PHP - $_post Variables

I have a php search page that takes form data to create its queries, then reload the original search page. The form is long, so there are numerous $_POST's to convert to variables for use in the query. I've looked at "extract" and a few other code snippets. But it's a form and I don't want any security issues. I'm hoping there's a "foreach" solution, but I'm a beginner. What's a proper way to to simplify this:

$s1 = $_POST["s1"];
$s2 = $_POST["s2"];
$s3 = $_POST["s3"];
$s4 = $_POST["s4"];
$s5 = $_POST["s5"];
$s6 = $_POST["s6"];
$s7 = $_POST["s7"];
$s8 = $_POST["s8"];
$s9 = $_POST["s9"];
$s10 = $_POST["s10"];
$s11 = $_POST["s11"];
$s12 = $_POST["s12"];

does anyone know how to decode this XML variable value into string values? I also need to know the oposite way: creating variable values into xml. I've tried several code examples but they did filter the requested data.

Code: [Select]
$xml='<?xml version="1.0" encoding="utf-8"?>
<elements>
<text identifier="ed9cdd4c-ae8b-4ecb-bca7-e12a5153bc02">
  <value/>
</text>
<textarea identifier="a77f06fc-1561-453c-a429-8dd05cdc29f5">
  <value><![CDATA[<p style="text-align: justify;">Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.</p>]]></value>
</textarea>
<textarea identifier="1a85a7a6-2aba-4480-925b-6b97d311ee6c">
  <value><![CDATA[<p style="text-align: justify;">Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy  eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed  diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum.  Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor  sit amet.</p>]]></value>
</textarea>
<image identifier="ffcc1c50-8dbd-4115-b463-b43bdcd44a57">
  <file><![CDATA[images/stories/red/cars/autobedrijf.png]]></file>
  <title/>
  <link/>
  <target/>
  <rel/>
  <lightbox_image/>
  <width><![CDATA[250]]></width>
  <height><![CDATA[187]]></height>
</image>
<text identifier="4339a108-f907-4661-9aab-d6f3f00e736e">
  <value><![CDATA[Kramer 5]]></value>
</text>
<text identifier="ea0666d7-51e3-4e52-8617-25e3ad61f8b8">
  <value><![CDATA[6000 RS]]></value>
</text>
<text identifier="90a18889-884b-4d53-a302-4e6e4595efa0">
  <value><![CDATA[Eindhoven]]></value>
</text>
<text identifier="410d72e0-29b3-4a92-b7d7-f01e828b1586">
  <value><![CDATA[APK Pick up and return]]></value>
</text>
<text identifier="45b86f23-e656-4a81-bb8f-84e5ea76f71f">
  <value><![CDATA[15% korting op grote beurt]]></value>
</text>
<text identifier="3dbbe1c6-15d6-4375-9f2f-f0e7287e29f3">
  <value><![CDATA[Gratis opslag zomerbanden]]></value>
</text>
<text identifier="2e878db0-605d-4d58-9806-8e75bced67a4">
  <value><![CDATA[Gratis abonnement of grote beurt]]></value>
</text>
<text identifier="94e3e08f-e008-487b-9cbd-25d108a9705e">
  <value/>
</text>
<text identifier="73e74b73-f509-4de7-91cf-e919d14bdb0b">
  <value/>
</text>
<text identifier="b870164b-fe78-45b0-b840-8ebceb9b9cb6">
  <value><![CDATA[040 123 45 67]]></value>
</text>
<text identifier="8a91aab2-7862-4a04-bd28-07f1ff4acce5">
  <value/>
</text>
<email identifier="3f15b5e4-0dea-4114-a870-1106b85248de">
  <value/>
  <text/>
  <subject/>
  <body/>
</email>
<link identifier="0b3d983e-b2fa-4728-afa0-a0b640fa34dc">
  <value/>
  <text/>
  <target/>
  <custom_title/>
  <rel/>
</link>
<relateditems identifier="7056f1d2-5253-40b6-8efd-d289b10a8c69"/>
<rating identifier="cf6dd846-5774-47aa-8ca7-c1623c06e130">
  <votes><![CDATA[1]]></votes>
  <value><![CDATA[1.0000]]></value>
</rating>
<googlemaps identifier="160bd40a-3e0e-48de-b6cd-56cdcc9db892">
  <location><![CDATA[50.895711,5.955427]]></location>
</googlemaps>
</elements>';

hey guys
I know this is html but I'm using the php $_POST to grab the information the user chooses, i can't figure out though how to grab the info i'm looking for in this select option form
if they choose PasswordCracker v3.0 what is it i'm looking to set my $_post['']; to?

