PHP - Regexp Or Filters For Php Form Validation

Hi there,
I have been creating a website which shows products of the companys (www.theadventurestartshere.org) and I have been trying to make some filters for the products using URL Parameters and recordsheet filters...

Can someone advise me on the easiest way to do this? As I have created a method to do it with, (check website) but it has to be entered manually and I was hoping there is an easier way?

Please Note I like to use drop down boxes for the filters but if there is a way to do the checkbox style you see on say Amazon then that would be brilliant...

I use Dreamweaver CS5, and the newest versions of PHP and MySql

Many Thanks,
Paul

Basically I have a property page where I want users to be able to click 'detached' and then only detached properties will appear, if the user click 'semi-detached' then only semi-detched properties will appear. but these properties that I want to appear are just images, then a link to the actually property page with all the details.

You can view the page here to get a better understanding: http://www.mumtazproperties.hostei.com/forsale.html

At the moment all of the properties appear on the page. (and when you select the filters it actually does what I want it too, but through HTML) But I want the information to come from a database and then use PHP code to execute it all.

Help is hugely appreciated, thanks.

Hello everyone,

I have website that uses the php(mail) function to notify users when something happens on their account.  The site was created for a school district so all the users are district employees where their incoming email is subject to pretty strict spam filtering.  I am using headers to indicate to the recipient that the email is coming from support@mysite.com, but I guess the mail servers see past this and recognize that it's coming from a php(mail) function.  Because of this, all of the emails being sent are being blocked by the filter.  I've tried adding all emails coming from an address that ends with "@mysite.com" but this doesn't work.  This is what the addresses look like that the spam filter is actually seeing:
 
elmas156@p3nlhftpg049.shr.prod.phx3.secureserver.net

And I can't just add a single address to the white list because each time an email is sent, the letters and numbers after "@" and before "secureserver.net" are different.  Here's another address that shows up:

elmas156@p3nlhg331.shr.prod.phx3.secureserver.net

here is the code that I'm using to send the emails:
Code: [Select]
<?php

$sendto = "$email";
$emailsubject = "Testing Message Report For $cdate.";


$emailmessage = "This is a test email.";

// To send HTML mail, the Content-type header must be set
$headers  = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";

// Additional headers
$headers .= 'From: MySite.com Report <support@mysite.com>' . "\r\n";

// Mail it
mail($sendto, $emailsubject, $emailmessage, $headers);
?>

Does anyone have any suggestions on what to do to make every email sent to be recognized by the spam filter as coming from the same email instead of a bunch of random ones?  I hope this is making sense to someone because it was very difficult for me to explain in writing.  Thanks in advance for any help or suggestions.

Hi all,  I have been reading in almost everywhere that we should not use our own custom login and password validations ( like regex etc.) but instead use the filter_var and filter_input built in functions provided by PHP 5 and above. However even after searching for more than an hour for with different search strings, I have not found even a single example that shows how we may validate for a username/login and password in a login form. Can someone be kind enough to provide a strong secure validations for username and login. Additionally I would also like to clarify if the username and login fields in a Login form be manipulated in any manner to pose a security threat? I mean can a hacker craft a username/login or password in such a manner as to pose an injection or any other threat? Thanks all.

I am having a lot of trouble with this code, and I have no clue how to fix it.  Right now, I have a GUI for a fictitious car dealership that has 5 populated drop down menus called Make, Model, Year, Color, and Mileage.  What I want the code to do is read the selections made by the user with the drop down menus once the user hits the submit button and then filter the tables that I have in a mysql database to meets the choice requirements of the user.

The code will bring up the GUI, but once I hit the submit button, I get the following errors

Please if anyone can help me that would be fantastic.  I really have no clue

Hi,

I am trying to setup a PHP script that will validate an html form. The form and the PHP script are separate from each other. The code that I have was modified from a tutorial on YouTube. The example used there works but as I have began to tailor it to my purpose, it is now broke. I just added one line for validation to simplify troubleshooting. If I find an empty field on the form, I would like to display the error message on the form itself rather than start a new html page with the PHP script. I am not sure if that is possible.

Here is my form:
http://www.tallfirshoa.com/adform.htm

YouTube videos that I was working from. The video's example has the form and PHP combined as one. In my case, I need the form and PHP separate.
http://www.youtube.com/watch?v=yuLpSospbBk&feature=search
http://www.youtube.com/watch?v=LF5zTWthpn0&feature=search

The code works fine if I leave out the validation. As soon as I add if(!$fname), the script becomes broken. I'm guessing that it has something to do with $errorstring and how it works. I am new to PHP and have tried as many things as I can think of but I can't make any forward progress.

