CN107995153B

CN107995153B - Form data verification method and form data verification device

Info

Publication number: CN107995153B
Application number: CN201610958900.6A
Authority: CN
Inventors: 许凤强; 黄银锋
Original assignee: Tencent Technology Beijing Co Ltd
Current assignee: Tencent Technology Beijing Co Ltd
Priority date: 2016-10-27
Filing date: 2016-10-27
Publication date: 2021-01-05
Anticipated expiration: 2036-10-27
Also published as: CN107995153A

Abstract

The invention discloses a form data verification method and a form data verification device; the method comprises the following steps: executing a method for acquiring form data in a form program to acquire form data submitted in a page; analyzing the type of the parameter included in the form data, and determining the name of a parameter rule for verifying the parameter value of the corresponding type of parameter; determining a parameter rule object encapsulated with the parameter rule, and transmitting the parameter value of the parameter to the corresponding parameter rule object; executing parameter rules encapsulated in corresponding parameter rule objects in each parameter rule object, and verifying the received parameter values; and outputting a verification result through a parameter rule object interface. By implementing the method and the device, the development efficiency of the form program can be improved, and the problem that the form program is difficult to position when in error is solved.

Description

Form data verification method and form data verification device

Technical Field

The present invention relates to network communication technologies, and in particular, to a form data verification method and a form data verification apparatus.

Background

Currently, the internet is widely used, and users can use various types of services based on the internet, such as online social contact, online shopping and the like. In the process that a user uses the network service, the business of verifying the form data is inevitably involved, the form data is formed by obtaining parameter values submitted by the user aiming at different parameters through the form, and whether the form data meets parameter rules or not is verified, so that security holes can be avoided, and malicious invasion to a server is avoided.

For example, when a user installs a client of a network application (such as a social application and a shopping application) at a terminal and desires to register (or log in) an account for use, a form program acquires various form data submitted by the user for registration (or login), such as a user name, a password, a telephone address, an email address and the like, and submits the form data to a server to verify whether corresponding parameter rules are met, such as whether the form data comprises unsupported character types, whether the length meets requirements and the like.

However, related art provides spreadsheet programs that use strings such as regular expressions, or other forms, to describe parameter rules:

on one hand, character strings in the forms of regular expressions and the like need to be written correspondingly aiming at different form rules, parameter rules in practical application are diversified, and the parameter rules of form data submitted by different pages cannot be completely the same, so that the form program development efficiency is low:

on the other hand, after the form program is compiled and formed based on the source code including the character strings, if there is an error (such as a spelling error) in the character strings, the form program will be in error, and the form data verification will fail, and it is difficult for the developer to locate the specific location of the error.

Disclosure of Invention

The embodiment of the invention provides a form data verification method and a form data verification device, which can improve the development efficiency of a form program and avoid the problem that the form program is difficult to position when in error.

The technical scheme of the embodiment of the invention is realized as follows:

in a first aspect, an embodiment of the present invention provides a form data verification method, including:

executing a method for acquiring form data in a form program to acquire form data submitted in a page;

analyzing the type of the parameter included in the form data, and determining the name of a parameter rule for verifying the parameter value of the corresponding type of parameter;

determining a parameter rule object encapsulated with the parameter rule, and transmitting the parameter value of the parameter to the corresponding parameter rule object;

executing parameter rules encapsulated in corresponding parameter rule objects in each parameter rule object, and verifying the received parameter values;

and outputting a verification result through a parameter rule object interface.

In a second aspect, an embodiment of the present invention provides a form data verification apparatus, including:

the acquiring unit is used for executing a device for acquiring form data in the form program and acquiring the form data submitted in a page;

the analysis unit is used for analyzing the types of the parameters included in the form data and determining the names of parameter rules for verifying the parameter values of the parameters of the corresponding types;

the transmission unit is used for determining a parameter rule object encapsulated with the parameter rule and transmitting the parameter value of the parameter to the corresponding parameter rule object;

the verification unit is used for executing the parameter rules encapsulated in the corresponding parameter rule objects in each parameter rule object and verifying the received parameter values;

and the output unit is used for outputting the verification result through the parameter rule object interface.

In a third aspect, an embodiment of the present invention provides a form data verification apparatus, including a memory and a processor; the memory stores executable instructions, and the executable instructions are used for executing the form data verification method provided by the embodiment of the invention.

In a fourth aspect, an embodiment of the present invention provides a storage medium, which stores executable instructions for executing the form data verification method provided in the embodiment of the present invention.

The embodiment of the invention has the following beneficial effects:

on one hand, by adopting the scheme of objectifying the parameter rule, when the same type of parameters are verified, the parameter rule object can be reused to verify the parameters, so that the condition that each parameter of the same type is described by using a character string independently is avoided, and the development efficiency of a form program is improved;

on the other hand, by adopting the scheme of objectifying the parameter rules, the compiling tool native support of the form program source code verifies whether the object has spelling errors or not and prompts, so that the condition that the parameter rules are wrongly configured due to the fact that the spelling errors occur in the character strings when the character strings are used for describing the parameter rules in the related technology is avoided.