<FORM action="buy.php" method="POST">
    <select name="passwordcrakers">
      <option value="v2.0">PasswordCracker V2.0</option>
      <option value="v3.0">PasswordCracker V3.0</option>
      <option value="v4.0">PasswordCracker V4.0</option>
      <option value="v5.0">PasswordCracker V5.0</option>
      <option value="v6.0">PasswordCracker V6.0</option>
      <option value="v7.0">PasswordCracker V7.0</option>
      <option value="v8.0">PasswordCracker V8.0</option>
      <option value="v9.0">PasswordCracker V9.0</option>
      <option value="v10">PasswordCracker V10</option>
        </select><br />
<input type="submit" value="Buy" name="submit" />
</FORM>

Hi guys, running through this tutorial at the moment:

http://www.tizag.com/phpT/forms.php

I seem to keep having problems with the $_POST variable. Is that obsolete syntax now?

Here's the part I get an error on:

<html>
<body>
<?php
$quantity=$_POST['quantity'];
$item=$_POST['item'];

echo "You ordered".$quantity."".$item.".<br/>.";
echo "Thank you for ordering from Boombaby art supppplies!";

?>
</body>
</html>


Here's the error:


( ! ) Notice: Undefined index: quantity in C:\wamp\www\process.php on line 4
Call Stack
#   Time   Memory   Function   Location
1   0.0009   363936   {main}( )   ..\process.php:0

( ! ) Notice: Undefined index: item in C:\wamp\www\process.php on line 5
Call Stack
#   Time   Memory   Function   Location
1   0.0009   363936   {main}( )   ..\process.php:0
You ordered.
.Thank you for ordering from Boombaby art supppplies!



Any help would be appreciated. I tried googling but everything didn't seem to answer my question or was too confusing.

Thanks.

I use a form to sent date and  use php to display it . However , the code only can working on one page. I can not turn the page. I do not why . Please tell me reason . Thank you very much.

<select name="kind">
  <option >kind</option>
 <option value="Copier Toner">Copier Toner</option>
        <option value="Laser Toner">Laser Toner</option>
      <option value="MICR Toner">MICR Toner</option>
      <option value="Inkjet">Inkjet</option>
    
php code

if (isset($_GET["page"])) { $page  = $_GET["page"]; } else { $page=1; };
$start_from = ($page-1) * 18;



$select="select * from $chun where  brand = '$_POST[brand]' or  sort ='$_POST[kind]' or type='$_POST[type]'  LIMIT $start_from, 18";

$result2=mysql_query($select, $connection) or die (mysql_error());

 <?php
   $sql = "select count(*) from $chun  where   brand = '$_POST[brand]' or sort='$_POST[kind]' or type='$_POST[type]' ";

   
$rs_result = mysql_query($sql,$connection);
$row = mysql_fetch_row($rs_result);
$total_records = $row[0];
$total_pages = ceil($total_records / 18);
 
for ($i=1; $i<=$total_pages; $i++) {



?>


      <div class="trunpage"><a href='table2.php?page=<?php echo  "$i" ; ?>&id=<?php echo "$_POST[brand]";?>&cd=<?php echo "$_POST[kind]";?>&td=<?php echo "$_POST[type]";?>'  ><?php echo  "$i" ; ?></a>
      
       </div>
   
The first page is working fine. The second page I get error message.

Undefined index: brand in C:\wamp\www\php1000\table2.php on line 234

ok am workin on this script its a points market for a text based game but my money is not taking the amount of the players i points on the market ... just say i post 10 points for $29.000.000 ... and when the player  buys the points it takes the money from that user and give the user points but .... when the user buy the points it dont give the user the money it give $290 ?? not sure is its my SQL av post that to


Code: [Select]
<?php
include 'header.php';

