Validating Bangladeshi Mobile Numbers in a Checkout Form

A phone number field with no validation looks harmless until a courier can’t reach the customer holding a package. On a manual order form in particular — where a staff member is transcribing a number from a phone call or a chat screenshot — a plain text field lets typos, wrong lengths, and invalid prefixes through every time.

The actual pattern to validate against

Bangladeshi mobile numbers follow a specific, well-defined format: eleven digits, starting with 01, followed by a single digit from 3 to 9 identifying the operator, then eight more digits — expressed as the regular expression ^01[3-9]d{8}$. Anything outside that shape isn’t a valid Bangladeshi mobile number, full stop.

Checked twice, for two different reasons

We validate that pattern in two places, each solving a different problem:

• Client-side, instantly. As soon as a staff member finishes typing, an inline error message appears if the number doesn’t match, and it clears the moment they correct it — catching the mistake before the form is even submitted.
• Server-side, on submission. The same check runs again in the order-creation handler, rejecting the request outright if it’s bypassed — whether by disabled JavaScript or a direct request. Client-side validation is a courtesy; server-side validation is the actual guarantee.

We also set maxlength="11" and inputmode="numeric" on the field itself, so a phone keyboard shows the numeric layout by default and physically can’t accept an twelfth digit — small details that make correct input the path of least resistance rather than something the validation has to catch after the fact.

Key takeaways

• Validation that only exists in the browser isn’t validation — it’s a convenience. The server-side check is what actually protects the data.
• A validation pattern should match the real-world format it represents, not a generic “looks like a phone number” heuristic.
• Input attributes like inputmode and maxlength prevent classes of mistakes before validation logic ever has to run.

Running into a similar limitation in your own WooCommerce or WordPress admin? Let’s Talk — Artintech Solution builds exactly this kind of custom store tooling.