Why Common validation patterns in PHP? - Purpose & Use Cases

The Big Idea

Discover how simple rules can save you hours of debugging and keep your app safe!

The Scenario

Imagine you have a form where users enter their email, age, and password. Without validation, you have to check each input manually every time, writing lots of repeated code for each field.

The Problem

Manually checking each input is slow and easy to forget. You might miss a check, allowing wrong data to sneak in. Fixing errors later becomes a headache, and your code turns messy and hard to read.

The Solution

Common validation patterns let you reuse simple rules to check inputs quickly and clearly. They help catch mistakes early, keep your code clean, and make adding new checks easy.

Before vs After

✗ Before

$email = $_POST['email'];
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
  echo 'Invalid email';
}

✓ After

$validator->email('email')->required();
if (!$validator->validate($_POST)) {
  echo 'Invalid input';
}

What It Enables

It lets you build reliable, easy-to-maintain input checks that protect your app and improve user experience.

Real Life Example

When signing up on a website, validation patterns ensure your email looks right, your password is strong, and your age is a number -- all without confusing error messages.

Key Takeaways

Manual checks are slow and error-prone.

Validation patterns simplify and standardize input checks.

They make your code cleaner and your app safer.

Practice

1.

Which PHP function is commonly used to validate if a string is a valid email address?

easy

A. preg_match with '/^\d+$/'

B. filter_var with FILTER_VALIDATE_EMAIL

C. strlen to check length

D. strtolower to convert to lowercase

Solution

1. Step 1: Understand email validation in PHP

   PHP provides a built-in filter called FILTER_VALIDATE_EMAIL to check if a string is a valid email.

2. Step 2: Identify the correct function usage

   filter_var with FILTER_VALIDATE_EMAIL returns the email if valid, or false if invalid.

3. Final Answer:

   filter_var with FILTER_VALIDATE_EMAIL -> Option B

4. Quick Check:

   Email validation = filter_var with FILTER_VALIDATE_EMAIL [OK]

Hint: Use filter_var with FILTER_VALIDATE_EMAIL for email checks [OK]

Common Mistakes:

• Using preg_match with wrong regex for email
• Checking length instead of format
• Using string functions unrelated to validation

2.

Which of the following is the correct syntax to validate a URL using filter_var in PHP?

?

easy

A. filter_var($url, FILTER_VALIDATE_INT);

B. filter_var($url, FILTER_VALIDATE_EMAIL);

C. filter_var($url, FILTER_VALIDATE_URL);

D. filter_var($url, FILTER_VALIDATE_BOOLEAN);

Solution

1. Step 1: Identify the filter for URL validation

   FILTER_VALIDATE_URL is the correct filter to check if a string is a valid URL.

2. Step 2: Confirm correct function call

   filter_var takes the variable and the filter constant as parameters.

3. Final Answer:

   filter_var($url, FILTER_VALIDATE_URL); -> Option C

4. Quick Check:

   URL validation = filter_var with FILTER_VALIDATE_URL [OK]

Hint: Use FILTER_VALIDATE_URL with filter_var for URL validation [OK]

Common Mistakes:

• Using FILTER_VALIDATE_EMAIL for URLs
• Using integer or boolean filters incorrectly
• Missing the filter parameter

3.

What will be the output of the following PHP code?

$phone = '123-456-7890';
if (preg_match('/^\d{3}-\d{3}-\d{4}$/', $phone)) {
    echo 'Valid phone';
} else {
    echo 'Invalid phone';
}

medium

A. Syntax error

B. Invalid phone

C. No output

D. Valid phone

Solution

1. Step 1: Analyze the regex pattern

   The pattern /^\d{3}-\d{3}-\d{4}$/ matches exactly 3 digits, a dash, 3 digits, a dash, then 4 digits.

2. Step 2: Check the input string against the pattern

   The string '123-456-7890' matches this pattern exactly.

3. Final Answer:

   Valid phone -> Option D

4. Quick Check:

   Regex matches phone format = Valid phone [OK]

Hint: Match exact pattern with preg_match regex anchors ^ and $ [OK]

Common Mistakes:

• Forgetting anchors ^ and $ in regex
• Using wrong quantifiers in regex
• Not escaping special characters

4.

Identify the error in this PHP code snippet for validating an integer:

$num = '123a';
if (filter_var($num, FILTER_VALIDATE_INT)) {
    echo 'Valid integer';
} else {
    echo 'Invalid integer';
}

medium

A. filter_var returns false for '123a', so output is 'Invalid integer'

B. filter_var should use FILTER_VALIDATE_NUMBER instead

C. The variable $num should be cast to int before validation

D. filter_var does not validate integers

Solution

1. Step 1: Understand filter_var with FILTER_VALIDATE_INT

   This filter returns the integer value if valid, or false if invalid.

2. Step 2: Check input '123a'

   The string '123a' is not a valid integer, so filter_var returns false.

3. Final Answer:

   filter_var returns false for '123a', so output is 'Invalid integer' -> Option A

4. Quick Check:

   Invalid integer string returns false = 'Invalid integer' output [OK]

Hint: filter_var returns false if input is not a pure integer string [OK]

Common Mistakes:

• Using FILTER_VALIDATE_NUMBER which does not exist
• Casting before validation causing wrong results
• Assuming filter_var always returns boolean

5.

You want to validate a username in PHP that must start with a letter, can contain letters, numbers, underscores, and be 5 to 15 characters long. Which preg_match pattern correctly validates this?

hard

A. /^[a-zA-Z][a-zA-Z0-9_]{4,14}$/

B. /^[0-9][a-zA-Z0-9_]{4,14}$/

C. /^[a-zA-Z0-9_]{5,15}$/

D. /^[a-zA-Z]{5,15}$/

Solution

1. Step 1: Understand username requirements

   Username must start with a letter, then 4 to 14 characters of letters, digits, or underscores, total length 5-15.

2. Step 2: Analyze each pattern

   /^[a-zA-Z][a-zA-Z0-9_]{4,14}$/ matches a letter at start, then 4-14 allowed chars, total 5-15 length. Others fail start or length rules.

3. Final Answer:

   /^[a-zA-Z][a-zA-Z0-9_]{4,14}$/ -> Option A

4. Quick Check:

   Start letter + allowed chars + length 5-15 = /^[a-zA-Z][a-zA-Z0-9_]{4,14}$/ [OK]

Hint: Start with letter, then allowed chars with correct length in regex [OK]

Common Mistakes:

• Allowing digits as first character
• Not enforcing length limits
• Missing anchors ^ and $