Thanks for your help!

Rob

Code: [Select]
<html>

<h1>Tall Firs Ad Submission</h1>

<?php
if ($_POST['submit'])
{
//Get form data
$fname = $_POST['fname'];
$lname = $_POST['lname'];
$email = $_POST['email'];
$displayemail = $_POST['displayemail'];
$phone = $_POST['phone'];
$category = $_POST['category'];
$description = $_POST['description'];

//Declare variables
$to = "email@gmail.com";
$subject = "Request";
$headers = "From: $email \r\n
            Reply-To: $email";
}
//Setup form validation

$errorstring = ""  //default value of error string

//Begin validation
if (!$fname)
    $errorstring = $errorstring."First Name<br>";


?>


</html>

I want in my form to validate on the fly(when the user enters the user name) to validate if the user name exists or not. How am i supposed to check if the field name is the same or not with a name in the database.Should i use ajax or javascript? is there any simple example on how to do that.

Hi,

I currently have the following code in my form processing script:

Code: [Select]
    $string_exp = "/^[A-Za-z .'-]+$/";
$error_missing = 'This field is required';
 
    if(!preg_match($string_exp,$Name)) {
    $errors[] = $error_missing;
  }
   
  if(!preg_match($string_exp_number,$Phone)) {
    $errors[] = $error_missing;
  }
   
    if(is_array($errors))
{
echo 'Your message could not be sent due to the following errors:';
while (list($key,$value) = each($errors))
{

echo '<span class="error">'.$value.'</span><br />';
}
If the user enters no data into the required fields, the script prevents the form from being submitted and displays an error.

At present the errors for all the required fields are displayed in a long list at the top of my HTML form e.g.

This field is required
This field is required

What I want to do, is place the error message under each required field e.g. this http://coreyworrell.com/assets/uploads/images/ajax_contact_form.png instead of this http://cdn1.1stwebdesigner.com/wp-content/uploads/2010/02/validation-ajax-css-form.jpg

What do I need to do?

My form looks similar to this at the moment:

Code: [Select]
<div id="log">
<div id="log_res">
</div>
</div>
<form id="contact" name="contact" method="post" action="process.php">
  <label>Name</label>
    <input type="text" name="Name" id="Name" tabindex="1" />
 
  <label>Email</label>
    <input type="text" name="Phone" id="Phone" tabindex="2" />
</form>
The error messages are placed in the <div> section at the top of the form (using ajax)

Hi all!

Im trying to modify a script so that when a user submits data on a form if there are any errors it flags all errors and not just the first one the script comes to and 'dies'.

Heres the form code

<?php
session_start();
?>
<!--//-----------------------------------------------------------------------------------------------+             |
//  Sample AJAX web form By: Codex-m                                                                               |
// http://www.php-developer.org                                                                                   |
//  You are free to use and improve this script provided you link to author web site: http://www.php-developer.org |
//-------------------------------------------------------------------------------------------------------------->
<html>
<head>
<title>Sample AJAX Web Form</title>
<script type="text/javascript" src="prototype.js"></script>
<script type="text/javascript">
function sendRequest() {
new Ajax.Request("ajaxvalidate.php",
{
method: 'post',
parameters: 'name='+$F('name')+'&phonenumber='+$F('phonenumber')+'&age='+$F('age')+'&captcha='+$F('captcha'),
onComplete: showResponse
});
}
function showResponse(req){
$('show').innerHTML= req.responseText;
}
</script>
<style type="text/css">
P.yellow {background-color: #ffff00;}
</style>
</head>
<body>
<h3>This is a sample PHP web form with AJAX validation</h3>
Please complete the form below and then press "Submit button".<br />
<br /><br />
<form action="/ajaxwebform/ajaxvalidate.php" method="post" onsubmit="return false;">
Enter your Full Name, First name and Last name ONLY (Example: John Doe)<br />
<input style="background-color: #FFFFC0" type="text" name="name" id="name" size="50">
<br /><br />
Enter your Phone number (numbers only, no dashes and spaces)<br />
<input style="background-color: #FFFFC0" type="text" name="phonenumber" id="phonenumber" size="35">
<br /><br />
Enter your Age (Numbers only)<br />
<input style="background-color: #FFFFC0" type="text" name="age" id="age" size="50">
<br /><br />
<img src="/ajaxwebform/captcha.php" />
<br />
Enter the Captcha as shown above:
<br /> <br />
<input style="background-color: #FFFFC0" type="text" name="captcha" id="captcha" size="10">
<br /> <br />
<input type="submit" value="Submit" onClick="sendRequest()">
</form>
<br />
This form will validate your data entry using AJAX. If you are correct with your data entry, the entire information entered will be shown in this page without reloading.
<br />
<br /><br />
<p class="yellow" id="show"></p>
</body>
</html>


