密码验证将不允许在php中的空格

Question

我在我的应用程序中有一个密码字段。我使用了欧芹验证。但是，除了必填字段之外，我没有给出任何验证。所以它允许所有角色。但是，我想清理密码并且不允许用户添加空格。如果他们尝试了，则应该显示一条错误消息。密码字段应至少包含1个数字。

这里是我的代码：

<?php 
require('../config.php'); 
if(!isset($_SESSION['can_access']) || $_SESSION['can_access'] !== true) 
    header('Location: login.php'); 
ob_start(); 
global $DB, $USER; 
$id=$USER->id; 
$clientid=$_GET['id']; 

$errorMessage = ''; 
$successMessage = ''; 
if(isset($_SESSION['successMessage'])) 
    { 
     $successMessage = $_SESSION['successMessage']; 
     unset($_SESSION['successMessage']); 
    } 
if(isset($_POST['register'])) { 
    $errors = array(); 
    $data = array(); 
    $chk_sql = "SELECT * FROM {user} u where username = ?"; 
    if (!empty($chk_sql)) { 
     $errorMessage='Username already taken'; 
    } 
    if(!$chk_username = $DB->get_record_sql($chk_sql, array($_POST['username']))) 
     { 
      $insert_record = new stdClass(); 
      $insert_record->username = $_POST['username']; 
      $insert_record->firstname = $_POST['firstname']; 
      $insert_record->email = $_POST['email']; 
      $insert_record->password = password_hash($_POST['password'], PASSWORD_DEFAULT); 
      $insert_record->mnethostid = 1; 
      $insert_record->confirmed = 1; 
      $insert_record->idnumber = 2;  
      $insert_record->maildisplay = $clientid; 
      //$insert_record->timecreated = date('Y-m-d'); 
      if($result = $DB->insert_record('user', $insert_record)) 
       { 
        $_SESSION['successMessage'] = "record created successfully"; 
        header('Location: clients.php'); 

       } 
     } 
} 
?> 

这里是我的密码键：

<div class="form-group has-feedback"> 
<input id="signupInputPassword" type="password" name="password" placeholder="Password" autocomplete="off" required class="form-control" > 
<span class="fa fa-lock form-control-feedback text-muted"></span> 
</div> 

谁能帮助我？

在此先感谢。

Answer 1

if (isset($_POST['register'])) { 

$password = $_POST['password']; 

if (preg_match('/\s/', $password)) { 

    echo "password has whitespace"; 

} else { 

    if (strlen($password) <= '8') { 
     echo "Your Password Must Contain At Least 8 Characters!"; 
    } elseif (!preg_match("#[0-9]+#", $password)) { 
     echo "Your Password Must Contain At Least 1 Number!"; 
    } elseif (!preg_match("#[A-Z]+#", $password)) { 
     echo "Your Password Must Contain At Least 1 Capital Letter!"; 
    } elseif (!preg_match("#[a-z]+#", $password)) { 
     echo "Your Password Must Contain At Least 1 Lowercase Letter!"; 
    } 

    $errors = array(); 
    $data = array(); 
    $chk_sql = "SELECT * FROM {user} u where username = ?"; 
    if (!empty($chk_sql)) { 
     $errorMessage = 'Username already taken'; 
    } 
    if (!$chk_username = $DB->get_record_sql($chk_sql, array($_POST['username']))) { 
     $insert_record    = new stdClass(); 
     $insert_record->username = $_POST['username']; 
     $insert_record->firstname = $_POST['firstname']; 
     $insert_record->email  = $_POST['email']; 
     $insert_record->password = password_hash($_POST['password'], PASSWORD_DEFAULT); 
     $insert_record->mnethostid = 1; 
     $insert_record->confirmed = 1; 
     $insert_record->idnumber = 2; 
     $insert_record->maildisplay = $clientid; 
     //$insert_record->timecreated = date('Y-m-d'); 
     if ($result = $DB->insert_record('user', $insert_record)) { 
      $_SESSION['successMessage'] = "record created successfully"; 
      header('Location: clients.php'); 

     } 
    } 
} 

}