preg_replace password

[hhawkins]

I have this -

$var = preg_replace("/[^A-Za-z0-9_, -]/", "", $var);

 

But I want to add special characters to be allowed, is it as simple as /W?

 

Or do I need to just add them individually?

$var = preg_replace("/[^A-Za-z0-9_$!#, -]/", "", $var);

 

This is feeding into a sql database should I not allow the use of / or \.

 

Thanks!

[effigy]

What is not allowed--just slashes?

[hhawkins]

Well what it is feeding into says everything is allowed -

! " # $ % & ( ) + , - / ; < = > ? [ \ ] ^ _ ` { | } * '

 

I want to attempt to allow that with out creating another issue.

[effigy]

\W is the complement of [a-zA-Z0-9_], so it would function as if you used . with the /s modifier, effectively matching anything. You'll need to add these individually.