$_POST['buypoints'] =  abs(intval($_POST['buypoints']));{


$result = mysql_query("SELECT * FROM `pointsmarket` WHERE `id`='".$_POST['points_id']."'");
    $worked = mysql_fetch_array($result);
    $price = $worked['price'];
    $amount = $worked['amount'];
  $totalcost = $price * prettynum($_POST['amount']);
  $newpointsinmarket = $amount - prettynum($_POST['amount']);
  $user_points = new User($worked['owner']);

if ($worked['owner'] == $user_class->id) {
echo Message("You have taken ".$_POST['amount']." points off the market.");
$newpoints = $user_class->points + $_POST['amount'];;
$result = mysql_query("UPDATE `grpgusers` SET `points` = '".$newpoints."' WHERE `id`='".$user_class->id."'");
$user_class = new User($_SESSION['id']);
if ($newpointsinmarket == 0){
$result = mysql_query("DELETE FROM `pointsmarket` WHERE `id`='".$worked['id']."'");
} else {
$result = mysql_query("UPDATE `pointsmarket` SET `amount` = '".$newpointsinmarket."' WHERE `id`='".$worked['id']."'");
}
include 'footer.php';
die();
}
  $_POST['amount'] =  abs(intval($_POST['amount']));
$_POST['points_id'] = abs(intval($_POST['points_id']));{

}
$_POST['amount'] =  abs(intval($_POST['amount']));
$_POST['points_id'] = abs(intval($_POST['points_id']));{

}
if ($totalcost > prettynum($user_class->money)){
echo Message("You don't have enough money.");
}
if($_POST['amount'] >= 1 && $_POST['amount'] <= $amount && $totalcost <= $user_class->money){
echo Message("You have bought ".$_POST['amount']." points for $".$totalcost);
$newpoints = $user_class->points + $_POST['amount'];
$newmoney = $user_class->money - $totalcost;
$result = mysql_query("UPDATE `grpgusers` SET `money` = '".$newmoney."', `points` = '".$newpoints."' WHERE `id`='".$user_class->id."'");
$newmoney = $user_points->money + $totalcost;
$result = mysql_query("UPDATE `grpgusers` SET `money` = '".$newmoney."' WHERE `id`='".$user_points->id."'");
$user_class = new User($_SESSION['id']);
if ($newpointsinmarket == 0){
$result = mysql_query("DELETE FROM `pointsmarket` WHERE `id`='".$worked['id']."'");
} else {
$result = mysql_query("UPDATE `pointsmarket` SET `amount` = '".$newpointsinmarket."' WHERE `id`='".$worked['id']."'");
}
}
}

$_POST['addpoints'] =  abs(intval($_POST['addpoints']));
$_POST['id'] = abs(intval($_POST['id']));{

}
if($_POST['amount'] < 1){

}
if($_POST['price'] < 1){

}
if ($_POST['amount'] >= 1 && prettynum($_POST['amount']) <= $user_class->points && $_POST['price'] >= 1){
echo Message("You have added ".$_POST['amount']." points to the market a price of $".$_POST['price']." per point.");
$result= mysql_query("INSERT INTO `pointsmarket` (owner, amount, price)"."VALUES ('$user_class->id', '$_POST[amount]', '$_POST[price]')");
$newpoints = $user_class->points - $_POST['amount'];
$result = mysql_query("UPDATE `grpgusers` SET `points` = '".$newpoints."' WHERE `id`='".$user_class->id."'");
$user_class = new User($_SESSION['id']);
}

?>
<link href="style.css" rel="stylesheet" type="text/css" />

<tr><td class="contenthead">Point Market</td></tr>
<tr><td align="center" class="contentcontent">
<p>&nbsp;</p>
<p><strong>You need to be a Respected Warrior to add points to the market</strong><br>
Use this form to add points to the points market.</p>
<p><strong>Bank Account[<? echo prettynum($user_class->bank) ?>]</strong><strong></strong><br />
  <strong><a href="pointmarket.php">[Refresh</a>]</strong></p>
<form method='post'>
  <table align="center">
  <tr>
<td>Amount of points</td><td>&nbsp;&nbsp;<input name='amount' type='text' class="areatest" value='0' size='10' maxlength='20'></td>
</tr>
<tr>
<td>Price per point</td><td>$<input name='price' type='text' class="areatest" value="0" size='10' maxlength='20'></td>
<tr><td align="center" colspan="2"><input name='addpoints' type='submit' class="buttong" value='Add Points'></form></td>
</tr></table>
</td></tr>
<tr><td class="contentcontent">
<?php
$result = mysql_query("SELECT * FROM `pointsmarket` ORDER BY `price` DESC");
while($line = mysql_fetch_array($result, MYSQL_ASSOC)) {
$user_points = new User($line['owner']);
if ($user_points->id == $user_class->id){
$submittext = "Remove";
} else {
$submittext = "Buy";
}
echo "<form method='post'>";
echo $user_points->formattedname." - ".$line['amount']." points for ".prettynum($line['price'],1)." per point <input type='text' name='amount' size='3' maxlength='20' value='".prettynum($line['amount'])."'><input type='hidden' name='points_id' value='".$line['id']."'><input type='submit' name='buypoints' value='".$submittext."'></form><br>";
}
?>
</td></tr>
<?php
include 'footer.php';
?>



