PHP - Combining Html Code And Php Code In Php Functions?

I'm trying to submit html/php code through an html form and then insert it into a mysql database. I've got the following code so far (without the insert into database query), however when I submit the form I get pushed through to my 403 page. If i comment out the textarea that contains the code I am trying to submit, then it goes through fine.

Any ideas?


Code: [Select]
<?
if (isset($_POST['optone'])) {$optone=$_POST['optone']; $opttwo=$_POST['opttwo'];}
if (isset($_POST['type'])) {if ($_POST['type']=='Theory') {$optone=1;} if ($_POST['type']=='Demo') {$optone=2;} $opttwo=$_POST['module'];}

?>

<h3>Module administration</h3>
<script>
function setOptions(chosen) {
var selbox = document.myform.opttwo;
 
selbox.options.length = 0;
if (chosen == " ") {
  selbox.options[selbox.options.length] = new Option('Please select an option first',' ');
  document.myform.go.disabled=true;
 
}
if (chosen == "1") {
  selbox.options[selbox.options.length] = new Option('Module 1','1');
  selbox.options[selbox.options.length] = new Option('Module 2','2');
  selbox.options[selbox.options.length] = new Option('Module 3','3');
  selbox.options[selbox.options.length] = new Option('Module 4','4');
  selbox.options[selbox.options.length] = new Option('Module 5','5');
  selbox.options[selbox.options.length] = new Option('Module 6','6');
  selbox.options[selbox.options.length] = new Option('Module 7','7');
  selbox.options[selbox.options.length] = new Option('Module 8','8');
  selbox.options[selbox.options.length] = new Option('Module 9','9');
  selbox.options[selbox.options.length] = new Option('Module 10','10');
  document.myform.go.disabled=false;
}
if (chosen == "2") {
  selbox.options[selbox.options.length] = new Option('Module 1','1');
  selbox.options[selbox.options.length] = new Option('Module 2','2');
  selbox.options[selbox.options.length] = new Option('Module 3','3');
  selbox.options[selbox.options.length] = new Option('Module 4','4');
  selbox.options[selbox.options.length] = new Option('Module 5','5');
  selbox.options[selbox.options.length] = new Option('Module 6','6');
  selbox.options[selbox.options.length] = new Option('Module 7','7');
  selbox.options[selbox.options.length] = new Option('Module 8','8');
  selbox.options[selbox.options.length] = new Option('Module 9','9');
  selbox.options[selbox.options.length] = new Option('Module 10','10');
  document.myform.go.disabled=false;
}
}
</script>
<br />
<center>
<form name="myform" method='post'>
Edit:
<select id="optone" name="optone" size="1" onchange="setOptions(document.myform.optone.options[document.myform.optone.selectedIndex].value);" >
<option value=" " >--Choose--</option>
<option value="1" >Theory</option>
<option value="2" >Demo</option>
</select>
<select name="opttwo" size="1">
<option value=" " selected="selected">Please select an option first</option>
</select>
<input type='submit' name='go' id='go' value='Go' disabled='disabled'/>
</form>
</center>
<br /><br />
<?
if (isset($opttwo)) {
if ($optone==1) {$query = "SELECT info,userscompleted,last_user,enabled FROM theorydata WHERE TheoryID=".$opttwo; $typestr='Theory'; $texthelp='Code must be entered in HTML';}
if ($optone==2) {$query = "SELECT info,userscompleted,last_user,enabled FROM demodata WHERE DemoID=".$opttwo; $typestr='Demo'; $texthelp='Code must be entered in PHP';}
$result = mysql_query($query) or die(mysql_error());
$row = mysql_fetch_array($result);
$query2="SELECT full_name FROM users WHERE id=".$row['last_user'];
$result2 = mysql_query($query2) or die(mysql_error());
$row2 = mysql_fetch_array($result2);

?>
<form method='post' >
<table>
<tr>
<td align='center'>
Type:
</td>
<td>
<input type='text' name='type' readonly='readonly' value="<? echo $typestr; ?>" />
</td>
</tr>
<tr>
<td align='center'>
Module:
</td>
<td>
<input type='text' name='module' readonly='readonly' value="<? echo $opttwo; ?>" />
</td>
</tr>
<tr>
<td align='center' >
Enabled?
</td>
<td>
<select name='enabled'>
<option value='yes' <? if ($row['enabled'] == '1') {echo "selected='selected'";}?> >Yes</option>
<option value='no' <? if ($row['enabled'] == '0') {echo "selected='selected'";}?> >No</option>
</select>
</td>

