GUMP is a standalone PHP input validation and filtering class.

1. Download GUMP
2. Unzip it and copy the directory into your PHP project directory.

Include it in your project:

require "gump.class.php";

Methods available:

GUMP::xss_clean(array $data); // Strips and encodes unwanted characters
GUMP::sanitize(array $input, $fields = NULL); // Sanitizes data and converts strings to UTF-8 (if available)
GUMP::validate(array $input, array $ruleset); // Validates input data according to the provided ruleset (see example)
GUMP::filter(array $input, array $filterset); // Filters input data according to the provided filterset (see example)

The following example is part of a registration form, the flow should be pretty standard

require "gump.class.php";

$_POST = GUMP::sanitize($_POST); // You don't have to sanitize, but it's safest to do so.

$rules = array(
	'username' => 'required|alpha_numeric|max_len,100|min_len,6',
	'password' => 'required|max_len,100|min_len,6',
	'email'    => 'required|valid_email',
	'gender'   => 'required|exact_len,1'
);

$filters = array(
	'username' => 'trim|sanitize_string',
	'password' => 'trim|base64',
	'email'    => 'trim|sanitize_email',
	'gender'   => 'trim'
);

$_POST = GUMP::filter($_POST, $filters);

$validated = GUMP::validate($_POST, $rules);

if($validated === TRUE)
{
	// Do something, everything went well
}
else
{	
	print_r($validated); // Something went wrong
}

GUMP::validate() returns one of two types:

AN ARRAY containing key names and validator names when data does not pass the validation.

You can use this array along with your language helpers to determine what error message to show.

A BOOLEAN value of TRUE if the validation was successful.

GUMP::filter() returns the exact array structure that was parsed as the $input parameter, the only difference would be the filtered data.

• required Ensures the specified key value exists and is not empty
• valid_email Checks for a valid email address
• max_len,n Checks key value length, makes sure it's not longer than the specified length. n = length parameter.
• min_len,n Checks key value length, makes sure it's not shorter than the specified length. n = length parameter.
• exact_len,n Ensures that the key value length precisely matches the specified length. n = length parameter.
• alpha Ensure only alpha characters are present in the key value (a-z, A-Z)
• alpha_numeric Ensure only alpha-numeric characters are present in the key value (a-z, A-Z, 0-9)
• alpha_dash Ensure only alpha-numeric characters + dashes and underscores are present in the key value (a-z, A-Z, 0-9, _-)
• numeric Ensure only numeric key values
• integer Ensure only integer key values
• boolean Checks for PHP accepted boolean values, returns TRUE for "1", "true", "on" and "yes"
• float Checks for float values
• valid_url Check for valid URL or subdomain
• url_exists Check to see if the url exists and is accessible
• valid_ip Check for valid IP address

• sanitize_string Remove script tags and encode HTML entities, similar to GUMP::xss_clean();
• urlencode Encode url entities
• htmlencode Encode HTML entities
• sanitize_email Remove illegal characters from email addresses
• sanitize_numbers Remove any non-numeric characters
• trim Remove spaces from the beginning or end of strings
• base64 Base64 encode the input
• sha1 Encrypt the input with the secure sha1 algorithm
• md5 MD5 encode the input

Simply create your own class that extends the GUMP class.

	
require("gump.class.php");

class MyClass extends GUMP
{
	public static function filter_myfilter($value)
	{
		...
	}
	
	public static function validate_myvalidator($field, $input, $param = NULL)
	{
		...
	}
	
} // EOC

$validated = MyClass::validate($_POST, $rules);

Remember to create a protected static methods with the correct parameter types and counts.

For filter methods, prepend the method name with "filter_". For validator methods, prepend the method name with "validate_".

1. Open up your terminal
2. cd [GUMP DIRECTORY]
3. php test.php

Your output should look something like:

	BEFORE SANITIZE:
	
	Array
	(
		[missing]   	=> '',
		[email]     	=> "not a valid email\r\n",
		[max_len]   	=> "1234567890",
		[min_len]   	=> "1",
		[exact_len] 	=> "123456",
		[alpha]	       	=> "*(^*^*&",
		[alpha_numeric] => "abcdefg12345+\r\n\r\n\r\n",
		[alpha_dash]	=> "ab<script>alert(1);</script>cdefg12345-_+",
	[numeric]		=> "one, two\r\n",
	[integer]		=> "1,003\r\n\r\n\r\n\r\n",
	[boolean]		=> "this is not a boolean\r\n\r\n\r\n\r\n",
	[float]			=> "not a float\r\n",
	[valid_url]		=> "\r\n\r\nhttp://add",
	[url_exists]	=> "http://asdasdasd354.gov",
	[valid_ip]		=> "google.com"
)

AFTER SANITIZE:

Array
(
    [missing] => 
    [email] => not a valid email
    [max_len] => 1234567890
    [min_len] => 1
    [exact_len] => 123456
    [alpha] => *(^*^*&
    [alpha_numeric] => abcdefg12345+
    [alpha_dash] => abalert(1);cdefg12345-_+
    [numeric] => one, two
    [integer] => 1,003
    [boolean] => this is not a boolean
    [float] => not a float
    [valid_url] => http://add
    [url_exists] => http://asdasdasd354.gov
    [valid_ip] => google.com
)

THESE ALL FAIL:

Array
(
    [0] => Array
        (
            [field] => missing
            [value] => 
            [rule] => validate_required
        )

    [1] => Array
        (
            [field] => email
            [value] => not a valid email\r\n
            [rule] => validate_valid_email
        )

    [2] => Array
        (
            [field] => max_len
            [value] => 1234567890\r\n
            [rule] => validate_max_len
        )

    [3] => Array
        (
            [field] => alpha
            [value] => *(^*^*&\r\n
            [rule] => validate_alpha
        )

    [4] => Array
        (
            [field] => alpha_numeric
            [value] => abcdefg12345+\r\n
            [rule] => validate_alpha_numeric
        )

    [5] => Array
        (
            [field] => alpha_dash
            [value] => ab<script>alert(1);</script>cdefg12345-_+\r\n
            [rule] => validate_alpha_dash
        )

    [6] => Array
        (
            [field] => numeric
            [value] => one, two\r\n
            [rule] => validate_numeric
        )

    [7] => Array
        (
            [field] => integer
            [value] => 1,003\r\n
            [rule] => validate_integer
        )

    [8] => Array
        (
            [field] => float
            [value] => not a float\r\n
            [rule] => validate_float
        )

    [9] => Array
        (
            [field] => valid_url
            [value] => http://add\r\n
            [rule] => validate_valid_url
        )

    [10] => Array
        (
            [field] => url_exists
            [value] => http://asdasdasd354.gov
            [rule] => validate_url_exists
        )

    [11] => Array
        (
            [field] => valid_ip
            [value] => google.com\r\n
            [rule] => validate_valid_ip
        )

)

THESE ALL SUCCEED:

Array
(
    [missing] => This is not missing
    [email] => sean@wixel.net
    [max_len] => 1
    [min_len] => 1234
    [exact_len] => 1234567890
    [alpha] => abcdefg
    [alpha_numeric] => abcdefg12345
    [alpha_dash] => abcdefg12345-_
    [numeric] => 2
    [integer] => 3
    [boolean] => 
    [float] => 10.1
    [valid_url] => http://wixel.net
	[url_exists] => http://wixel.net
    [valid_ip] => 69.163.138.62
)

DONE