SQL
Code: [Select]
CREATE TABLE IF NOT EXISTS `pointsmarket` (
  `owner` int(10) NOT NULL default '0',
  `amount` text NOT NULL,
  `price` text NOT NULL,
  `id` int(10) NOT NULL auto_increment,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 ROW_FORMAT=DYNAMIC AUTO_INCREMENT=81 ;

Hello,

My script here is not sending POST vars from form to script. I can't figure it out.

Form:
Code: [Select]
<form action="train2.php" method="POST">
 <tr>
<td colspan="4"><center><img src="pic/toppage16.gif" /></center></td>
       </tr>

<TR> <TD><FONT COLOR="white">Reassign Miners</FONT></TD>

<TD align=right><FONT COLOR="white">0 Naquadah</FONT></TD>

<TD align=middle><FONT COLOR="white"><INPUT size="6" maxlength="8" value="0" name="miner>"</FONT></TD>

</TR>

<TR>

<TD><FONT COLOR="white">Reassign Normal Attackers</FONT></TD>

<TD align=right><FONT COLOR="white">0 Naquadah</FONT></TD>

<TD align=middle><FONT COLOR="white"><INPUT size="6" maxlength="8" value="0" name="atsold"></FONT></TD>

</TR>

 <TR>
 
<TD><FONT COLOR="white">Reassign Normal Defenders</FONT></TD>


<TD align=right><FONT COLOR="white">0 Naquadah</FONT></TD>

<TD align=middle><FONT COLOR="white"><INPUT size=6 maxlength=8 value=0 name="defsold"></FONT></TD>

</TR>

<TR>

 <TD><FONT COLOR="white">Reassign Covert Agents</FONT></TD>

<TD align=right><FONT COLOR="white">0 Naquadah</FONT></TD>

<TD align=middle><FONT COLOR="white"><INPUT size=6 maxlength=8 value=0 name="spy"></FONT></TD>

</TR>

<TR> <TD><FONT COLOR="white">Anti Covert Agents</FONT></TD>

<TD align=right><FONT COLOR="white">0 Naquadah</FONT></TD><TD align=middle><FONT COLOR="white"><INPUT size="6" maxlength=8 value=0 name="spykiller"></FONT></TD></TR>

<TR> <TD align=middle colSpan=3><FONT COLOR="white"><INPUT type="submit" value="UnTrain!" name="untrain">
</FONT>

</TD>

</form>

Code: [Select]
<?php
if(isset($_POST['untrain'])){

die($_POST['miner']);
$miners = securevar($_POST['miner']);
$nattackers = securevar($_POST['atsold']);
$ndefenders = securevar($_POST['defsold']);
$covertunits = securevar($_POST['spy']);
$anticovertunits = securevar($_POST['spykiller']);

$totalunits+=$miners;
$totalunits+=$nattackers;
$totalunits+=$ndefenders;
$totalunits+=$covertunits;
$totalunits+=$anticovertunits;

if($totalunits>=1){
$q = "UPDATE `accountinfo_db` SET `miners_1` = `miners_1`-'$miner', `attackers_1` = `attackers_1`-'$natta', `defenders_1` = `defenders_1`-'$ndefe', `covertagents` = `covertagents`-'$cover', `anticovertagents` = `anticovertagents`+'$antic', `untrainedunits` = `untrainedunits`+'$totalunits' WHERE `id` = '$id'"; 
$res = mysql_query($q) or die(mysql_error());

if(isset($res)){
header("Location: train.php?strmsg=".$totalunits."Troops Untrained! For 0 Naquadah.");
}

}else{
header("Location: train.php?strmsg=You must enter atleast 1 troop to be un-trained!");
}

}


?>

when I die($_GET['miner'); nothing is outputed even tho I submited the data.