Heres the php validating code

<?php
session_start();
?>
<!--//-----------------------------------------------------------------------------------------------+             |
//  Sample AJAX web form By: Codex-m                                                                               |
// http://www.php-developer.org                                                                                   |
//  You are free to use and improve this script provided you link to author web site: http://www.php-developer.org |
//-------------------------------------------------------------------------------------------------------------->
<?php
//start session to recover captcha answers
//connect to database
$username = "root";
$password = "";
$hostname = "localhost";
$database = "newdb";
$dbhandle = mysql_connect($hostname, $username, $password)
 or die("Unable to connect to MySQL");
$selected = mysql_select_db($database,$dbhandle)
or die("Could not select $database");
//extract form inputs
$name =$_POST['name'];
$phonenumber =$_POST['phonenumber'];
$age =$_POST['age'];
$usercaptchaanswer =$_POST['captcha'];
$correctcaptcha = $_SESSION['answer'];
//sanitize early for any possible MySQL entry
$name = mysql_real_escape_string(stripslashes(trim($name)));
$phonenumber = mysql_real_escape_string(stripslashes(trim($phonenumber)));
$age = mysql_real_escape_string(stripslashes(trim($age)));
$usercaptchaanswer = mysql_real_escape_string(stripslashes(trim($usercaptchaanswer)));
$correctcaptcha = mysql_real_escape_string(stripslashes(trim($correctcaptcha)));
Validate captcha entry
if ($correctcaptcha != $usercaptchaanswer) {
echo 'ERROR: You have entered wrong captcha code';
die ();
}
//Step 2 of data validation: check for blank entries
if (empty($name)) {
//name field is blank
echo 'ERROR: The name field is empty.';
die ();
}
if (empty($phonenumber)) {
//phone field is blank
echo 'ERROR: The phone field is empty.';
die ();
}
if (empty($age)) {
//age field is blank
echo 'ERROR: The age field is empty.';
die ();
}
if (empty($usercaptchaanswer)) {
captcha field is blank
echo 'ERROR: The captcha field is empty.';
die ();
}
//Step 3 of data validation: Ensuring correct format
//Step 3.1 validate full name, presence of first name and last name
$mystring = $name;
$findme   = ' ';
$pos = strpos($mystring, $findme);
$actualposition =$pos + 1;
//count strings
$count =strlen($mystring);
//count the number of characters for the first name
$countfirstname = $actualposition - 1;
//count the number of characters for the last name
$countlastname = $count - $actualposition;
//detect if full name has middle name
$posmid= strpos($mystring,$findme,$actualposition) + 1;
$middleadjust = $posmid - $actualposition;
$purealpha = str_replace(" ", "x", $mystring);
if ($actualposition==1) {
echo 'ERROR: You either forgot your first name or your last name.';
die ();
}
if ($countfirstname <2) {
echo 'ERROR: You are using an invalid first name, it should contain more than one character.';
die ();
}
if ($countlastname <2) {
echo 'ERROR: You are using an invalid last name, it should contain more than one character.';
die ();
}
if ($middleadjust >= 2) {
echo 'ERROR: You should not be using a middle name, please use only first name and last name.';
die ();
}
if (!(ctype_alpha($purealpha))) {
echo 'ERROR: Full name can only consist of alphabetic characters.';
die ();
}
//Step 3.2 Validate phone number
if (!(ctype_digit($phonenumber))) {
echo 'ERROR: A phone number should consist of numerical digits only and no spaces between numbers';
die ();
}
//Step 3.3 Validate age
if (!(ctype_digit($age))) {
echo 'ERROR: Your age should consist of numerical digits only and no spaces between numbers';
die ();
}
//Step 4. If all data entry is correct, show results in another page, assigned all values to sessions
echo 'Thank you for the correct data entry, below are the information entered:';
echo '<br />';
echo 'Your full name is: '.$name;
echo '<br />';
echo 'Your phone number is: '.$phonenumber;
echo '<br />';
echo 'Your age is: '.$age;
echo '<br />';
echo '<a href="/ajaxwebform/ajaxwebformtest.php">Click here to enter another data.</a>';
$_SESSION = array ();
session_destroy ();
mysql_close($dbhandle);
?>

I'm trying to get validation messages to display on the same page as my login form without any PHP within my login page, is that possible? 

