不可使用非法字符

application/admin/controller/User.php

@@ -105,11 +105,12 @@ class User extends BaseController
     {
         try {
             $User_model = new \app\admin\model\User();
+            //正则表达式
+//            if (!preg_match('/[^A-Za-z0-9]/', $_POST['username'])) {
+//                tojson(202, '不可使用非法字符');
+//            }
             //去除空格
-            if (!preg_match('/[^A-Za-z0-9]/', $_POST['username'])) {
-                tojson(202, '不可使用非法字符');
-            }
-            $_POST['username']=str_replace(" ",'', $_POST['username']);
+            $_POST['username']=str_replace(array(" ","!","@","#","$","%","^","&","*","(",")","{","}",";","'",",",".","/",":","<",">","?"),'', $_POST['username']);
             $check = $User_model->where(['username' => $_POST['username']])->value('id');
             if ($check) {
                 tojson(10000, '账号已存在');