Thank you,
Brian

Hi guys,

I have a form using radio buttons.
For the radio button, lets just say i have the id name as 'rim' + number eg; rim0, rim1, rim2....

When i post the data to another file to execute the data collected, naturally i would use the:
Code: [Select]
$rim0=$_POST['rim0'];
$rim1=$_POST['rim1'];
....
$rim10=$_POST['rim10'];
i tried to shorten this process using this method:
Code: [Select]
//$q is part of the post variable.
for($x = 0; $x < count($q); $x++){

$rim[]=$_POST['"rim"."$x"'];
}
But i get this error
Code: [Select]
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Notice: Undefined index: "rim"."$x" in D:\Apache Software Foundation\Apache2.2\htdocs\.....\#####.php on line 20
Is there something wrong with my POST syntax?

Well, i have got this code:

Code: [Select]
<?php
header("Cache-Control: no-store, no-cache, must-revalidate"); 
header("Cache-Control: post-check=0, pre-check=0", false); 
header("Pragma: no-cache"); 
?>
<form action="signature.php?user=" .$user. "&img=". $img" method="post">
<input name="user" type="text" />
<select name="img">
<option value="blue">Blue</option>
<option value="red">Red</option>
<option value="purple">Purple</option>
<option value="pink">Pink</option>
</select>

<?php
$user = $_POST['user'];
$img = $_POST['img'];
?>
<input type="submit" value="Submit" />

<?php
//Skill Grabs
$order = array("Overall", 
                        "Attack", 
                        "Defence", 
                        "Strength", 
                        "Hitpoints", 
                        "Ranged", 
                        "Prayer", 
                        "Magic", 
                        "Cooking", 
                        "Woodcutting", 
                        "Fletching", 
                        "Fishing", 
                        "Firemaking", 
                        "Crafting", 
                        "Smithing", 
                        "Mining", 
                        "Herblore", 
                        "Agility", 
                        "Thieving", 
                        "Slayer", 
                        "Farming", 
                        "Runecraft", 
                        "Hunter", 
                        "Construction", 
                        "Summoning",
                        "Dungeoneering"); 

$user = $_GET['user']; //Change this to the variable (Or a string literal) that contains the username
$get = file_get_contents("http://hiscore.runescape.com/index_lite.ws?player=$user");
$get = explode("\n", $get);
$i = 0;

foreach ($order as $key => $value)
{
        $value = strtolower($value);
        $temp = explode(",", $get[$i]);
        $temp = array("rank" => $temp[0], "level" => $temp[1], "exp" => $temp[2]);
        $stats[$value] = $temp;
        $eval = "\$$value = array(\$temp[\"rank\"], \$temp[\"level\"], \$temp[\"exp\"]);";
        eval($eval);
        $i++;
}

//End Skill Grabs


// specify the file name - you can use a full path, or "../../" type stuff here
// if the image is not in the same directory as this code file
$image = imagecreatefrompng("http://slay2day.x10.mx/highscores/signatures/".$_GET['img'].".png");

// specify the font size


// in this case, the color is white, but you can replace the numbers with the RGB values
// of any color you want
$color = imagecolorallocate($image, 255,255,255);


// and now we do the overlay - the layers of text start top to bottom, so
// the drop shadow comes first

// $image - the base image file we specified above
// $font_size - Well duh. Its the size of the font
// 0 - the angle of the text - we don't want an angle, so we leave it at 0
// 55 - pixels to the right from the leftmost part of the image
// 35 - pixels down from the top of the image
// $black - the color we defined above
// "../fonts/ARIALBD.TTF" - the location on the server that the font can be found
// "Test Text" - the text we're overlaying - you can also use a variable here

ImageTTFText ($image, "7", 0, 280, 10, $color, "arial.ttf","Slay2day");

ImageTTFText ($image, "12", 0, 240, 55, $color, "biblio.ttf",$user);

if($overall[0]==-1){ImageTTFText($image, "11", 0, 230, 105, $color, "biblio.ttf","NOT RANKED");}else{ImageTTFText($image, "11", 0, 240, 105, $color, "biblio.ttf",$overall[0]);}

ImageTTFText ($image, "10", 0, 27, 20, $color, "arial.ttf",$attack[1]);
ImageTTFText ($image, "10", 0, 27, 42, $color, "arial.ttf",$strength[1]);
ImageTTFText ($image, "10", 0, 27, 64, $color, "arial.ttf",$defence[1]);
ImageTTFText ($image, "10", 0, 27, 88, $color, "arial.ttf",$hitpoints[1]);
ImageTTFText ($image, "10", 0, 27, 114, $color, "arial.ttf",$ranged[1]);