Hi Guys, Im a bit of a novice to Php but somehow I've managed to get myself a form together for customers to book online. My problem is that i need to validate all the input's of my form. To give you some idea of what i mean. The $name should only contain letters and be no longer than 25 characters. The $address should only contain letters & numbers and be no longer than 40 characters. The $district and $town should only contain letters and be no longer than 30 characters each. The $postcode should only contain letters and Numbers and be no longer than 8 characters, it should start and end with a letter if thats possible. The $phone should only contain numbers and be no longer than 11 characters. And the email, well im lost with how that should be set out because of all the different options you can have.
Anyway, this is my code:

<?php $to = 'myemail.com' ;
                   $from = $_REQUEST['Email'] ;
                   $name = $_REQUEST['Name'] ;
                   $phone = $_REQUEST['Phone'];
                   $headers = "From: $from";
                   $subject = "Booking Request";
                   $fields = array();
                   $fields{"Name"} = "Name";
                   $fields{"Address"} = "Address";
                   $fields{"District"} = "District";
                   $fields{"Town"} = "Town";
                   $fields{"Postcode"} = "Postcode";
                   $fields{"Phone"} = "Phone";
                   $fields{"Email"} = "Email";
                   $fields{"list"} = "Mailing List";
                   $fields{"Message"} = "Message";
                   $body = "We have received the following information:\n\n"; foreach($fields as $a => $b)
                   {         $body .= sprintf("%20s: %s\n",$b,$_REQUEST[$a]); }



                        if ($name == '') {print "You have not entered a name, please go back and try again";}
                        elseif ($phone == '') {print "You have not entered a Phone number, please go back and try again";}


                        else { $send = mail($to, $subject, $body, $headers);

                        if($send) {header( "Location: http://www.(not applicable).com" );}
                        else {print "We encountered an error sending your mail, please notify webmaster@YourCompany.com";  } } ?>

Any help is greatly apprecaited.

Kind regards

Rich

Hello!

I was wondering if I could  have some help with some form validation.  In my insert script, I have:

<label for="text"><br />
          <br />
         Question Text:</label>
        <textarea name="text" id="text" cols="45" rows="5">
     </textarea>

Then in a separate script, I input the data into a database:

$data = array('text' => $_POST['text']

  'question_type' => $_POST['question_type'],

  'solution' => $_POST['solution'],

  'author_id' => $_POST['author'],

  'public_access' => $_POST['public_access']);

In this database script, I'd like to check if the text field was "posted":  if it's empty I'd then like to print "Required field" on my original script.

First, if there's nothing to be posted from the text field, I want to stop the database script and return before entering a blank field into my database.  Then, it would be great if I could print a "Required field" message in the original script. Thanks in advance for your help!

Okay with some help I was able to create a working guestbook!

How ever I need a bit of help with validation.

I would like to have it so that when someone doesn't fill out a required field a message is displayed next to the improperly filled out field. How would I go about adding this to my form or process code?

So for example:

if someone doesn't fill out the "name" field and clicks "sign" it will not submit but instead will display a message such as "Please fill out your name" next to the form field.

Also will I am here I wanted to ask. How can I make it so that when a non-required field is left empty and posted it will fill that section out with default text?