Drawings

FIG. 1-1 is a diagram of an alternative functional architecture for a form program in an embodiment of the present invention;

FIGS. 1-2 are diagrams of alternative structures of a dictionary for a form program in an embodiment of the present invention;

FIGS. 1-3 are schematic diagrams of alternative structures of a dictionary for a form program in an embodiment of the present invention;

FIG. 2 is a diagram illustrating an alternative hardware and software configuration of the form data validation apparatus according to an embodiment of the present invention;

FIG. 3 is a flow diagram illustrating an alternative method for validating form data in accordance with an embodiment of the present invention;

FIG. 4-1 is a schematic diagram of an alternative architecture of the form data validation apparatus in an embodiment of the present invention;

FIG. 4-2 is a schematic diagram of an alternative architecture of the form data validation apparatus in an embodiment of the present invention;

FIG. 5 is a schematic diagram of an alternative functional structure of the form data verification apparatus according to the embodiment of the present invention.

Detailed Description

The present invention will be described in further detail below with reference to the accompanying drawings and examples. It should be understood that the examples provided herein are merely illustrative of the present invention and are not intended to limit the present invention. In addition, the following embodiments are provided as some embodiments for implementing the invention, not all embodiments for implementing the invention, and those skilled in the art will not make creative efforts to recombine technical solutions of the following embodiments and other embodiments based on implementing the invention all belong to the protection scope of the invention.

It should be noted that, in the embodiments of the present invention, the terms "comprises", "comprising" or any other variation thereof are intended to cover a non-exclusive inclusion, so that a method or apparatus including a series of elements includes not only the explicitly recited elements but also other elements not explicitly listed or inherent to the method or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other related elements in a method or apparatus that comprises the element (e.g., steps in a method or elements in an apparatus).

For example, the form data verification method provided in the embodiment of the present invention includes a series of steps, but the form data verification method provided in the embodiment of the present invention is not limited to the described steps, and similarly, the form data verification apparatus provided in the embodiment of the present invention includes a series of units, but the form data verification apparatus provided in the embodiment of the present invention is not limited to include the explicitly described units, and may further include units that are required to be provided for acquiring related information or performing processing based on the information.

Before further detailed description of the present invention, terms and expressions referred to in the embodiments of the present invention are described, and the terms and expressions referred to in the embodiments of the present invention are applicable to the following explanations.

1) Forms, also known as form programs, are primarily responsible for data collection functions in web pages. The form has three basic components: form labels, form fields, and form buttons.

2) The form data, including the form parameters and the corresponding parameter values, for example, for the form data of the user information, including the user name, the user password, the email address, the telephone number, etc., and "wang", "123", "wang", "user" com "and" 1338888 "are the corresponding parameter values, where" "" is a wildcard representing an arbitrary character.

3) Parameter rules, rules that the parameters need to satisfy in different business scenarios, such as optional ranges of characters, lengths of the characters, including types and lengths of characters that can be used by a registered user name and password when a user registers for a network service, generally, the parameter rules are described by using a regular expression.

4) The parameter rule object is a package body for verifying form data based on parameter rules, comprises two parts of data and operation, is described by adopting a computer language (such as Go language), and consists of a group of attributes and a group of services for operating the group of attributes.

5) The system comprises a parameter rule interface, an interface which is provided by the parameter rule object and used for accessing the parameter rule object, and a series of methods provided by the declaration parameter rule object in the parameter rule interface, such as a method for verifying form data and a method for returning error information when the form data is verified to be in error.

6) And error prompt information, wherein when the parameter submitted by the user does not meet the parameter rule, the information is returned to the user to prompt the type of the error, such as the length is not enough or exceeds the maximum length, and the input character of a certain type is not supported.

7) The Beego validation component is used for describing the rule which needs to be met by the form data through the character string by using the solution of the character string configuration parameter rule, and verifying whether each parameter value in the form data meets the parameter rule one by one in a mode of analyzing the character string when the form data is verified.

First, a manner of verifying the network parameters submitted by the user in the related art is described below by taking HTTP communication between the user and the service background as an example.

The acquisition and verification of parameters based on HTTP transmission are services commonly used in the process of network service, and are applied to scenes of network service registration and network service login of users, form data submitted by the users comprise parameters and parameter values which are carried in HTTP requests and are sent to a service background, the service background verifies whether the parameter values submitted by the users for registering or logging in the network service meet corresponding parameter rules, the parameter values can be used only after strict verification, otherwise, the network service cannot be used, various potential problems such as security holes and the like can be caused.

For example, when a user registers a web service, an incorrect email address user # service.com is submitted, if the service background does not verify whether the email address submitted by the user meets the rule of the email (if yes, the rule includes a "@" symbol), and if the user forgets a password, the user cannot continue to use the web service of the account.

For another example, if the user submits the wrong mobile phone number when registering for the network service: 131 (where the wildcard symbol represents a number), if the service background does not verify the mobile phone number submitted by the user, whether the mobile phone number meets the rule of the mobile phone number (for example, the length is 11, the mobile phone number is a number), and if the user forgets the password, the user cannot find the password in a mobile phone verification manner, and the registered network service cannot be used continuously, so that the user is lost.

Related art techniques provide for validating form data submitted by a user using a Beego validation component. For example, the parameter rules are described by a character string, and the parameter rules described by a character string are parsed. When parameters are verified using the Beego validation component, the rules (parameter rules) that the form data submitted by the user needs to satisfy are configured by a string.

