preg_match question

Question

hi,

$page = $_GET['page'];
if(isset($page))
if(!preg_match('/[\w\d_]+/i', $page)) die("Error");

I want to allow alphanum and underscore,

above code works but let say i set 123..., this works too. Is preg_match will not validate behind entry?

Answer 1

You need to use anchors as:

/^\w+$/

\w already has \d and _

Answer 2

The regex will match as long as an alphanumeric appears as a substring of $page. Since 123... contains the substring 123 it will pass your regex.

Use

/^\w+$/

to match the whole string. (\w already means [a-zA-Z0-9_] so your \d, _ and the i modifier are redundant.)