So for example:

if someone decides they do not wish to fill out the "Favorite part of my site" or "Favorite Pat Song" field than submits the form than it will fill that section with a default message

like this:

Posted by: someone  (someone@domain.com)
2011/04/09
Favorite Pat Song: --
Favorite Part of the Site: --
comments here

And I promise this is my very last question. I would like for email to be required but would like to allow the user to decide whether it is kept private or not. How do I make it so that when someone doesn't type their email in it does like what I stated above, it will show a message next to the field telling them to fill out a valid email but also if they select to keep their email private it will than post a default value in place of where the email would have been.

for example:

if the email field is left empty or is an invalid email it will display a message such as "Please fill out a valid email address" next to the form field.

and than if they do so but also check the "private" box it will post their message in the guestbook with a default value in place of the email like this:

Posted by: someone  (Private)
2011/04/09
Favorite Pat Song: --
Favorite Part of the Site: --
comments here

so that was a lot

here's my guestbook code:

Code: [Select]
<?php
<span style='color:#ff0000'><b>*</b></span><span> = required field</span><br /><br />

<form name='guestbook' action='process.php' method='post'> 
<table width='550' border='0' cellspacing='2' cellpadding='0'> 
<tr valign='top'> 
<td width='550px' class='what'><span style='color:#ff0000'><b>*</b></span> Your Name:</td> 
<td width='550px'><input name='name' type='text' id='name' size='32' /></td> 
</tr>
<tr valign='top'> 
<td width='550px' class='what'><span style='color:#ff0000'><b>*</b></span> Email Address:</td> 
<td width='550px'><input name='email' type='text' id='email' size='32' /><input type='checkbox' name='private' value='Private' />Private</td> 
</tr>
<tr valign='top'> 
<td width='550px' class='what'>Your Favorite Pat Song?:</td> 
<td width='550px'><input name='song' type='text' id='song' size='32' /></td> 
</tr> 
<tr valign='top'> 
<td width='550px' class='what'>Your Favorite Part of my Site?:</td> 
<td width='550px'><input name='part' type='text' id='part' size='32' /></td> 
</tr> 
<tr valign='top'> 
<td width='550px' class='what'><span style='color:#ff0000'><b>*</b></span> Comment:</td>
<td width='550px'><textarea name='comments' cols='28' rows='6' id='comments' class='bodytext'></textarea></td> 
</tr> 
<tr> 
<td class='bodytext'>&nbsp;</td> 
<td align='left' valign='top'><input name='submit' type='submit' class='btn' value='Sign' /></td> 
</tr> 
</table> 
</form>";

}else{

$connect = mysql_connect("127.0.0.1","patben_admin","pepsi_1990") or die('Error connecting');
$db = mysql_select_db("patben_db")  or die('Error selecting db');

$query = mysql_query("SELECT * FROM guestbook order by id desc");
$num_rows = mysql_num_rows($query);

if($num_rows > 0) {

//display entries
while($row = mysql_fetch_array($query)){

echo '
<table>
<tr>
    <td>
    <b>Posted by:</b> '.$row['name'].' ('.$row['email'].')<br />
    <b>'.$row['date'].'</b><br />
    <b>Favorite Pat Song:</b> '.$row['song'].'<br />
    <b>Favorite Part of the Site:</b> '.$row['part'].'

    </td>
</tr>
<tr>
    <td>
    '.nl2br($row['comments']).'
<hr />
    </td>
</tr>
</table>';
}

}else{

echo "No Entries... <a href='guestbook.php?page=sign'>Be the first!</a>";

}  

}
?>

and here's the code that processes the form (separate file):

Code: [Select]
<?php

if($_POST['submit']) {

$connect = mysql_connect('127.0.0.1','patben_admin','pepsi_1990') or die('Error connecting');
$db = mysql_select_db('patben_db')  or die('Error selecting db');

$date = date("Y-m-d");
$name = strip_tags($_POST['name']);
$email = strip_tags($_POST['email']);
$song = strip_tags($_POST['song']);
$part = strip_tags($_POST['part']);
$comments = nl2br($_POST['comments']);


$query = mysql_query("insert into guestbook values('','$date','$name','$email','$song','$part','$comments')");

header("location: guestbook.php");

}else{

header("location: guestbook.php");

}

?>
I have not added a section in my database for the check box so I am also unsure how to do that (if I need to). Any help would be greatly appreciated!

Thank you

I am asking for some simple help, please. :-)

I have a form that I would like to validate very specific information on - without having it validate in the php and loose what the client just put into the site.

I have found an example in this "validation" process.  However, when I open this up in Dreamweaver CS4, I have an error on line 67 as a syntex error. I am unable to see where this would be.

All I need is a verification on the name, the phone number, and the email address.

Here is what I have so far....