Taking the example of submitting personal information by a user, assume that parameters and corresponding rules included in the personal information of the user are as follows:

the serial number of the user needs to be an integer variable;

name, a character-type variable, e.g., a name cannot be null and begins with "Bee";

age: shaping variables, wherein the value range of the shaping variables meets 1-age-140, and the parameters with the validity period beyond the range are illegal parameters;

electronic mailboxes, character-type variables, conforming to mailbox address formats such as including "@", and whose length cannot exceed the length upper limit, e.g., 100 characters;

the mobile phone number, the character type variable and the length meet the length requirement of the conventional mobile phone;

IP address, character type variable.

An example of parameters describing the above-mentioned personal information using character strings and corresponding parameter rules is:

code 1

When the scheme of verifying the parameters based on the Beego validation component is used, the mode of code 1 is used for describing the parameters related to the personal information of the user and the parameter rules which need to be met, and when the related parameters of the personal information submitted by the user are received, whether the parameter values of the parameters submitted by the user meet the rules corresponding to the parameters is judged one by analyzing the mode of code 1.

The following problems exist in this implementation:

problem 1) for verification of each type of parameter, a parameter rule needs to be described in a form program by using a character string in the form of a regular expression or the like, respectively, resulting in low development efficiency of the form program.

Problem 2) the parameter rule is described by using a character string, and when the problem occurs in the form program, the position where the error occurs in the form program is difficult to find out, because the spelling error of the character string cannot be checked in the code compiling process of the form program.

Problem 3) in the rule described in the character string, it is impossible to flexibly adjust the configuration of the error prompt of the parameter.

For example, for code 1 described above, if the error prompt of the Id field needs to be modified, the coding work needs to be performed again on code 1 to modify the rule of the corresponding Id described by the string. It can be seen that when the parameter rules of a plurality of parameters need to be modified, a large amount of encoding work needs to be performed on the code 1.

Aiming at the problems 1) and 2), the embodiment of the invention provides a scheme for objectifying the parameter rules, the parameter rules are packaged into parameter rule objects for verifying whether the parameter values conform to the parameter rules, the parameter rule objects are supported by a compiling tool to check the characteristic of spelling errors, and the problem that the spelling errors cannot be detected by directly describing the parameter rules by using character strings in the source codes of the form programs is solved.

Aiming at the problem 3), the embodiment of the invention provides a scheme for setting the message content parameters in the parameter rule objects, and the message content parameters and the parameter rule objects are one-to-one objects, which can be used for controlling the mode of outputting the error prompt information when the data of the verification form has errors, so that the flexible control of the output of the error prompt information by taking the parameter rule objects as the granularity is realized.

Fig. 1-1 is a schematic diagram of an optional functional structure of a form program according to an embodiment of the present invention, in fig. 1-1, a parameter rule is objected to be a parameter rule object, an operation for verifying whether a parameter value of a parameter meets the parameter rule is encapsulated in the parameter rule object, and a global dictionary is used to uniformly record different types of parameters, the parameter rule, and a mapping relationship between the parameter rule objects.

For example, in the dictionary, each parameter rule corresponds to a type of parameter, and each parameter rule is described by a rule object, and at this time, the rule object encapsulates the corresponding parameter rule, and for example, the dictionary may adopt such a manner: parameter (identified by the name of the parameter) -parameter rule (identified by the name of the parameter rule) -parameter rule object (identified by the name of the parameter rule object).

For parameters of the user name type, a programming language may be used to describe: the correspondence between username-username parameter rules (names) -username parameter rule objects (names) so that based on the type of parameter in the form data, it can be determined which corresponding parameter rule object to use for validation.

For another example, in the dictionary, each parameter rule corresponds to a type of parameter, and each parameter rule can be described by a plurality of parameter rule objects, that is, the parameter rules are dispersedly encapsulated in the plurality of parameter rule objects.

At this time, each parameter rule object is encapsulated with a subset of the parameter rules (i.e. encapsulated with a part of the parameter rules), and a collection of the parameter rules encapsulated in the multiple parameter rule objects constitutes the parameter rule corresponding to the parameter.

By means of converting the parameter rules into parameter rule objects in advance, for the verification of parameters using the same verification rule, whether the parameter rules are met can be verified only by transmitting parameter values of the parameters to the parameter rule objects, corresponding character strings do not need to be written for each parameter, and development efficiency of form programs is remarkably improved.

In the source code of the form program, the parameter rules are described by the parameter rule objects, so that when the executable form program is compiled and formed based on the source code of the form program, once spelling errors exist in the description of the parameter rule objects, because the compiling tool has a native function of carrying out error check on the parameter rule objects, error information is output in the compiling stage of the source code of the form program realized by using a programming language such as GO, and developers can find errors existing in the parameter rules packaged in the parameter rule objects in time and correct the errors.

In addition, for each parameter rule object, a message content parameter can be configured to control how to output specific information which does not conform to the parameter rule when the parameter value verification of the parameter in the form data does not conform to the parameter rule, for example, the character type does not support, the character length is lower than the minimum length, and the like, so that the requirement of the service parameter error prompt customization is flexibly and friendly met.

