Question

On my registration page I need to validate the usernames as alphanumeric only, but also with optional underscores. I’ve come up with this:

function validate_alphanumeric_underscore($str) 
{
    return preg_match('/^\w+$/',$str);
}

Which seems to work okay, but I’m not a regex expert! Does anyone spot any problem?

Answer 1

The actual matched characters of \w depend on the locale that is being used:

A “word” character is any letter or digit or the underscore character, that is, any character which can be part of a Perl “word“. The definition of letters and digits is controlled by PCRE’s character tables, and may vary if locale-specific matching is taking place. For example, in the “fr” (French) locale, some character codes greater than 128 are used for accented letters, and these are matched by \w.

So you should better explicitly specify what characters you want to allow:

/^[A-Za-z0-9_]+$/

This allows just alphanumeric characters and the underscore.

And if you want to allow underscore only as concatenation character and want to force that the username must start with a alphabet character:

/^[A-Za-z][A-Za-z0-9]*(?:_[A-Za-z0-9]+)*$/