**This is contact form**

Code: [Select]
<script language="JavaScript">
 
  function checkForm() {
   var cname, cemail, cphone
   with(window.document.Contact1) {
    cname    = name;
    cemail   = EmailFrom;
    cphone   = phone;
   }

   if(trim(cname.value) == '') {
    alert('Please enter your name');
    cname.focus();
    return false;
   }

   else if(trim(cemail.value) == '') {
    alert('Please enter your email');
    cemail.focus();
    return false;
   }

   else if(!isEmail(trim(cemail.value))) {
    alert('Email address is not valid');
    cemail.focus();
    return false;
   }

   else if(trim(cphone.value) == '') {
      alert('Please enter message subject');
      csubject.focus();
      return false;
   }
   
  }
  else {
   cname.value    = trim(cname.value);
   cemail.value   = trim(cemail.value);
   cphone.value   = trim(cphone.value);
   return true;
  }
 }

 function trim(str) {
  return str.replace(/^\s+|\s+$/g,'');
 }
 
 function isEmail(str) {
  var regex = /^[-_.a-z0-9]+@(([-_a-z0-9]+\.)+(ad|ae|aero|af|ag|
   ai|al|am|an|ao|aq|ar|arpa|as|at|au|aw|az|ba|bb|bd|be|bf|bg|
   bh|bi|biz|bj|bm|bn|bo|br|bs|bt|bv|bw|by|bz|ca|cc|cd|cf|cg|
   ch|ci|ck|cl|cm|cn|co|com|coop|cr|cs|cu|cv|cx|cy|cz|de|dj|dk|
   dm|do|dz|ec|edu|ee|eg|eh|er|es|et|eu|fi|fj|fk|fm|fo|fr|ga|gb|
   gd|ge|gf|gh|gi|gl|gm|gn|gov|gp|gq|gr|gs|gt|gu|gw|gy|hk|hm|hn|
   hr|ht|hu|id|ie|il|in|info|int|io|iq|ir|is|it|jm|jo|jp|ke|kg|
   kh|ki|km|kn|kp|kr|kw|ky|kz|la|lb|lc|li|lk|lr|ls|lt|lu|lv|ly|
   ma|mc|md|mg|mh|mil|mk|ml|mm|mn|mo|mp|mq|mr|ms|mt|mu|museum|
   mv|mw|mx|my|mz|na|name|nc|ne|net|nf|ng|ni|nl|no|np|nr|nt|nu|
   nz|om|org|pa|pe|pf|pg|ph|pk|pl|pm|pn|pr|pro|ps|pt|pw|py|qa|
   re|ro|ru|rw|sa|sb|sc|sd|se|sg|sh|si|sj|sk|sl|sm|sn|so|sr|st|
   su|sv|sy|sz|tc|td|tf|tg|th|tj|tk|tm|tn|to|tp|tr|tt|tv|tw|tz|
   ua|ug|uk|um|us|uy|uz|va|vc|ve|vg|vi|vn|vu|wf|ws|ye|yt|yu|za|
   zm|zw)|(([0-9][0-9]?|[0-1][0-9][0-9]|[2][0-4][0-9]|[2][5][0-5])\.){3}([0-9][0-9]?|[0-1][0-9][0-9]|[2][0-4][0-9]|[2][5][0-5]))$/i;
   
   return regex.test(str);
  }
   
 </script> 


Below is the php file that I am using....

Code: [Select]

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

 <head>
   
  <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
 
  <title>Emailing Form Data</title>
 
 </head>
 
 <body>
 
 <?php 
   
  ini_set ("display_errors", "1");
  error_reporting(E_ALL);

  //declaration of variables

  $EmailFrom = trim(stripslashes($_POST['EmailFrom'])); 
  $EmailTo =   "ornclo@aol.com";
  $Subject =   "Women United Contact";
  
  $Name =     trim(stripslashes($_POST['name']));
  $Address =  trim(stripslashes($_POST['address']));
  $City =     trim(stripslashes($_POST['city']));
  $State =    trim(stripslashes($_POST['state']));
  $Phone1 =   trim(stripslashes($_POST['phone1']));
  $Phone2 =   trim(stripslashes($_POST['phone2']));
  $Phone3 =   trim(stripslashes($_POST['phone3']));
  $email  =   trim(stripslashes($_POST['email']));
    
  foreach ($_POST['visit'] as $value) {
   $Church =   trim(stripslashes($value));
  }
  
  foreach ($_POST['hear'] as $hear) {
   $About =    trim(stripslashes($hear));
  }
  
  foreach ($_POST['help'] as $help) { 
   $Ask =      trim(stripslashes($help));
  }
  
