add more words) down the line. But it would also be quicker. At least if you have more than 3 or 4 bad words. Throw an index on the table, and let SQL do its thing. Just seems like that might be better all around?

How does it do string comparisons? Does hi = HI? In .NET, we can use an overload of String.Compare that tells it to do case (in)sensitive comparisons when we want to. People who don't stay up to date usually wind up doing a string.ToUpper() against both. So if someone types hi and your word list has HI or Hi it still gets caught.

In PHP some functions are case sensitive and some is case insensitive. Most of functions have both version especialy string functions. For example, strstr find first occurrence of a string and it is case sensitive, stristr do the same but it is case insensitive.

Shivaji

PHP Code:

<?php
if ("hi" == "HI") {
 echo "true";
} else {
 echo "false";
}
?>

will return false.

short and sweet.

You can use preg_match() and keep your bad words as a regexp instead of array to get more power and flexibility, because with regexps you will be able to ignore case and make tests like whether it is a whole word or a part of, etc.

You could, at runtime, compile the array into a string for use as a regexp if you had to, or just do that when you add to the array and put the regexp as static.

how would i use the preg_match() exactly?

PHP Code:

$disallowed = "!word1|word2|\bword3\b|word4.*!i";
if (preg_match($disallowed, $user_input))
   echo "Your input contains disallowed words"; 


thanks

You equal a string with an array. This is the problem. You must equal each member of the array with your string. The in_array function is the solution. (http://www.php.net/in_array)