Stop Trusting User Input: How to Build a Python 'Validation Gate'

Python Dev — Thu, 18 Jun 2026 17:18:45 +0000

Stop Trusting User Input: How to Build a Python 'Validation Gate'

For Python beginners who want to stop bad data before it wrecks their scripts.

🤔 What Is a Validation Gate?

Think of a nightclub bouncer — their only job is checking people at the door. A Validation Gate is the same: a block of code between input collection and program logic whose only job is to ask "is this data safe to enter?"

User Input → [VALIDATION GATE] → Business Logic → Output
↓
Bad input? STOP. Print error. Exit.

Bad data gets stopped immediately, instead of silently corrupting results 50 lines later.

🔢 Lower Bounds and Upper Bounds — Both Matter

Most beginners only check one side:

if age < 0:
    print("Error: age can't be negative!")
    exit()

That only protects one end of the range. What if someone types 99999? It's positive, so it passes — but it's just as wrong.

Lower bound — catches impossibly small values (e.g., Age = -5)
Upper bound — catches unrealistically large values (e.g., Age = 99999)

Both are equally important.

🚀 Why Upper Bounds Matter

User enters 9999 as their age. Your if age < 0 check passes. Now you calculate retirement_year = 2025 + (65 - 9999) and get -7909. No crash — just a silent, absurd result. That's worse than a crash.

Upper-bound violations are caused by unit confusion, extra zeros, copy-paste errors, and malicious input. A proper gate catches all of them.

🛠️ The Full Code

# validation_gate.py
# A beginner-friendly example of defensive input validation in Python


def get_validated_age(prompt="Enter your age: "):
    """
    Collects a user's age and validates it through 3 gates before
    allowing the value to proceed into the rest of the program.
    """

    # --- Define our realistic bounds ---
    MIN_AGE = 0    # An age below 0 is impossible
    MAX_AGE = 120  # An age above 120 is unrealistic for a human

    # --- Collect the raw input and clean up whitespace ---
    user_input = input(prompt).strip()

    # =============================================
    # GATE 1: Type Check
    # Is this actually a whole number?
    # We check this FIRST, before any math.
    # =============================================
    if not user_input.isdigit():
        print(f"❌ Error: '{user_input}' is not a valid whole number.")
        print("   Please enter a number like 25 or 42.")
        exit()

    # Safe to convert to int now, since we already confirmed it's digits-only
    age = int(user_input)

    # =============================================
    # GATE 2: Lower Bound Check
    # Is the number above the minimum?
    # =============================================
    if age < MIN_AGE:
        print(f"❌ Error: Age cannot be negative. You entered: {age}")
        exit()

    # =============================================
    # GATE 3: Upper Bound Check
    # Is the number below the maximum?
    # This is the gate most beginners forget!
    # =============================================
    if age > MAX_AGE:
        print(f"❌ Error: {age} is not a realistic human age.")
        print(f"   Please enter a number between {MIN_AGE} and {MAX_AGE}.")
        exit()

    # =============================================
    # ALL GATES PASSED ✅
    # Only reach here if the input is valid.
    # =============================================
    print(f"✅ Valid age accepted: {age}")
    return age

# --- Main Program ---
if __name__ == "__main__":
    validated_age = get_validated_age()

    # Your actual program logic goes here, safe in the knowledge
    # that validated_age is a sensible number.
    print(f"\nProcessing your data with age = {validated_age}...")
    print("(Your real business logic would go here)")

🔍 Key Points

.strip() — Strips whitespace first. " 25 " becomes "25".

.isdigit() — Checks every character is a digit. "25" passes. "abc" and "25.5" both fail. Always run this before any math to avoid a ValueError.

exit() — Stops the program immediately. Use sys.exit(1) in larger projects.

Order matters. Type check first, then range. Checking if age < 0 before confirming age is a number crashes the moment someone types "abc".

🧪 3 Edge Cases to Try

🔴 Scenario 1: Negative Number

Type: -5
Enter your age: -5
❌ Error: '-5' is not a valid whole number.

Lesson: Gate 1 fires, not Gate 2. The - sign isn't a digit, so .isdigit() returns False immediately. Strict type-checking catches negatives as a free side effect.

🟠 Scenario 2: Upper-Limit Violation

Type: 99999
Enter your age: 99999
❌ Error: 99999 is not a realistic human age.
Please enter a number between 0 and 120.

Lesson: 99999 clears Gate 1 (it's digits) and Gate 2 (it's not negative) — but Gate 3 catches it. This is the entire point of checking both bounds.

🟡 Scenario 3: Text and Decimals

Type: twenty five, then 25.5
Enter your age: twenty five
❌ Error: 'twenty five' is not a valid whole number.

Lesson: Gate 1 rejects both before any numeric check runs. Type validation must come first.

⚠️ Three Mistakes to Avoid

Mistake 1: Range before type. if age < 0 before .isdigit() crashes on text input. Type first, always.

Mistake 2: Only checking the lower bound. Positive ≠ realistic. Define and check both MIN and MAX.

Mistake 3: Not exiting after a failed check.

# ❌ BAD — program keeps running with bad data
if age < 0:
    print("Error: negative age")

Always follow a failed check with exit(). Fail fast, fail loud, fail clearly.

✅ The Golden Rules of Validation

A validation gate is cheap insurance against expensive bugs.

Type check first — is this the right kind of data?
Lower bound second — is it above the minimum?
Upper bound third — is it below the maximum?

Positive doesn't mean realistic. Now go add a validation gate to your next script. 🐍

Mistake 2: Only checking the lower bound. Positive ≠ realistic. Define and check both MIN and MAX.

Mistake 3: Not exiting after a failed check.

python# ❌ BAD — program keeps running with bad data
if age < 0:
print("Error: negative age")

Always follow a failed check with exit(). Fail fast, fail loud, fail clearly.

✅ The Golden Rules of Validation

A validation gate is cheap insurance against expensive bugs.

Type check first — is this the right kind of data?
Lower bound second — is it above the minimum?
Upper bound third — is it below the maximum?

Positive doesn't mean realistic. Now go add a validation gate to your next script. 🐍

DEV Community: Python Dev

Stop Trusting User Input: How to Build a Python 'Validation Gate'

Stop Trusting User Input: How to Build a Python 'Validation Gate'

Positive doesn't mean realistic. Now go add a validation gate to your next script. 🐍