In the source code of the form program provided in the embodiment of the present invention, the definition of an interface of a parameter rule object (referred to as a parameter rule object interface) is also involved, the parameter rule object interface provides a way of interacting with an external object parameter rule object, and the following methods are declared in the parameter rule object:

a method for verifying a parameter value of a parameter;

a method for obtaining parameter values of the parameters;

a method for returning error information when an error is verified;

a method of setting a mandatory fill parameter;

a method of obtaining a form title;

method of setting the title of a form.

An example of a code implementation in the source code of the spreadsheet program that implements the parameter rule object interface described above is as follows:

code 2:

the form program formed by compiling the source code based on the form program runs in a form data verification device, the form data verification device can be deployed in a network service system which is distributed and deployed in a server/client (a client runs in a terminal device of a user side), double verification of the form data is carried out on the client and the server, the form data is submitted to the server for verification when the client verification is successful, and thus, the form data which fails in the client verification can not be submitted, and the pressure of the server is reduced; of course, the form data verification device may be deployed only in a network-side server, and the form data may be verified only in the server.

The form data verification apparatus may be implemented based on hardware resources of a user-side terminal device or a network-side server, see fig. 2 showing an implementation schematic diagram of an optional software and hardware architecture of the form data verification apparatus on the user-side terminal device or the network-side server, and in fig. 2, the form data verification apparatus 10 includes a hardware layer, an intermediate layer, an operating system layer, and a software layer. However, it should be understood by those skilled in the art that the structure of the form data verification apparatus 10 shown in fig. 2 is merely an example, and does not constitute a limitation on the structure of the form data verification apparatus 10. For example, the form data verification apparatus 10 may have more components than those shown in fig. 2 according to the implementation requirement, or omit some components according to the implementation requirement.

The hardware layers of the form data validation apparatus 10 include a processor 11, an input/output interface 13, a storage medium 14, and a network interface 12, which components may communicate via a system bus connection.

The processor 11 may be implemented by a Central Processing Unit (CPU), a Microprocessor (MCU), an Application Specific Integrated Circuit (ASIC), or a Field-Programmable Gate Array (FPGA).

The input/output interface 13 may be implemented using input/output devices such as a display screen, a touch screen, a speaker, etc.

The storage medium 14 may be implemented by a nonvolatile storage medium such as a flash memory, a hard disk, and an optical disk, or may also be implemented by a volatile storage medium such as a Double Data Rate (DDR) dynamic cache, in which an executable instruction for executing the form Data verification method is stored.

The storage medium 14 may be, for example, centrally located with respect to other components of the form data verification apparatus 10, or may be distributed with respect to other components of the form data verification apparatus 10. The network interface 12 provides the processor 11 with external data such as Access capability of the storage medium 14 set in a remote location, and the network interface 12 may exemplarily perform Near Field Communication based on Near Field Communication (NFC) technology, Bluetooth (Bluetooth) technology, ZigBee (ZigBee) technology, and in addition, may also implement Communication based on a Communication scheme such as Code Division Multiple Access (CDMA) and Wideband Code Division Multiple Access (WCDMA) and an evolution scheme thereof.

The driver layer includes middleware 15 for the operating system 16 to recognize and communicate with the components of the hardware layer, such as a set of drivers for the components of the hardware layer.

The operating system 16 is used for providing a graphical interface facing a user, and exemplarily comprises a plug-in icon, a desktop background and an application icon, and the operating system 16 supports the user to control the device via the graphical interface, and the embodiment of the present invention does not limit the software environment of the device, such as the type and the version of the operating system, and may be, for example, a Linux operating system, a UNIX operating system or other operating systems.

The application layer runs a form program 17 for acquiring form data and verifying whether parameter values of parameters in the form data satisfy parameter rules.

A description will be given of a processing procedure of performing form data verification on the form program based on the form program executed in the user-side terminal device or the network-side server in fig. 1.

Fig. 3 is an optional flowchart of the form data verification method according to the embodiment of the present invention, including the following steps:

step 101, executing the method for acquiring form data in the form program, and acquiring form data submitted by a user in a form page.

For a spreadsheet program, the form label contains the same locator (URL) of the Common Gateway Interface (CGI) program used to process the form data and the method by which the data is submitted to the server.

Form fields in the form program include various operation boxes for entering (or selecting) parameter values for various types of parameters, including, by way of example:

1) text boxes (including single-line text boxes and multi-line text boxes), form objects for user input, which are typically used to fill in single words or short answers, such as names, addresses, etc.;

2) the password box is used for a user to input a form object of a password;

3) a hidden field, an invisible element used to collect or send information, is not visible to the user. When the form data is submitted, the hidden field sends the information to the server by using the name and the value defined in the setting process;

4) the method comprises the following steps that check boxes and more than one option in options to be selected are selected, and each check box is an independent element and has a unique name;

5) drop-down selection boxes that allow the user to set a variety of options in a limited space;

6) the file uploading frame supports files uploaded by a user and comprises a browsing button, and the user can select the files to be uploaded by inputting a path of the files to be uploaded or clicking the browsing button.

In addition, the form program also includes form buttons, such as a submit button, a reset button and a general button, which are used for transmitting data to the CGI script on the server or canceling input, and can also be used for controlling other processing tasks defining the processing script.