ImageTTFText ($image, "10", 0, 70, 20, $color, "arial.ttf",$prayer[1]);
ImageTTFText ($image, "10", 0, 70, 42, $color, "arial.ttf",$magic[1]);
ImageTTFText ($image, "10", 0, 70, 64, $color, "arial.ttf",$cooking[1]);
ImageTTFText ($image, "10", 0, 70, 88, $color, "arial.ttf",$woodcutting[1]);
ImageTTFText ($image, "10", 0, 70, 114, $color, "arial.ttf",$fletching[1]);

ImageTTFText ($image, "10", 0, 117, 20, $color, "arial.ttf",$fishing[1]);
ImageTTFText ($image, "10", 0, 117, 42, $color, "arial.ttf",$firemaking[1]);
ImageTTFText ($image, "10", 0, 117, 64, $color, "arial.ttf",$crafting[1]);
ImageTTFText ($image, "10", 0, 117, 88, $color, "arial.ttf",$smithing[1]);
ImageTTFText ($image, "10", 0, 117, 114, $color, "arial.ttf",$mining[1]);

ImageTTFText ($image, "10", 0, 162, 20, $color, "arial.ttf",$herblore[1]);
ImageTTFText ($image, "10", 0, 162, 42, $color, "arial.ttf",$agility[1]);
ImageTTFText ($image, "10", 0, 162, 64, $color, "arial.ttf",$thieving[1]);
ImageTTFText ($image, "10", 0, 162, 88, $color, "arial.ttf",$slayer[1]);
ImageTTFText ($image, "10", 0, 162, 114, $color, "arial.ttf",$farming[1]);

ImageTTFText ($image, "10", 0, 212, 20, $color, "arial.ttf",$runecraft[1]);
ImageTTFText ($image, "10", 0, 212, 42, $color, "arial.ttf",$construction[1]);
ImageTTFText ($image, "10", 0, 212, 64, $color, "arial.ttf",$hunter[1]);
ImageTTFText ($image, "10", 0, 212, 88, $color, "arial.ttf",$summoning[1]);
ImageTTFText ($image, "10", 0, 212, 114, $color, "arial.ttf",$dungeoneering[1]);

// Now add the actual white text "on top"

header("Content-type: image/png");
imagepng($image);
imagedestroy($image);
?>
It generates a image and gets data from the name thats in the url. I am wanting to make a form where they fill out their name and what color they use.

What is wrong?

Here's the result of my problem:
Array ( [nav_create_title] => hel [nav_visible] => 1 [category_position] => 4 )
( ! ) Notice: Undefined index: category_postion in C:\wamp\www\tryitandbuyit\includes\category_create_process.php on line 7
Call Stack
#   Time   Memory   Function   Location
1   0.0010   370336   {main}( )   ..\category_create_process.php:0

Here's how I'm trying to assign and echo $_post.
print_r($_POST);
$category_pos = $_POST["category_postion"];
$nav_title=$_POST["nav_create_title"];
$nav_visible=$_POST["nav_visible"];



echo $nav_title;
echo $category_pos;
echo $nav_visible;


As you can see, it prints the correct value and name from the array... why the heck can't I assign or echo it?

Here is how I am sending it from the other page in a form (it used to be simple, but I've been trying every work around i can think of:
<?php
$result=mysql_query("SELECT * FROM category WHERE visible='1' ORDER BY position ASC");
$row=mysql_fetch_array($result);
$positionID=$row['position'];
$position=$row['position'];
$selectname= "Select A Position:<br />";
$selectname .= "<select name=";
$selectname .= "'category_position'";
$selectname .= ">";
echo $selectname;
$rownumber=mysql_num_rows($result);
$rownumber_temp=$rownumber+1;
For($i=1; $i<=$rownumber_temp; $i++)
{
echo "<option value= $i>" . $i . "</option></br>";

}
$selectname2 = "echo \"<br />\"";
$selectname2 .= "echo \"<br />\"";
$selectname2 .= "echo \"</select>";
echo $selectname2;

I think this belongs here, but my $_POST['gender'] won't grab the gender that was submitted through a form.

