Bird
Raised Fist0
Flaskframework~5 mins

Validation rules in Flask

Choose your learning style10 modes available
Introduction

Validation rules help check if the data users send to your app is correct and safe. They stop mistakes and bad data from causing problems.

When a user fills out a signup form and you want to check their email and password.
When accepting user input like age or phone number and you want to make sure it is a number.
When saving data to a database and you want to ensure required fields are not empty.
When you want to give friendly error messages if users enter wrong data.
When you want to prevent harmful data like scripts from being submitted.
Syntax
Flask
from flask_wtf import FlaskForm
from wtforms import StringField, IntegerField
from wtforms.validators import DataRequired, Email, NumberRange

class MyForm(FlaskForm):
    name = StringField('Name', validators=[DataRequired()])
    email = StringField('Email', validators=[DataRequired(), Email()])
    age = IntegerField('Age', validators=[DataRequired(), NumberRange(min=18, max=99)])

Validators are added as a list to each form field.

Common validators include DataRequired(), Email(), and NumberRange().

Examples
This makes sure the name field is not empty.
Flask
from wtforms.validators import DataRequired

name = StringField('Name', validators=[DataRequired()])
This checks if the email looks like a real email address.
Flask
from wtforms.validators import Email

email = StringField('Email', validators=[Email()])
This ensures the age is between 18 and 99.
Flask
from wtforms.validators import NumberRange

age = IntegerField('Age', validators=[NumberRange(min=18, max=99)])
Sample Program

This Flask app shows a form with name, email, and age fields. It uses validation rules to check the inputs. If the data is correct, it shows a success message. If not, it shows errors next to each field.

Flask
from flask import Flask, render_template_string, request
from flask_wtf import FlaskForm
from wtforms import StringField, IntegerField
from wtforms.validators import DataRequired, Email, NumberRange

app = Flask(__name__)
app.config['SECRET_KEY'] = 'secret-key'

class UserForm(FlaskForm):
    name = StringField('Name', validators=[DataRequired()])
    email = StringField('Email', validators=[DataRequired(), Email()])
    age = IntegerField('Age', validators=[DataRequired(), NumberRange(min=18, max=99)])

form_template = '''
<form method="POST">
  {{ form.hidden_tag() }}
  <p>
    {{ form.name.label }}<br>
    {{ form.name(size=20) }}<br>
    {% for error in form.name.errors %}<span style="color:red;">{{ error }}</span><br>{% endfor %}
  </p>
  <p>
    {{ form.email.label }}<br>
    {{ form.email(size=20) }}<br>
    {% for error in form.email.errors %}<span style="color:red;">{{ error }}</span><br>{% endfor %}
  </p>
  <p>
    {{ form.age.label }}<br>
    {{ form.age() }}<br>
    {% for error in form.age.errors %}<span style="color:red;">{{ error }}</span><br>{% endfor %}
  </p>
  <p><input type="submit" value="Submit"></p>
</form>
{% if success %}<p style="color:green;">Form submitted successfully!</p>{% endif %}
'''

@app.route('/', methods=['GET', 'POST'])
def index():
    form = UserForm()
    success = False
    if form.validate_on_submit():
        success = True
    return render_template_string(form_template, form=form, success=success)

if __name__ == '__main__':
    app.run(debug=True)
OutputSuccess
Important Notes

Always set a secret key in Flask to use Flask-WTF forms securely.

Validation errors appear automatically if you check form.errors or use form.validate_on_submit().

You can create custom validators if needed for special rules.

Summary

Validation rules check user input to keep data correct and safe.

Flask-WTF and WTForms make adding validation easy with simple validators.

Show helpful error messages so users can fix their input.

Practice

(1/5)
1. What is the main purpose of validation rules in a Flask web application?
easy
A. To speed up the server response time
B. To style the web page with CSS
C. To check user input and ensure it meets expected criteria
D. To store data permanently in the database

Solution

  1. Step 1: Understand validation rules

    Validation rules are used to check if user input is correct and safe before processing.
  2. Step 2: Identify the main purpose in Flask

    In Flask, validation ensures data is valid and prevents errors or security issues.
  3. Final Answer:

    To check user input and ensure it meets expected criteria -> Option C
  4. Quick Check:

    Validation = Check input correctness [OK]
Hint: Validation means checking user input is correct [OK]
Common Mistakes:
  • Confusing validation with styling or database storage
  • Thinking validation speeds up server response
  • Ignoring the role of validation in input safety
2. Which of the following is the correct way to import the DataRequired validator from WTForms in a Flask app?
easy
A. import DataRequired from wtforms.fields
B. import DataRequired from flask
C. from flask_wtf import DataRequired
D. from wtforms.validators import DataRequired

Solution

  1. Step 1: Identify the correct module for validators

    WTForms validators are imported from the wtforms.validators module.
  2. Step 2: Check the import syntax

