[MSSQL]Block certain characters

[Razzen-]

Hello, I have a MSSQL database. I have a table in there that has a column that I do not want to allow the use of
Quote:
[

or
Quote:
]

When the database is queried to insert something into this table involving that character ([ or ]), I want it to be not allowed, give an error, or something as long as it does not create the section in the column with the [ or ].
Thanks for the help.

I am also ok if the only thing I can do is allow text only, or allow text and numbers only.

 

[EliteGM]

<?php
     if (strstr($THE_STRING, "["))
     {
          //Do something
     }
     if (strstr($THE_STRING, "]"))
     {
          //Do something
     }
?>

Like that?

 

[Razzen-]

well I'm not using a PHP script to insert values into the database.

 

[EliteGM]

Oh, right.
But.. how do you insert values into it?
I wouldn't see another way then just manually...
I wouldn't know of a way to block in IN MSSQL.

 

[Razzen-]

Its for a game.. lets say players log in and create a character, thats when I want to block those [ ]

Someone on Devshed told me an example

create table check_test 
(
  data_value varchar(100) 
    check (charindex('[', data_value) = 0 and charindex(']', data_value) = 0)
)

But I'm unable to understand how to apply it to a current table.

 

[EliteGM]

Well.. what game is it for?
That example can work, because it checks how many times ']' or '[' are found in the word.
You should add something that when it does find those it sends an error.

 

[Negata]

But I'm unable to understand how to apply it to a current table.

It wouldn't be very fair towards the items already in the table to change the rules now, would it? But of course you can always create a new table with the rules and insert all from the old one.

What you're doing is definitely something I'd check before sending the input to the database.

 

[cvrdheeraj]

Its better to make an amendment in your Server files to object the usage of special character, instead of letting the server perform a Query that will ultimately fail.

 

[EliteGM]

But just what game is it for :S
Well as said above, you can just edit your server files so you don't have to edit the MS SQL.