I am using AJAX so the page doesn't have to reload so it can go in a smooth transition, but the AJAX is grabbing the value perfectly fine.
I have a feeling the $_POST isn't grabbing the value because the page isn't reloading.. but I don't want to reload it.
These codes are all on the same page.

Here is my Javascript:
Code: [Select]
<script>
function chooseGender()
{
var gender = $('input[name=gender]:checked', '#submitgender').val();
if(gender)
{
$.ajax(
{
type: "POST",
url: window.location.pathname,
data: gender,
success: function()
{
alert("You have chosen to be a " + gender); //It's grabbing it perfectly fine!
$("#submitgender").hide(); //It hides the gender table so they can't choose a gender since they already have chosen one.
$("#rest").fadeIn(); //Shows the other table that's labeled "rest" as it's ID so they can choose what base, eyes, etc for that specific gender they've chosen.
}
});
}
else
{
alert('Select a gender.');
}
}

$(function tabs()
{
$( "#tabs" ).tabs();
});
</script>
But here is the PHP inside the #rest table:
Code: [Select]
<?php
$gender = $_POST['gender'];

$sql = "SELECT * FROM habases WHERE gender='".$gender."'";
$result = mysqli_query($cxn, $sql) or die(mysqli_error($cxn));
print_r($sql);
while ($row = mysqli_fetch_assoc($result))
{
$baseimage = $row['image'];
$baseskin = $row['skin'];

echo "<img src=\"http://www.elvonica.com/".$baseimage."\" value=\"".$baseskin."\">";
}
?>
And this is what I'm getting for the print_r:
Quote

SELECT * FROM habases WHERE gender=''

Running into some problems with my code.  I am having the user search the Database with either a UAID or the user's full name.  It works fine when you input both the UAID and name; however, I want it to work if only one is give (i.e. just the name or just the UAID).

I decided to use the isset($_POST) function of php but I am not getting it to work correctly.  PHP believe it is set even though it is empty.

Here is my html form.

<?php
@include 'accesscontrol.php';

echo "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"
      \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">"
     ."<html xmlns=\"http://www.w3.org/1999/xhtml\">"
     ."<title> Hello </title>"
     ."<meta http-equiv=\"Content-Type\"
      content=\"text/html; charset=iso-8859-1\" />"
     ."<head>"
     ."<style type=\"text/css\">"
     ."h1{"
     ."border-bottom-style: double;"
     ."border-bottom-color: black;"
     ."border-bottom-width: 5px;"
     ."}"
     ."p{"
     ."background-color:#4682B4;"
     ."}"
     ."</style>"
     ."</head>"
     ."<body style=\"background-color:#B8B8B8\">"
     ."<table align=\"center\" style=\"background-color:#B8B8B8\" WIDTH=\"100%\" HEIGHT=\"100%\">"
     ."<tr valign=\"middle\">"
     ."<td align=\"center\">"
     ."<form method=\"post\" action=\"user.php\">"
     ."<table align=\"center\" cellpadding=\"10\" style=\"background-color:#5CADFF\" width=\"500\" height=\"400\">"
     ."<tr>"
     ."<th colspan=6 align=\"center\"><h1>Welcome: ".$uid."</h1></th>"
     ."</tr>"
     ."<tr>"
     ."<td colspan=3 width=40% align=center>"
     ."UAID:<br>  <input type=\"text\" size=\"8\" name=\"UAID\" /></td>"
     ."<td colspan=3 width=60% align=center>"
     ."Name (Last, First):<br><input type=\"text\" size=\"8\" name=\"last\"/>, <input type=\"text\" size=\"8\" name=\"first\" />"
     ."</tr>"
     ."<tr>"
     ."<td colspan=6 align=\"center\"><input type=\"submit\" value=\"submit\" />"
     ."</td>"
     ."</tr>"
     ."</tr>"
     ."</table>"
     ."<tr>"
     ."</tr>"
     ."</td>"
     ."</tr>"
     ."</table>"
     ."</body>"
     ."</html>";

?>



Here is the PHP:

<?php
@include 'accesscontrol.php';
//include 'common.php';
include 'db.php';

$fname = $_POST['first'];
$lname = $_POST['last'];

