Dirrect Booking Freelancer
Displaying latest 1 of 1
Feedback
function validateInput(input) { // Remove extra spaces input = input.trim(); // Patterns for common attacks const sqlInjectionPattern = /('|--|;|\/\*|\*\/|xp_|SELECT|INSERT|DELETE|UPDATE|DROP)/i; const xssPattern = /<script.*?>.*?<\/script>/i; const specialCharsPattern = /[<>]/g; // Empty check if (input.length === 0) { return { valid: false, message: "Field cannot be empty" }; } // SQL Injection check if (sqlInjectionPattern.test(input)) { return { valid: false, message: "Possible SQL Injection detected" }; } // XSS check if (xssPattern.test(input)) { return { valid: false, message: "Possible XSS attack detected" }; } // Dangerous character check if (specialCharsPattern.test(input)) { return { valid: false, message: "Invalid characters detected" }; } return { valid: true, message: "Input is safe" }; } // Example usage const userInput = document.getElementById("username").value; const result = validateInput(userInput); if (!result.valid) { alert(result.message); } else { alert("Validation Passed"); }
- Helpful?