In the source code of the form program, the parameter acquisition method is stored in a Controller (Controller) code module of the form program, and the acquisition method can be used directly in a subclass of the Controller. The parameter acquisition method is divided into a mandatory filling parameter, an optional parameter, and a parameter that must satisfy a specific rule after filling according to the property of the parameter, and the following description is made.

In one embodiment, during the execution of the form program, the parameter values of the required parameters are obtained in the form data by the method for obtaining the required parameters, and the parameter values of the optional parameters are obtained in the form data by the method for obtaining the optional parameters. The optional parameters are parameters that the user must submit relevant parameters on the form page, for example, the user name and password are optional parameters for logging in the network service, and personal preference information is optional parameters for registering the network service, that is, parameters that the relevant parameter values are not necessarily submitted.

An example of obtaining form data in the source code of a form program is as follows:

code 3

var p data.Product

this, getrequired (& p.name, "name", "product.name")// get required fill parameter

this. getoptional (& p.desc, "desc", "product.desc")// get optional parameters

In the code 3, acquiring a parameter value of a mandatory parameter by a this.getrequired () method, and acquiring a parameter value of an optional parameter by a GetOptional () method; the method controls the text box, the drop-down box and the like related to the required parameters to be presented in the page of the form by using the form field, and obtains the parameter values of the required parameters input or selected by the user.

Step 102, analyzing the type of the parameter included in the form data, and determining the name of a parameter rule for verifying the parameter value of the corresponding type of parameter.

By way of example, the implementation of identifying the types of different parameters in the source code of a spreadsheet program is as follows:

code 4

In practical applications, in addition to the parameters of the email address type, URL type and phone number type, the form program may also identify the parameter types of the injection 32-bit integer type, 64-bit integer type, 32-bit floating point type and 64-bit floating point type.

In one embodiment, the types of the parameters included in the form data are analyzed, and the name of at least one parameter rule corresponding to the corresponding type of the parameters is searched in the global variable based on the types of the parameters.

For example, in a global variable RuleMap of a source code of a spreadsheet program, for different types of parameters, a correspondence between a parameter, a parameter rule name, one or more parameter rule objects is recorded.

An alternative example of RuleMap in the source code of a spreadsheet program is:

code 4

web.RuleMap＝map[string][]rule.IRule{

// classification of goods

"product.name" [ ] rule.IRule (rule.New rule _ STR, ". trade name". MIN (1) },

"product.desc" [ ] rule.IRule (rule.New rule (rule.VALUE _ TYPE _ STR, product brief introduction ") }

"product.detail" [ ] rule.IRule { rule.New rule (rule.VALUE _ TYPE _ STR, "commodity details") }

}

In the code 4, taking the form data of the commodity classification as an example, the parameter VALUE with the parameter TYPE of product uses the parameter rule corresponding to VALUE _ TYPE _ UINT 64; the parameter VALUE with the parameter name of product.desc uses the parameter rule corresponding to the parameter TYPE VALUE _ TYPE _ UINT 64; parameter VALUE with parameter name product. detail uses parameter rule corresponding to parameter TYPE VALUE _ TYPE _ UINT 64; the parameter rules corresponding to VALUE _ TYPE _ UINT64 are implemented by which parameter rule objects are also implemented in global variables, which are not shown in the above-mentioned code 4.

And 103, determining the parameter rule object encapsulated with the parameter rule, and transmitting the parameter value of the parameter to the corresponding parameter rule object.

It can be understood that the parameter rules are formulated according to the actual requirements of different services:

for example, for a parameter of an integer type, the parameter rule may be used to specify the size of an integer parameter value, for example, specify a value range of the integer parameter value, for example, specify a value range of 1 to 1000.

For the parameter of the character type, the parameter rule may specify the length of the character string, for example, specify the shortest length, the maximum length, or the interval of the length of the character string.

For parameters of the email address type, the parameter rule may be that the specification includes "@" and the email suffix matches an email address suffix provided by a known web server provider.

For parameters of the URL address type, the parameter rules may be that the specification includes "HTTP" or "HTTPs".

Of course, regular expression rules may also be formulated, specifying parameter rules for enumeration-type parameters and for boolean-type parameters.

As described above, when a parameter object encapsulating a parameter rule is found in a global variable (dictionary) based on the name of the parameter rule, there may be a case where the parameter rule is implemented by one parameter rule object or a plurality of parameter rule objects:

1) if the parameter rule is realized by only one parameter rule object, only the parameter value of the parameter is transmitted to the parameter rule object, and whether the parameter value of the parameter accords with the parameter rule or not needs to refer to the verification result of the parameter rule object.

For example, for a parameter of the user name type, such 1 parameter rule may be required: 1) the string length cannot exceed 20. For the parameter rule, a parameter rule object which encapsulates a corresponding parameter rule exists, and the parameter rule object is assumed to be a parameter rule object 1; then the email addresses are passed to the parameter rule object 1, respectively.

Referring to an alternative structure diagram of the dictionary shown in fig. 1-2, for a parameter of a user name type, a corresponding parameter rule is that a character length is not shorter than 16 bits, and it may be determined that a parameter rule object (a parameter rule with a package not shorter than 16 bits) needs to be called for verification based on the dictionary.

