Validate CMND/CCCD as 9-12 digits, both client- and server-side

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017KPzWwuTEeX2vXGXvyGn4q

app/controllers/admin.server.controller.js

@@ -25,6 +25,10 @@ exports.createTransaction = function (req, res) {
     return res.status(400).json({ code: "99", data: "MISSING_FIELDS" });
   }
 
+  if (!/^[0-9]{9,12}$/.test(String(customerIdCard).trim())) {
+    return res.status(400).json({ code: "99", data: "INVALID_ID_CARD" });
+  }
+
   var targetAmount = parseInt(rawAmount, 10);
   if (
     !isFinite(targetAmount) ||

app/views/admin/transactions-new.server.view.html

@@ -398,10 +398,10 @@
         </div>
         <div class="field" data-field="customerIdCard">
           <label for="customerIdCard">Số CMND/CCCD</label>
-          <input type="text" id="customerIdCard" name="customerIdCard" placeholder="012345678901" autocomplete="off" inputmode="numeric" required aria-describedby="customerIdCard-error">
+          <input type="text" id="customerIdCard" name="customerIdCard" placeholder="012345678901" autocomplete="off" inputmode="numeric" maxlength="12" required aria-describedby="customerIdCard-error">
           <p class="field-error" id="customerIdCard-error" role="alert">
             <svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="8" x2="12" y2="12"/><line x1="12" y1="16" x2="12.01" y2="16"/></svg>
-            Vui lòng nhập số CMND/CCCD
+            Số CMND/CCCD phải từ 9 đến 12 chữ số
           </p>
         </div>
         <div class="field" data-field="amount">
@@ -477,12 +477,16 @@
       return /^(0|\+84)[0-9]{9}$/.test(value.replace(/[\s.-]/g, ''));
     }
 
+    function validateIdCard(value) {
+      return /^[0-9]{9,12}$/.test(value.trim());
+    }
+
     function validateForm(data) {
       var valid = true;
       if (!data.customerName.trim()) { setFieldInvalid('customerName'); valid = false; } else { setFieldValid('customerName'); }
       if (!validatePhone(data.customerPhone)) { setFieldInvalid('customerPhone'); valid = false; } else { setFieldValid('customerPhone'); }
       if (!data.customerAddress.trim()) { setFieldInvalid('customerAddress'); valid = false; } else { setFieldValid('customerAddress'); }
-      if (!data.customerIdCard.trim()) { setFieldInvalid('customerIdCard'); valid = false; } else { setFieldValid('customerIdCard'); }
+      if (!validateIdCard(data.customerIdCard)) { setFieldInvalid('customerIdCard'); valid = false; } else { setFieldValid('customerIdCard'); }
       var amountNum = parseInt(data.amount, 10);
       if (!isFinite(amountNum) || amountNum < 10000 || amountNum > 20000000) { setFieldInvalid('amount'); valid = false; } else { setFieldValid('amount'); }
       return valid;