</tr>
<tr>
<td align='center'>
Code:
</td>
<td>
<center><font color='red'><? echo $texthelp; ?></font></center>
<textarea  name='info' rows=35 cols=80><? echo htmlentities($row['info']); ?></textarea>
</td>
</tr>
<tr>
<td align='center' >
Users completed:
</td>
<td>
<input type='text' name='userscompleted' value="<? echo $row['userscompleted']; ?>" size=4/>
</td>
</tr>
<tr>
<td align='center' >
Last user:
</td>
<td>
<input type='text' name='last_user' readonly='readonly' value="<? echo $row2['full_name']; ?>" />
</td>
</tr>
<tr>
<td></td>
<td align='center'>
<input type='submit' value='Edit'/>
</td>
</tr>
</table>
</form>
<?
}//close isset(opttwo)
?>

Hi, I have some code which displays my blog post in a foreach loop, and I want to add some social sharing code(FB like button, share on Twitter etc.), but the problem is the way I have my code now, creates 3 instances of the sharing buttons, but if you like one post, all three are liked and any thing you do affects all of the blog post. How can I fix this?


<?php
include ("includes/includes.php");

$blogPosts = GetBlogPosts();

foreach ($blogPosts as $post)
{
echo "<div class='post'>";
echo "<h2>" . $post->title . "</h2>";
echo "<p class='postnote'>" . $post->post . "</p";
echo "<span class='footer'>Posted By: " . $post->author . "</span>";
echo "<span class='footer'>Posted On: " . $post->datePosted . "</span>";
echo "<span class='footer'>Tags: " . $post->tags . "</span>";
echo '
<div class="addthis_toolbox addthis_default_style ">
<a class="addthis_button_facebook_like" fb:like:layout="button_count"></a>
<a class="addthis_button_tweet"></a>
<a class="addthis_counter addthis_pill_style"></a>
</div>
<script type="text/javascript">var addthis_config = {"data_track_clickback":true};</script>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=webguync"></script>';

echo "</div>";
}


?>

This doesn't work inside html.
Code: [Select]
<tr valign="top">
                <td height="22" align="right" valign="middle"><!-- <img src="images/bult-gamblingtemplatesdotnet.jpg" width="11" height="11"> --></td>
                <td height="22" valign="middle"><class="navbar3">
                <?php
include("config.php");
$result = mysql_query("SELECT name, lic_num, purpose FROM charity where sysdate() between start_date and end_date");
while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) {
print "<b>Charity: </b>".$row{'name'}."<br><b>License #: </b>".$row{'lic_num'}."<br><b>Purpose: </b>".$row{'purpose'}."<p>";
}
mysql_close($dbh);
?></td>

This is the output on the website.
Code: [Select]
Charity: ".$row{'name'}."
License #: ".$row{'lic_num'}."
Purpose: ".$row{'purpose'}."

"; } mysql_close($dbh); ?>

When I do this
Code: [Select]
<tr valign="top">
     <td height="22" align="right" valign="middle"><!-- <img src="images/bult-gamblingtemplatesdotnet.jpg" width="11" height="11"> --></td>
     <td height="22" valign="middle"><class="navbar3"><?php include("test.php"); ?></td>
</tr>

I get this
Code: [Select]



Can someone please point me in the correct direction?
Also if I run the code as a stand alone it works perfectly.

Thanks

I am sure this has been answered in the past and is a valid question, I have searched high and low for this solution on and off for a few months. Any help would be greatly appreciated...

Please note: if you respond, keep it simple-ish - I code but not advanced.

First, take a look at the HTML source on the following page... Specificity the meta description.
http://boormanarchery.com/test.php?route=common/home&information_id=5

Code: [Select]
<META NAME="Description" CONTENT="Terms &amp; Conditions - <p>

Terms &amp; Conditions</p>

">
HTML code is pulled into the description field... I want to strip every single piece of HTML.

Here is my HTML / PHP code...

