Credit card numbers ditto.
Reservation number. If the first character is a space (as it often is after a copy/paste from e-mail) then ignore it and take the rest of the characters and see if they match the format you defined.
The date is a little trickier but not much.
If the people you hired to program the site can't manage these simple basics, there's really not much hope that the site is secure.