  $Comments = trim(stripslashes($_POST['comments'])); 


  // validation

  $validationOK=true;

   if (($EmailFrom)=="") $validationOK=false;
   if (($Name)=="")      $validationOK=false;
   if (($Phone1)=="")    $validationOK=false;
   if (($Phone2)=="")    $validationOK=false;
   if (($Phone3)=="")    $validationOK=false;
   if (($email)=="")     $validationOK=false;
      
   if (($Comments)=="")  $validationOK=false;
   
   if (!$validationOK) {
    print "<meta http-equiv=\"refresh\" content=\"0;URL=WUerror.html\">";
    exit;
   }


   // prepare email body text

   $Body = "\n";
   $Body .= "Name: ";
   $Body .= $Name;
   $Body .= "\n";
   $Body .= "Address: ";
   $Body .= $Address;
   $Body .= "\n";
   $Body .= "City: ";
   $Body .= $City;
   $Body .= "\n";
   $Body .= "State: ";
   $Body .= $State;
   $Body .= "\n";
   $Body .= "Phone: ";
   $Body .= $Phone1;
   $Body .= "-";
   $Body .= $Phone2;
   $Body .= "-";
   $Body .= $Phone3;
   $Body .= "\n";
   $Body .= "Attended Church of God?: ";
   $Body .= $Church;
   $Body .= "\n";
   $Body .= "How did you hear about us?: ";
   $Body .= $About;
   $Body .= "\n";
   $Body .= "What can we do to help you?: ";
   $Body .= $Ask;
   $Body .= "\n";
   $Body .= "Comments: ";
   $Body .= $Comments;
   $Body .= "\n";


   // send email 

   $success = mail($EmailTo, $Subject, $Body, "From: <$EmailFrom>");


   // redirect to success page 

   if ($success){
    print "<meta http-equiv=\"refresh\" content=\"0;URL=WUok.html\">"; 
   }
   else{
    print "<meta http-equiv=\"refresh\" content=\"0;URL=WUerror.html\">";
   }

  ?>

 </body>

</html>



Unless there is a way to change this line:

print "<meta http-equiv=\"refresh\" content=\"0;URL=WUerror.html\">";

to have it keep in the same window - or even possibly open a NEW window with the "error.html" - that would be fine as well.


Again - when I open up Contact1.html in DW CS4, I get a syntext error on line 67.
When I use just straight form, it opens to new window with php - > error.html, which in turns looses everything the client just typed.

Any help is greatly appreciated and thank you in advance.

Blessings!

If asked, I can attach the files if needed as well, but the code is pretty self-explain.

Hello All,

I am a newbie to PHP and I'm working on a marathon sign up form for my final project and could really use the help. The trouble i'm having is sending and retrieving database from the database. Below is the code i am using. Can someone please review and tell me where I went wrong.

 

(This is the code that is sitting at the top of my document)

<?php
session_start();
require_once('inc/dbuser.php');
function test_input($data) {
  $data = trim($data);
  $data = stripslashes($data);
  $data = htmlspecialchars($data);
  return $data;
}
if (isset($_POST['submit_registration'])) {
$username = test_input($_POST['username']);
$password = test_input($_POST['password']);
$cpassword = test_input($_POST['cpassword']);
$fname = test_input($_POST['fname']);
$lname = test_input($_POST['lname']);
$email = test_input($_POST['email']);
$phone = test_input($_POST['phone']);
$address = test_input($_POST['address']);
$city = test_input($_POST['city']);
$state = test_input($_POST['state']);
$zip = test_input($_POST['zip']);
$distance = test_input($_POST['distance']);
if (!empty($username) || !empty($password) || !empty($fname) || !empty($lname)|| !empty($email) || !empty($phone)|| !empty($address)|| !empty($city)|| !empty($state)|| !empty($zip)|| !empty($distance)) {