Code: [Select]

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<?php
$con = mysql_connect("localhost","username","password");
mysql_select_db("MyDatabase",$con);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

// Get ID From URL
$id = (isset($_GET['information_id']) ? $_GET['information_id'] : 0);
$routeid = (isset($_GET['route']) ? $_GET['route'] : 0);

// Return Product Code and Select
$details = "SELECT * FROM information_description WHERE information_id=($id)";

$SQ_query = mysql_query($details);
$detail = mysql_fetch_array($SQ_query);

$metatitle = $detail['title'];
$longdescription = $detail['description'];

$metadescription=substr($longdescription, 0, 150);
$metakeywords=substr($longdescription, 0, 150); 

mysql_close($con);
?>

<html>
<head>
<title>Boorman Archery: <?php echo "$metatitle"; ?></title>
<META NAME="Description" CONTENT="<?php echo "$metatitle"; ?> - <?php echo html_entity_decode($metadescription, ENT_QUOTES, "ISO-8859-1"); ?>">
<META NAME="Keywords" CONTENT="<?php echo "$metatitle"; ?> , archery, boorman, bows, arrows">
<META NAME="author" content="Randall Wright">
<META NAME="copyright" content="Boorman Archery">
<meta http-equiv="pragma" content="no-cache">
<META NAME="language" content="en-us">
<META NAME="rating" content="General">
<META name="robots" content="index,follow">
<META NAME="revisit-after" content="7 Days">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

</head>

<body>

</body>
</html>

Hi, I need to insert some code into my current form code which will check to see if a username exist and if so will display an echo message. If it does not exist will post the form (assuming everything else is filled in correctly). I have tried some code in a few places but it doesn't work correctly as I get the username message exist no matter what. I think I am inserting the code into the wrong area, so need assistance as to how to incorporate the username check code.

$sql="select * from Profile where username = '$username';
$result = mysql_query( $sql, $conn )
      or die( "ERR: SQL 1" );
if(mysql_num_rows($result)!=0)
{
process form
}
else
{
echo "That username already exist!";
}


the current code of the form


<?PHP
//session_start();
require_once "formvalidator.php";
$show_form=true;

if (!isset($_POST['Submit'])) {



$human_number1 = rand(1, 12);



$human_number2 = rand(1, 38);



$human_answer = $human_number1 + $human_number2;



$_SESSION['check_answer'] = $human_answer;
}

if(isset($_POST['Submit']))
{





if (!isset($_SESSION['check_answer'])) {
echo "<p>Error: Answer session not set</p>";
}


if($_POST['math'] != $_SESSION['check_answer']) {
echo "<p>You did not pass the human check.</p>";
exit();
}


   $validator = new FormValidator();
    $validator->addValidation("FirstName","req","Please fill in FirstName");







$validator->addValidation("LastName","req","Please fill in LastName");
$validator->addValidation("UserName","req","Please fill in UserName");
$validator->addValidation("Password","req","Please fill in a Password");
$validator->addValidation("Password2","req","Please re-enter your password");
$validator->addValidation("Password2","eqelmnt=Password","Your passwords do not match!");
$validator->addValidation("email","email","The input for Email should be a valid email value");
$validator->addValidation("email","req","Please fill in Email");
$validator->addValidation("Zip","req","Please fill in your Zip Code");
$validator->addValidation("Security","req","Please fill in your Security Question");
$validator->addValidation("Security2","req","Please fill in your Security Answer");
    if($validator->ValidateForm())
    {
        $con = mysql_connect("localhost","uname","pw") or die('Could not connect: ' . mysql_error());
        mysql_select_db("beatthis_beatthis") or die(mysql_error());
$FirstName=mysql_real_escape_string($_POST['FirstName']); //This value has to be the same as in the HTML form file
$LastName=mysql_real_escape_string($_POST['LastName']); //This value has to be the same as in the HTML form file
$UserName=mysql_real_escape_string($_POST['UserName']); //This value has to be the same as in the HTML form file
$Password= md5($_POST['Password']); //This value has to be the same as in the HTML form file
$Password2= md5($_POST['Password2']); //This value has to be the same as in the HTML form file
$email=mysql_real_escape_string($_POST['email']); //This value has to be the same as in the HTML form file
$Zip=mysql_real_escape_string($_POST['Zip']); //This value has to be the same as in the HTML form file
$Birthday=mysql_real_escape_string($_POST['Birthday']); //This value has to be the same as in the HTML form file
$Security=mysql_real_escape_string($_POST['Security']); //This value has to be the same as in the HTML form file
$Security2=mysql_real_escape_string($_POST['Security2']); //This value has to be the same as in the HTML form file



