Input validation

Question

hello all,
i have made a form and have done a lot of validation using
regular expression and some in built validators like emailValidator
however, i am tring to guard against a user entering malicious code
or SQL statements. I can only make an expression that will accept
ONLY malicious code ... bad times!
so if someone knows how to either make a new code, or some
ActionScript (though i'm a bit pants at that bit), or knows how to
make the expression disallow matches instead of accept them ...
good times!
Thanks for any help (and to JLC the God)

Answer 1

Okay. I have a long winded answer...
The nicest way to do this to override the doValidation method
and make your own. Something like this:
package
import mx.validators.Validator;
import mx.validators.ValidationResult;
public class ukPhoneNumberValidator extends Validator
private var results:Array;
override protected function doValidation( value: Object ):
Array
results = [ ];
results = super.doValidation( value );
if ( value != null )
// expression looks for a pattern like: nn nn(n) nnnnnn(n)
var pattern: RegExp =
/[\s+]*(0[1278])[\s-]*([0-9]{3,3}|[1-9]{2,2})[\s-]*([0-9]{6,7}).*/;
if ( value.search( pattern ) == -1 )
results.push( new ValidationResult( true, null,
"illegalPhoneNumber", "This is not a valid UK phone number" ) );
return results;
The regex expression I used was a bit less strict than yours,
but it allows for spaces between number groups, etc, and you still
get three groups of numbers out of it.
Just invoke as usual in mxml:
<local:ukPhoneNumberValidator id="telNoV"
source="{telNoInput}" property="text" triggerEvent=""/>
The empty "triggerEvent" method now allows you to control
when the box is validated. So for example you can call a method
upon a submission and run something like the following:
private function validatePhoneNumber():void
var validPhoneNumEvent: ValidationResultEvent =
telNoV.validate();
if ( validPhoneNumEvent.type == ValidationResultEvent.VALID
Alert.show("valid");
else
Alert.show("invlaid");
Enjoy