}
else{
    
     $sql = "SELECT email From runners Where email = ? Limit 1";
     //Prepare statement
     $stmt = mysqli_stmt_init($conn);
     if(!mysqli_stmt_prepare($stmt, $sql)){
       header("location: ../signup?error=sqlerror");
      exit();  
     }
     else{
     mysqli_stmt_bind_param($stmt,'s', $email);
     mysqli_stmt_execute($stmt);
     $stmt->bind_result($email);
     $stmt->store_result($stmt);
     $resultCheck = mysqli_stmt_num_rows($stmt);
     if ($resultsCheck > 0) {
      header ("Location: ../signup.php?error=usertaken&email=".$email);
      exit();
     }
     else {
         $sql = "INSERT Into runners (username, password, fname, lname, email, phone, address, city, state, zip, distance) values(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)";
         $stmt = mysqli_stmt_init($conn);
         if(!mysqli_stmt_prepare($stmt, $sql)) {
             header ("Location: ../signup.php?error=sqlerror");
      exit();
         }
         else{
            $hashedPwd = password_hash($password, PASSWORD_DEFAULT);
         mysqli_stmt_bind_param($stmt,"ssssssssssss", $username, $hashedPwd, $fname, $lname, $email, $phone, $address,$city, $state, $zip, $distance);
         mysqli_stmt_execute($stmt);
         header ("Location: ../signup.php?signup=success");
      exit();
         
 }
}
     }    
}
 mysqli_stmt_close($stmt);
     mysqli_stmt_close($conn);
}  
   
?>

 

(This is my form [submit_registration] )

 

<div class="contact">
                <?php
                if(isset($_GET['error'])) {
                    if($_GET['error']=="emptyfields"){
                       echo '<p>Fill in all fields!</p>';
                    }
                    elseif($_GET['error']== "invalidemail") {
                       echo '<p>Provide a valid email!</p>';  
                    }
                    elseif($_GET['error']== "usertaken") {
                       echo '<p>Username is already taken!</p>';
                    }
                     elseif($_GET['error']== "passwordCheck") {
                       echo '<p>Your passwords do not match!</p>';
                     }
                      elseif($_GET['signup']== "success") {
                       echo '<p>Signup Successful!</p>';
                      }
                }
                ?>
            <form name="form1" action="signup.php" method="post">
                            <p><label>Create a username:<br></label>
                                    <input type="text" name="username" placeholder="username" autofocus required><br>
                                    <span class="err" id="usrErr"></span>
                                </p>
                                <p><label>Create a Password:<br></label>
                                    <input type="password" name="password" placeholder="password" autofocus required><br>
                                    <span class="err" id="pwdErr"></span>
                                </p>
                                <p><label>Confirm Password:<br></label>
                                    <input type="password" name="cpassword" placeholder="confirm password" autofocus required><br>
                                    <span class="err" id="cpwdErr"></span>
                                </p>
                                <p><label>First Name:<br></label>
                                    <input type="text" name="fname" placeholder="first name" autofocus required><br>
                                    <span class="err" id="fnErr"></span>
                                </p>
                                <p><label>Last Name:<br></label>
                                    <input type="text" name="lname" placeholder="last name" autofocus required><br>
                                    <span class="err" id="lnErr"></span>
                                </p>
                                <p><label>Email:<br></label>
                                    <input type="text" name="email" placeholder="you@youremail.com" required><br>
                                    <span class="err" id="emErr"></span>
                                </p>
                                <p><label>Phone: <br></label>
                                    <input type="tel" name="phone1" placeholder="XXX-XXX-XXXX" maxlength="13" required>
                                    <span class="err" id="phErr"></span>
                                </p>
                                <p><label>Address: <br></label>
                                    <input type="text" name="address" placeholder="415 W. 15th Street" required>
                                    <span class="err" id="addErr"></span>
                                </p>
                                <p><label>City: <br></label>
                                    <input type="text" name="city" placeholder="Chicago" required>
                                    <span class="err" id="cityErr"></span>
                                </p>
                                <p><label>State:<br></label>
                                    <input type="text" name="state" placeholder="IL" maxlength="2" required>
                                    <span class="err" id="stateErr"></span>
                                </p>
                                <p><label>Zip: <br></label>
                                    <input type="text" name="zip" placeholder="60621" maxlength="5" required>
                                    <span class="err" id="zipErr"></span>
                                </p>
                                <p>I am interested in:<br>
                                <span id="inErr" class="err"></span>
                                <select id="interest" class="adj">
                                    <option disabled>--5k--</option>
                                    <option> 1 Mile Run</option>
                                    <option> 5K Run</option>
                                    <option>10K run</option>
                                </select>
                                </p>
                                  <button type="submit" name="submit_registration"onclick="validForm()">Signup</button>
 
                                  
                                </p>
                            </form>