2) If the parameter rule is realized by a plurality of parameter rule objects, a subset of the parameter rule is encapsulated in each parameter rule object, the parameter rule is formed by the collection of the subsets encapsulated by each parameter rule object, the parameter value of the parameter is transmitted to the corresponding parameter rule objects, and the verification result of the corresponding parameter rule objects is required to be referred if the parameter value of the parameter accords with the parameter rule.

For example, for parameters of the email address type, such a plurality of parameter rules may be required: 2) the length of the character string cannot exceed 30; 3) including "@"; 4) the @ suffix is an email suffix provided by known network server providers. For the 3 parameter rules, a parameter rule object encapsulating the corresponding parameter rule exists, and the parameter rule objects are assumed to be parameter rule objects 2, 3 and 4; then the email address is passed to parameter rule objects 2, 3 and 4, respectively.

Referring to an alternative structure diagram of the dictionary shown in fig. 1 to 3, for a parameter of a phone number type, a corresponding parameter rule is 11 bits long and a first digit is 1, and it may be determined that a parameter rule object (a parameter rule with a package length of 11) and a parameter rule object (a parameter rule with a package first digit of 1) need to be invoked for verification based on the dictionary.

In addition, the same parameter rule object can be multiplexed into parameters aiming at multiple types of parameters for verification, the effect of multiplexing the parameter rule object is achieved, and compared with the related technology for compiling character strings for verification aiming at each type of parameter, the efficiency is higher. This is explained below with reference to fig. 1-2.

Referring to an alternative structure diagram of the dictionary shown in fig. 1-2, for a parameter of a username type, the corresponding parameter rule is a character length not shorter than 16 bits, for a parameter of a password type, the corresponding parameter value calls a parameter rule object (not shorter than 16 bits) for verification, for a parameter of a password type, the corresponding parameter value calls the parameter rule object (packing the parameter rule not shorter than 16 bits) and the parameter rule object (packing the parameter rule including underlining and capital letters) for verification, and for the parameter rule object (packing the parameter rule not shorter than 16 bits) multiplexing is realized.

And 104, executing the parameter rules encapsulated in the corresponding parameter rule objects in each parameter rule object, and verifying the received parameter values.

And 105, outputting a verification result through a parameter rule object interface.

When the parameter value of the received parameter does not accord with the parameter rule packaged by the parameter rule object, the error prompt information that the parameter value of the parameter does not accord with the corresponding parameter rule is output through the predefined message content parameter packaged in the parameter rule object.

For example, 1) for a parameter of the user name type, if the corresponding parameter rule is: a) the character type is a character; b) the character length does not exceed 15. Then, for the parameter rule object for verifying the user name, different message content parameters can be configured therein to realize flexible custom setting of the output error information, and as an example, there can be the following two cases:

case 1), for configuring a message content parameter for outputting detailed error information in a parameter rule object, error prompt information such as "the username cannot include digits" is output when the acquired username submitted by the user includes digits, and error prompt information such as "the username is too long" is output when the username submitted by the user exceeds 15.

Case 2), for configuring the message content parameter for outputting only error information in the parameter rule object, when the acquired user name submitted by the user includes a number, or when the user name submitted by the user exceeds 15, only the information that the user name is in error is output, without prompting the specific error reason.

For the developer of the form program, when the form program is developed for different web pages, it is assumed that web page 1 and web page 2 are used, and if web page 1 is considered for security, when the user submits the username for login with a wrong name, the user only wants to prompt the username for the wrong name, and does not want to further prompt the reason for the wrong name (e.g. the username cannot include numbers), unlike web page 1, web page 2 needs to prompt the specific reason of the error (e.g. username error) when the user submits the username error of login, so the developer only needs to set the corresponding message content parameter in the parameter rule object of username type, and does not need to use programming language in the form program source code for web page 1 and web page 2, the method can flexibly control the output error prompt information by setting the message content parameters in the parameter rule object, thereby improving the development efficiency of the form program.

Referring to fig. 4-1, which is an alternative schematic structural diagram of the form data verification apparatus provided in the embodiment of the present invention, the form data verification apparatus is implemented in a terminal device on a user side and a service background on a network side in a distributed manner. The user logs in the service background through a client (such as a browser) of the terminal device to use network services, such as e-mail box, online social contact and the like.

And the terminal equipment at the user side runs a form program to acquire form data input by the user, wherein the form data comprises a user name and a password, the user name and the password are verified whether to accord with the corresponding user name parameter rule and the password parameter rule by calling the corresponding parameter rule object, and if not, error prompt information is given to prompt the user to input an error. Therefore, the form data meeting the parameter rules cannot be submitted to the service background, and the data processing pressure of the service background is relieved.

And if the form program operated by the user side terminal equipment verifies that the form data submitted by the user meets the user name parameter rule and the password parameter rule, submitting the form data to a service background.

And (3) continuously verifying form data from a user side in a mode that a service background runs corresponding parameter rule objects in a form program, and whether the form data meet a user name parameter rule and a password parameter rule:

1) if not, returning error prompt information to the form program of the user side, and prompting according to the message content parameters set in the parameter rule object of the parameters of the user name and the password type:

case 1), for configuring a message content parameter for outputting detailed error information in a parameter rule object, error prompt information such as "the username cannot include numbers" is output when the acquired username submitted by the user includes numbers, and error prompt information such as "the username is too long" is output when the username submitted by the user exceeds a maximum length.

