preg_match (Allow only alphabets, digits, -, +,_)

if(preg_match("#[^a-zA-Z0-9 _-\s+]#", $str)):

echo "String contains invalid character";
exit;

endif;