New answers tagged

0

A "big industrial client" who "needs to input a lot of parameters" usually does not want to do that manually, at all. In my experience, they already have an Excel spreadsheet lying around somewhere. During one such web based project, I started off with a large textarea where they could paste the data copied from their Excel sheets. That was 6 years ago and ...


1

First, I would make a collaborative glossary with the client to make sure there is no ambiguity about the industrial jargon. Then, I would identify high level entities, and list every attributes belonging to them. Each attribute should have a name, a business description and a data type. For the how-to, I suggest a simple XLS or Google Drive Spreadsheet. ...


1

You could use keywords and delimiters to have the code automatically parse the text and format it in a small preview window. For your example: John Doe // First line is always the name @ Company Best Inc. // use @ symbol to denote company name line disc this, this and that. // the line starting with the disc keyword is the discussion info appt ...


1

Sanitizing user input doesn't imply you change or restrict input, it simply means you handle it safely and escape it when necessary to prevent exploits like XSS attacks. If you're saving the data to a database, use parameterized queries. Even if your specific database doesn't support them directly, often times many libraries can add a simple wrapper over ...


0

how to sanitize user input for data fields such as the name Either Don't. If you are worried about SQL injection, use parameterised queries instead. Use appropriate Unicode character classes. For example see Java regex for support Unicode?: \p{L}+.


2

Be careful of using methods that would prevent some of your users from entering their actual names. Names are extremely personal and being told 'you can't use your real name' isn't going to sit well with everyone. I remember dealing with a customer at least once a month who was upset that she couldn't use her hyphenated name (this was a rarely-accessed ...


-3

Look in to commonly used allowed formats and symbols for text input. For example, email allows A-Z, a-z, 1-0 and !#$%&'*+-/=?^_`{|}~. Domain names on the other hand only allow A-Z, a-z, 1-0 and hyphens. There isn't a simple end-all solution for user input. It's highly dependent on context. What are they filling in, how are they filling it in, where are ...



Top 50 recent answers are included