Case 2), for configuring the message content parameter which only outputs error information in the parameter rule object, when the acquired user name submitted by the user comprises a number, or when the user name submitted by the user exceeds the maximum length, only the information that the user name is in error is output, and the specific error reason is not prompted.

2) If yes, continuously verifying whether the user is a legal registered user, and finishing login for the user when the user is verified to be a legal user.

The mode of transferring network parameters between the user side and the service background may use, for example, hypertext Transfer Protocol (HTTP), Secure version of HTTP, hypertext Transfer Protocol over Secure Socket Layer (HTTPs), and the like. For communication in the HTTP mode, a user side transmits parameters to a service background through an HTTP request, and supports submission of parameters to the service background through an HTTP request in the GET or POST mode.

Referring to fig. 4-2, which is an alternative schematic structural diagram of the form data verification apparatus provided in the embodiment of the present invention, the form data verification apparatus is implemented in a terminal device on the user side and a service background on the network side in a distributed manner. The user logs in the service background through a client (such as a browser) of the terminal device to use network services, such as e-mail box, online social contact and the like.

The terminal equipment at the user side runs the form program to obtain form data input on a form page when the user needs to register a network service account, the form data comprises a user name and a password which are expected to be used, the form data is directly submitted to a service background, the form data from the user side is verified by a service background running form program to determine whether the form data meets the user name parameter rule and the password parameter rule or not,

if not, carrying out error information prompt according to the message content parameter set in the parameter rule object of the parameter of the user name and the password type:

If yes, continuously verifying whether the user is a legal registered user, and finishing login for the user when the user is verified to be a legal user.

An alternative functional structure of the form data verification apparatus is described, and reference is made to an alternative functional structure diagram of the form data verification apparatus shown in fig. 5, which includes: the acquisition unit 21, the analysis unit 22, the transmission unit 23, the verification unit 24, the output unit 25, and the illumination unit 26 are explained below, respectively.

An obtaining unit 21, configured to execute the apparatus for obtaining form data in the form program, and obtain form data submitted in a page.

In one embodiment, the obtaining unit 21 is further configured to obtain the parameter value of the required parameter in the form data through the device for obtaining the required parameter, and obtain the parameter value of the optional parameter in the form data through the device for obtaining the optional parameter.

In the source code of the form program, the parameter acquisition method is stored in a Controller (Controller) of the form program, and the acquisition method may be used directly in a subclass of the Controller. The parameter acquisition method is divided into a mandatory filling parameter, an optional parameter and a parameter which must meet a specific rule after filling according to the property of the parameter.

The analysis unit 22 is configured to analyze the type of the parameter included in the form data, and determine a name of a parameter rule used for verifying a parameter value of the corresponding type of parameter.

In an embodiment, the analyzing unit 22 is further configured to analyze a type of a parameter included in the form data, and search, based on the type of the parameter, a name of at least one parameter rule corresponding to the parameter of the corresponding type in the global variable.

The transferring unit 23 is configured to determine a parameter rule object in which the parameter rule is encapsulated, and transfer a parameter value of the parameter to a corresponding parameter rule object.

In an embodiment, the passing unit 23 is further configured to find, based on the name of the parameter rule, at least two parameter rule objects each encapsulating a part of the parameter rule in the global variable, and a collection of the parameter rules encapsulated in the at least two parameter rule objects is a parameter.

Of course, URL address rules, regular expression rules, parameter-specific rules for enumerated types of parameters, and for boolean types of parameters may also be formulated.

And the verification unit 24 is configured to execute the parameter rule encapsulated in the corresponding parameter rule object in each parameter rule object, and verify the received parameter value.

And the output unit 25 is used for outputting the verification result through the parameter rule object interface.

The parameter rule interface defines a method for returning error prompt information, and when the parameter value of the received parameter does not conform to the parameter rule packaged by the parameter rule object, the verification unit 24 outputs the error prompt information that the parameter value of the parameter does not conform to the corresponding parameter rule through the predefined message content parameter packaged in the parameter rule object.

A declaration unit 26 for declaring the following methods in the parameter rule object interface: a device for obtaining form data; means for outputting error information when the validation form data fails; means for setting the requisite parameters; and a device for setting and acquiring the form title.

In practical applications, each unit in the form data verification apparatus 20 may be implemented by a hardware resource in a user-side terminal device or a network-side server, such as by a processor shown in fig. 2 executing an executable instruction (executable instruction of the form program) stored in a storage medium.

In summary, the embodiments of the present invention have the following beneficial effects:

1) by adopting the scheme of objectifying the parameter rule, when the same type of parameters are verified, the parameter rule object can be reused to verify the parameters, so that the condition that each parameter of the same type is described by using a character string independently is avoided, and the development efficiency of a form program is improved;

2) by adopting the scheme of objectifying the parameter rules, the compiling tool native support of the form program source codes verifies whether the object has misspelling and prompts, so that the parameter rule configuration error caused by misspelling is avoided.

