A fine distinction should be made between validating the input and untainting it.
Untaininting should be more concerned with security of your web-site (to make sure, the user does not slip in some executable code or other bad things), whereas validating has more to do with obtaining valid data from the user.
It seems you are more concerned with validating here and in order to do that you need to make a model of the data you are expecting and check the input against that model (ask yourself: what is a valid date, name, password, ...).
Whether you do this checking through multiple if tests and regexes or any of the other suggested methods is less important than finding/setting the rules which define valid input.
CountZero
"If you have four groups working on a compiler, you'll get a 4-pass compiler." - Conway's Law
In reply to Re: Validating incoming CGI form data
by CountZero
in thread Validating incoming CGI form data
by Anonymous Monk
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |