Azkaban

I have data that's coming in like zo:

"123,32,41,234,124,253,342,34,0"

and I want to validate that it is numbers and commas only. Any idea hot to achieve?

codenode

Validate it in MySQL or in some programming language?

Azkaban

PHP. But the data will be used in a mysql query. Is it enough to use htmlspecialchars?

codenode

if(preg_match('/[^\d,]/', $string)) invalid
else valid

AllenGarner

if you do something like this you can manipulate the data as you wish

$row = 1;
$handle = fopen($uploadFile, "r");

while ( ($data = fgetcsv($handle, filesize($uploadFile)+1, ",")) != FALSE ) {
$num = count($data);
if($row == 1){
$fields = " `id` , ";
for($i=0; $i<$num; $i++){
$fields .= "`" . addslashes(trim($data[$i])) . "` , ";
}
$fields .= "`group` , `user` , ";
$f = substr($fields, 0, -1);
$f = substr($f, 0, -1);
$row++;
}else{
$values = " '' , ";
for($i=0; $i<$num; $i++){
$values .= "'" . addslashes(trim($data[$i])) . "' , ";
}
$values .= "'personal' , '" . $_SESSION['user'] . "' , ";

$v = substr($values, 0, -1);
$v = substr($v, 0, -1);
$sql = "INSERT INTO $table ( $f ) VALUES ( $v )";
mysql_query($sql) or die(print "<center><font size='2' face='verdana' color='#5E6B79'><b>Upload complete some entries may not have been loaded successfully!</b><br><br><a href='addressbook.php' class='light'>Back to Address Book</a></font></center></td></tr></table>");
$values = '';
$row++;
}
}
fclose ($handle);