3) The error information configuration scheme based on the object supports the adjustment of the output error prompt information by taking the parameter rule object as the granularity, avoids the work of adjusting the error prompt information by using a programming language again by developers, and realizes the service requirement of personalized customization of the error prompt information.

Those skilled in the art will understand that: all or part of the steps for implementing the method embodiments may be implemented by hardware related to program instructions, and the program may be stored in a computer readable storage medium, and when executed, the program performs the steps including the method embodiments; and the aforementioned storage medium includes: various media capable of storing program codes, such as a removable Memory device, a Random Access Memory (RAM), a Read-Only Memory (ROM), a magnetic disk, and an optical disk.

Alternatively, the integrated unit of the present invention may be stored in a computer-readable storage medium if it is implemented in the form of a software functional module and sold or used as a separate product. Based on such understanding, the technical solutions of the embodiments of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the methods according to the embodiments of the present invention. And the aforementioned storage medium includes: a removable storage device, a RAM, a ROM, a magnetic or optical disk, or other various media that can store program code.

The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the appended claims.

Claims

1. A form data validation method, comprising:

the form data comprises form parameters and corresponding parameter values;

analyzing the type of the parameter included in the form data, and searching the names of at least two parameter rules corresponding to the parameter of the corresponding type in the global variable based on the type of the parameter;

based on the name of the parameter rule, at least two parameter rule objects which are all packaged with part of the parameter rule are searched in the global variable, the collection of the parameter rule packaged in the at least two parameter rule objects is the parameter, and the parameter value of the parameter is transmitted to the corresponding parameter rule object;

the parameter rule object is obtained through a compiling tool of a form program source code, and the compiling tool supports error check on the parameter rule object so as to output error information aiming at the parameter rule in a compiling stage;

setting message content parameters in the parameter rule object; the message content parameters are used for controlling the output of error prompt information when the data of the verification form has errors and are in one-to-one correspondence with the parameter rule objects;

and when the received parameter value does not accord with the parameter rule packaged by the parameter rule object, outputting error prompt information that the parameter value of the parameter does not accord with the corresponding parameter rule through a parameter rule object interface based on the message content parameter packaged in the parameter rule object.

2. The method of claim 1, wherein the performing the method of obtaining form data in a form program, obtaining form data submitted within a page, comprises:

and acquiring parameter values of the optional parameters in the form data by acquiring the optional parameters.

3. The method of claim 1,

the message content parameters include at least the following levels: only outputting error prompt information of parameter value error; and outputting error prompt information of the corresponding parameter rule which the parameter value does not conform to.

4. The method of claim 1, further comprising:

declaring in the parameter rule object interface the following method: the method for acquiring the form data; a method for outputting error information when the verification of the form data fails; a method of setting the requisite parameters; and setting and obtaining a form title.

5. A form data validation apparatus, comprising:

the acquiring unit is used for executing a device for acquiring form data in the form program and acquiring the form data submitted in a page; the form data comprises form parameters and corresponding parameter values;

the analysis unit is used for analyzing the types of the parameters included in the form data and searching the names of at least two parameter rules corresponding to the parameters of the corresponding types in the global variable based on the types of the parameters;

a transfer unit, configured to search, based on the name of the parameter rule, for at least two parameter rule objects, in which part of the parameter rule is encapsulated, in a global variable, where a set of parameter rules encapsulated in the at least two parameter rule objects is the parameter, and transfer a parameter value of the parameter to a corresponding parameter rule object; the parameter rule object is obtained through a compiling tool of a form program source code, and the compiling tool supports error check on the parameter rule object so as to output error information aiming at the parameter rule in a compiling stage;

the verification unit is used for setting message content parameters in the parameter rule object; the message content parameters are used for controlling the output of error prompt information when the data of the verification form has errors and are in one-to-one correspondence with the parameter rule objects; executing parameter rules encapsulated in corresponding parameter rule objects in each parameter rule object, and verifying the received parameter values;

and the output unit is used for outputting error prompt information that the parameter value of the parameter does not accord with the corresponding parameter rule through a parameter rule object interface based on the message content parameter encapsulated in the parameter rule object when the received parameter value does not accord with the parameter rule encapsulated by the parameter rule object.

6. The apparatus of claim 5,

the obtaining unit is further configured to obtain a parameter value of the parameter through the device for obtaining the parameter, and obtain a parameter value of the optional parameter through the device for obtaining the optional parameter.

7. The apparatus of claim 5,

the verification unit is further configured to output error prompt information according to the predefined message content parameters, wherein the predefined message content parameters at least include the following levels: only outputting prompt information of parameter value error; and outputting prompt information of the corresponding parameter rule which the parameter value does not conform to.

8. The apparatus of claim 5, further comprising:

a declaration unit for declaring the following methods in the parameter rule object interface: the device for acquiring the form data; means for outputting error information when the validation of the form data fails; means for setting the requisite parameters; and a device for setting and acquiring the form title.

9. An electronic device comprising a memory, a processor, and executable instructions stored on the memory and executable on the processor, the processor implementing the form data validation method of any of claims 1 to 4 when executing the executable instructions.

10. A computer-readable storage medium having stored thereon executable instructions for causing a processor to perform the form data validation method of any of claims 1 to 4 when executed.