Lære Building Validation Flows with Exceptions | Validation Flows and Safe Execution Patterns

Stryg for at vise menuen

When building PHP applications, validating user input is one of the most essential tasks you face. Without proper validation, your application can become unstable, insecure, or simply behave in unintended ways. Traditional validation often involves checking each input and returning error codes or messages, but this can lead to tangled logic and hard-to-maintain code. By using exceptions, you can structure your validation flows more clearly, separating normal execution from error handling. Exceptions allow you to halt the current flow when invalid data is detected and handle issues in a centralized, organized manner.

validation_flow.php


              1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
            
<?php

function validateUsername($username) {
    if (empty($username)) {
        throw new Exception("Username cannot be empty.");
    }
    if (strlen($username) < 5) {
        throw new Exception("Username must be at least 5 characters.");
    }
}

function validateEmail($email) {
    if (empty($email)) {
        throw new Exception("Email cannot be empty.");
    }
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        throw new Exception("Invalid email format.");
    }
}

function validatePassword($password) {
    if (strlen($password) < 8) {
        throw new Exception("Password must be at least 8 characters.");
    }
    if (!preg_match('/[A-Z]/', $password)) {
        throw new Exception("Password must contain at least one uppercase letter.");
    }
    if (!preg_match('/[0-9]/', $password)) {
        throw new Exception("Password must contain at least one number.");
    }
}

$userData = [
    "username" => "john",
    "email" => "user@example.com",
    "password" => "passWord1"
];

try {
    validateUsername($userData["username"]);
    validateEmail($userData["email"]);
    validatePassword($userData["password"]);
    echo "All validations passed. User can be registered.";
} catch (Exception $e) {
    echo "Validation error: " . $e->getMessage();
}

In the code above, you see a multi-step validation process for user registration. Each function—validateUsername, validateEmail, and validatePassword—checks a different piece of user input. If a validation rule fails, the function throws an Exception with a descriptive message. The main logic wraps the validation calls in a try block; if any validation fails, the catch block captures the exception and displays the error message. This approach ensures that as soon as invalid data is detected, the process stops and the issue is clearly reported, keeping your validation logic clean and focused.

aggregate_errors.php


              1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556
            
<?php
$errors = [];

function validateUsername($username) {
    if (empty($username)) {
        throw new Exception("Username cannot be empty.");
    }
    if (strlen($username) < 5) {
        throw new Exception("Username must be at least 5 characters.");
    }
}

function validateEmail($email) {
    if (empty($email)) {
        throw new Exception("Email cannot be empty.");
    }
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        throw new Exception("Invalid email format.");
    }
}

function validatePassword($password) {
    if (strlen($password) < 8) {
        throw new Exception("Password must be at least 8 characters.");
    }
    if (!preg_match('/[A-Z]/', $password)) {
        throw new Exception("Password must contain at least one uppercase letter.");
    }
    if (!preg_match('/[0-9]/', $password)) {
        throw new Exception("Password must contain at least one number.");
    }
}

$userData = [
    "username" => "",
    "email" => "invalid-email",
    "password" => "short"
];

foreach (["validateUsername", "validateEmail", "validatePassword"] as $function) {
    try {
        $function($userData[substr($function, 8)]);
    } catch (Exception $e) {
        $errors[] = $e->getMessage();
    }
}

// Present all errors to the user
if (!empty($errors)) {
    foreach ($errors as $error) {
        echo $error . "\n";
    }
} else {
    echo "All validations passed. User can be registered.";
}

Using exceptions for validation offers several advantages. Your validation logic is cleaner, as you avoid deeply nested if-statements and can handle errors in a consistent, centralized way. Exceptions make it easy to separate normal execution from error handling, which improves readability and maintainability. However, there are trade-offs. Exceptions can make control flow harder to follow if overused, and catching many exceptions may have a small performance cost. Some developers prefer returning error arrays or objects instead, especially when aggregating errors or when performance is critical. The best approach depends on your application's complexity and your team's preferences.

Study More

Study more:
For more on validation best practices in PHP, see the PHP Manual's filter functions and articles such as "PHP: The Right Way" - Input Validation.

1. What is the main advantage of using exceptions in validation flows?

2. How can you present multiple validation errors to the user?

Var alt klart?

Tak for dine kommentarer!

Sektion 3. Kapitel 1

Spørg AI

Spørg om hvad som helst eller prøv et af de foreslåede spørgsmål for at starte vores chat

Sektion 3. Kapitel 1