$sql="INSERT INTO Profile (`FirstName`,`LastName`,`Username`,`Password`,`Password2`,`email`,`Zip`,`Birthday`,`Security`,`Security2`) VALUES ('$FirstName','$LastName','$UserName','$Password','$Password2','$email','$Zip','$Birthday','$Security','$Security2')"; 
//echo $sql;
if (!mysql_query($sql,$con)) {

 die('Error: ' . mysql_error());

} else{



mail('email@gmail.com','A profile has been submitted!',$FirstName.' has submitted their profile',$body);

echo "<h3>Your profile information has been submitted successfully.</h3>";
}

mysql_close($con);
        $show_form=false;
    }
    else
    {
        echo "<h3 class='ErrorTitle'>Validation Errors:</h3>";

        $error_hash = $validator->GetErrors();
        foreach($error_hash as $inpname => $inp_err)
        {
            echo "<p class='errors'>$inpname : $inp_err</p>\n";
        }        
    }
}

if(true == $show_form)
{
?>

hey gurus, i am a newbie php coder.. i am learning by example.

what i am trying to do is write a piece of code which will alter 3 tables (user, bonus_credit, bonus_credit_usage)

----------------------------------------------------------------
the table structure that will be used is as follows:

user.bonus_credit
user.ID

bonus_credit.bonusCode
bonus_credit.qty
bonus_credit.value

bonus_credit_usage.bonusCode
bonus_credit_usage.usedBy

----------------------------------------------------------------
so lets say, in bonus_credit i have the following
bonusCode = 'facebook' (this is the code they have to type to redeem the bonus
qty = '10' ( number of times the bonusCode can be redeemed, but same person can't redeem it more than once)
value = '5' (this is the  amount of bonus_credit for each qty)

Now, I need to write a code that check to see if the code has been redeemed in the bonus_credit_usage table and if the user.ID exists in this table as bonus_code_usage.usedBy, then give an error that its already been used and if it hasn't been used, then subtract 1 from qty, add ID to usedBy and then add the value to the bonus_credit

-----------------------
i have started the steps just to create a simple textbox and entering a numeric value to bonus_credit, and that works.. but now i have to use JOIN and IF and ELSE.. which is a little too advanced for me.. so i'd appreciate a guide as i write the code.

if(isset($_REQUEST['btnBonus']))

{

$bonus_credit = addslashes($_REQUEST['bonusCode']);

$query = "update user set bonus_credit=bonus_credit+'".$bonus_credit."' where id='".$_SESSION['SESS_USERID']."'";

echo "<script>window.location='myreferrals.php?msgs=2';</script>";

mysql_query($query) or die(mysql_error());

}

Advance thank you.

Can you help please.

The error.....

Warning: mysql_fetch_assoc() expects parameter 1 to be resource, string given in C:\wamp\www\test_dabase.php on line 24

code.
Code: [Select]
<?php

//database connection.
$DB = mysql_connect("localhost","root") or die(mysql_error());

if($DB){

//database name.
$DB_NAME="mysql";

//select database and name.
$CON=mysql_select_db($DB_NAME,$DB)or die(mysql_error()."\nPlease change database name");


// if connection.
}if($CON){
    
    //show tables.
  $mysql_show="SHOW TABLES";
    
    //select show and show.
      $mysql_select2="mysql_query(".$mysql_show.") or die(mysql_error())";
    
    }
    
    //if allowed to show.
    if($mysql_select2){
        
        //while it and
    while($data=mysql_fetch_assoc($mysql_select2)){
        
        //show it.
        echo $data;
        
        }
    }    
    ?>

Hi, I have a working PHP script that picks data from an XML file. I would like the script to pick values from certain range.
Right now the PHP shows every Item with name and value in a table. So when all 4 of the item values are shown they are beneath each other in a column.
But i would like them all to be next to each other. Therefore if i have these 4 item values (Name 0000), if i could pick them from the XML e.g. not the first but the second than i could make them manually with 4 different PHP scripts and put them next to each other.