 
 $sql = "SELECT * FROM `user` WHERE UAID='$_POST[UAID]'";
 $result = mysql_query($sql);
 $rows = mysql_fetch_array($result);


if(isset($fname) && isset($lname))
{

echo "Post first $fname <br>"
     ."Post last $lname";
$firstname = $rows['firstname'];
$lastname = $rows['lastname'];

if($fname != $firstname OR  $lname != $lastname)
{
?>
<html>
<head>
<script language="JavaScript">
    alert(" Hello this is crap" ); 
    history.back(); 
 </script>";
</head>
</html>
<?
exit; 

}

else
{ 
 echo "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"
      \"URL\">"
     ."<html xmlns=URL>"
     ."<title> Hi </title>"
     ."<meta http-equiv=\"Content-Type\"
      content=\"text/html; charset=iso-8859-1\" />"
     ."<head>"
     ."<style type=\"text/css\">"
     ."h1{"
     ."border-bottom-style: double;"
     ."border-bottom-color: black;"
     ."border-bottom-width: 5px;"
     ."}"
     ."p{"
     ."background-color:#4682B4;"
     ."}"
     ."</style>"
     ."</head>"
     ."<body style=\"background-color:#B8B8B8\">"
     ."<table align=\"center\" style=\"background-color:#B8B8B8\" WIDTH=\"100%\" HEIGHT=\"100%\">"
     ."<tr valign=\"middle\">"
     ."<td align=\"center\">"
     ."<table align=\"center\" cellpadding=\"10\" style=\"background-color:#5CADFF\" width=\"600\" height=\"400\">"
     ."<tr>"
     ."<th colspan=6 align=\"center\"><h1>Welcome: ".$uid."</h1></th>"
     ."</tr>"
     ."<tr>"
     ."<form method=\"Post\" action=\"userview.php\">"
     ."<td colspan=3 width=40%>"
     ."UAID:  <input type=\"text\" size=\"8\" name=\"UAID\" value= ".$_POST['UAID']." /></td>"
     ."<td colspan=3 width=60%>"
     ."Name (LAST, FIRST):<input type=\"text\" size=\"8\" name=\"last\"  value= ".$_POST['last']." />,
      <input type=\"text\" size=\"8\" name=\"first\" value= ".$_POST['first']." />"
     ."</td>"
     ."</tr>"
     ."<tr>"
     ."<td colspan=3 width=40%>"
     ."Department:<input type=\"text\" size=\"8\" name=\"department\" value=" .$rows['BOG'].">"
     ."</td>"
     ."<td colspan=3 width=60%>"
     ."Employee ID:<input type=\"text\" size=\"8\" name=\"empID\" value=" .$rows['employeeID'].">"
     ."</td>"
     ."</tr>"
     ."<tr>"
     ."<td colspan=3 align=\"center\"><input type=\"submit\" value=\"View\">"
     ."</form>"
     ."</td>"
     ."<form method=\"Post\" action=\"homepage.php\">"
     ."<td colspan=3 align=\"center\"><input type=\"submit\" value=\"Back\">"
     ."</td>"
     ."</tr>"
     ."</tr>"
     ."</table>"
     ."<tr></tr></td></tr></table></body></html>";

}}
 mysql_free_result($result);
?>

This is really weird.below is the code

<input type="radio" name="rd" onchange="getpost('test1')">
<input type="radio" name="rd" onchange="getpost('test2')">

here is the javascript function

function getpost(x)
{
 document.getElementById("fillthis").value=x;
 document.frm1.submit();
}

here is frm1

<form name="frm1" method="post" action="<?php echo $_SERVER['PHP_SELF'];?>">
<input type="hidden" name="fillthis" id="fillthis">
</form>


here is my php code:

<?php

if(!empty($_POST['fillthis']))
{
  echo $_POST['fillthis'];
}

?>

The problem i had is that i can only get the $_POST['fillthis'] result in FF and GOOGLE CHROME but not in IE

can anyone help me with this? thanks

How do I post data when a user clicks a link?

I know that for a submit button you just use the name attribute, but I'm not sure how to do it with a link.

Hello,  I am quite new to the php and website scene and i am trying to find the best way to validate and sterilize my $_post the way i have come up with is 

$id = filter_var(mysql_real_escape_string($_POST['id']),FILTER_SANITIZE_NUMBER_INT);

or

$id = mysql_real_escape_string($_POST['id']);
$id1 = filter_var($id,FILTER_SANITIZE_NUMBER_INT);

which will be the best way to do it or is there a better way.   Thanks 
Edited by AdamHull12, 04 October 2014 - 11:15 AM.