    The correct syntax is 'from wtforms.validators import DataRequired'.
  3. Final Answer:

    from wtforms.validators import DataRequired -> Option D
  4. Quick Check:

    Validator import = from wtforms.validators [OK]
Hint: Validators come from wtforms.validators module [OK]
Common Mistakes:
  • Importing from flask or flask_wtf incorrectly
  • Using wrong import syntax
  • Confusing fields with validators
3. Given this Flask-WTF form code snippet:
class MyForm(FlaskForm):
name = StringField('Name', validators=[DataRequired()])
age = IntegerField('Age', validators=[NumberRange(min=18, max=99)])

What happens if a user submits the form with an empty name and age 17?
medium
A. Form validation fails with errors for both name and age fields
B. Form validation passes because age is a number
C. Form validation fails only for the name field
D. Form validation passes with no errors

Solution

  1. Step 1: Check the name field validation

    Name uses DataRequired(), so empty input causes validation failure.
  2. Step 2: Check the age field validation

    Age must be between 18 and 99; 17 is below minimum, so validation fails.
  3. Final Answer:

    Form validation fails with errors for both name and age fields -> Option A
  4. Quick Check:

    Empty name + age 17 = two validation errors [OK]
Hint: Check all validators; both fields fail here [OK]
Common Mistakes:
  • Assuming age 17 passes because it is a number
  • Ignoring DataRequired on name
  • Thinking only one field can fail
4. Consider this Flask-WTF form snippet:
class EmailForm(FlaskForm):
email = StringField('Email', validators=[Email(), DataRequired()])

Why might this code cause a runtime error when validating?
medium
A. The Email validator is not imported, causing a NameError
B. DataRequired must come before Email in the validators list
C. StringField cannot have multiple validators
D. FlaskForm must be imported from flask, not flask_wtf

Solution

  1. Step 1: Check imports for validators

    If Email validator is not imported from wtforms.validators, it causes NameError at runtime.
  2. Step 2: Validate other options

    Order of validators does not cause error; multiple validators are allowed; FlaskForm import is correct from flask_wtf.
  3. Final Answer:

    The Email validator is not imported, causing a NameError -> Option A
  4. Quick Check:

    Missing import = NameError [OK]
Hint: Always import all validators used [OK]
Common Mistakes:
  • Thinking validator order matters for errors
  • Believing multiple validators are disallowed
  • Confusing FlaskForm import source
5. You want to create a Flask-WTF form that requires a username with at least 5 characters and a password that must be confirmed by retyping. Which validator combination correctly enforces these rules?
hard
A. username = StringField('Username', validators=[Length(max=5)])
password = PasswordField('Password', validators=[DataRequired()])
confirm = PasswordField('Confirm Password', validators=[EqualTo('password')])
B. username = StringField('Username', validators=[DataRequired(), Length(min=5)])
password = PasswordField('Password', validators=[DataRequired(), EqualTo('confirm', message='Passwords must match')])
confirm = PasswordField('Repeat Password')
C. username = StringField('Username', validators=[DataRequired(), Length(max=5)])
password = PasswordField('Password', validators=[EqualTo('confirm')])
confirm = PasswordField('Repeat Password', validators=[DataRequired()])
D. username = StringField('Username', validators=[DataRequired(), Length(min=5)])
password = PasswordField('Password')
confirm = PasswordField('Confirm Password', validators=[DataRequired(), EqualTo('confirm')])

Solution

  1. Step 1: Check username validators

    Username needs DataRequired and Length(min=5) to enforce minimum length.
  2. Step 2: Check password and confirmation validators

    Password field requires DataRequired and EqualTo('confirm') to match confirmation; confirm field is defined without validators.
  3. Step 3: Compare options

    username = StringField('Username', validators=[DataRequired(), Length(min=5)])
    password = PasswordField('Password', validators=[DataRequired(), EqualTo('confirm', message='Passwords must match')])
    confirm = PasswordField('Repeat Password') correctly uses Length(min=5) and EqualTo with matching field names and messages.
  4. Final Answer:

    username = StringField('Username', validators=[DataRequired(), Length(min=5)])
    password = PasswordField('Password', validators=[DataRequired(), EqualTo('confirm', message='Passwords must match')])
    confirm = PasswordField('Repeat Password')
    -> Option B
  5. Quick Check:

    Length(min=5) + EqualTo('confirm') = correct validation [OK]
Hint: Use Length(min=5) and EqualTo('confirm') for password confirmation [OK]
Common Mistakes:
  • Using Length(max=5) instead of min for username
  • Placing EqualTo on wrong field
  • Missing DataRequired on password
Recommended

Ready to prove it?

Pass the test and this pattern moves unknown strong while earning +1 Grip toward your certificate.

10 questions~5 mineasy hard