I'm not very good at PHP, but i think this is probably very easy thing to do.
Thanks in advance.

The PHP script looks like this:
Code: [Select]
<?

  // DOMElement->getElementsByTagName() -- Gets elements by tagname
  // nodeValue : The value of this node, depending on its type.
  // Load XML File. You can use loadXML if you wish to load XML data from a string

  $objDOM = new DOMDocument();
  $objDOM->load("feed.xml"); //make sure path is correct


  $note = $objDOM->getElementsByTagName("item");
 
  // for each note tag, parse the document and get values for
  // tasks and details tag.

  foreach( $note as $value ){

 
    $places = $value->getElementsByTagName("name");
    $place  = $places->item(0)->nodeValue;

    $details = $value->getElementsByTagName("amount");
    $detail  = $details->item(0)->nodeValue;




    echo "<BODY STYLE='background-color:transparent'>

<table border='0'>
  <tr>
    <td width='127'><table width='127px' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td><p style='font-family:arial;color:white;font-size:22px;padding-left:3px;text-align:left;  background:url(bg2.png)'><strong> $place</strong></p></td>

</tr>

</table>
</td>
    <td width='115'>
      <table width='115px' border='0' cellpadding='0' cellspacing='0'>
        <tr>
          <td><p style='font-family:arial;color:white;font-size:22px;text-align:right;padding-right:5px; background:url(bg1.png)'><strong>$detail</strong></p></td>
         
        </tr>
       
</table></td>
  </tr>
 
</table>




";
 $i++; }
?>
And the XML looks like this:
Code: [Select]
<xml>
<item>
<name>Examplename</name>
<amount>0000</amount>
</item>
<item>
<name>Examplename</name>
<amount>0000</amount>
</item>
<item>
<name>Examplename</name>
<amount>0000</amount>
</item>
<item>
<name>DExamplename</name>
<amount>0000</amount>
</item>
</xml>

What is the correct order for HTML?
 

<html>
<head>
<title>
</title>
</head>
<body
</body>
</html>

Hello,

I'm pretty new to php and have a small problem I can't figure out.

I have passed some copy (john & mary) from a small form to a url with php (i used urlencode). The code in the url looks like this john+%26+mary.

My problem is, how do I display the %26 as an actual ampersand (&) on the html page? Here is the snippet of code that I am currently using to display the names.

<?php echo htmlentities($_GET['gallery']); ?>

I have searched and searched and can't find anything to figure this out.

Any help would be great.

Thanks.

Hello, people!   I was watching some php tutorials in youtube and, in a video, the guy was showing how put php script inside html code. I would like to know why in the following code he didn't use only one php script? 1- Code used in the video:

<html>
<body>

<?php
$color = $_GET['clr'];
?>

<b><font color="<?php echo $color;?>">This is a test.</font></b>

</body>
</html>

  2- Modified code by me to test with one script:

<html>
<body>

<?php
$color = $_GET['clr'];

echo "<b><font color=\"$color\"> This is a test. </font></b>";

?>

</body>
</html>

  Is his code more correct(with two scripts)? Why?

Hi guys, first of all, sorry for my bad english

I have a question,

As title, how can i avoid html tags in a text passed by $_POST method?

htmlentities() is one way, i think, but... there's another way to avoid me to use that? I don't like to decode again every text!

Edit:
is strip_tags(); good for this purpose?

Hello dear friends,

If i've database table (my_table) with one field (text)
and i've created form with textarea

Code: [Select]
<form action="#">
<textarea name="text" id="text"></textarea>
<input type="submit" name="Submit" value="Submit">
</form>
I can add any text inside it and save it in my database table
but when i add html codes it also store it perfect but only 2 codes is not 

the closing of form and textarea </form> and </textarea> it not stored and automatically not saved Why !

i mean if i paste inside the above form - textarea the following code for example

Code: [Select]
<form>
<textarea>blah</textarea>
</form>
it will store it as
Code: [Select]
<form>
<textarea>blah


and will not store </form> and </textarea> how then i can add html codes with textarea and form inside it without conflict

thanks