PHP - Outputting Apostrophes Issue

i'm having problems with apostrophes causing an error on my contact form. I've tried stripslash and also str_replace but i can't get it to work. what am i doing wrong?

thanks 


Code: [Select]
<?php
if(isset($_POST['email'])) {
     
    // EDIT THE 2 LINES BELOW AS REQUIRED
    $email_to = "test@test.com";
    $email_subject = "test";
     
     
    function died($error) {
        // your error code can go here
        echo "We are very sorry, but there were error(s) found with the form you submitted. ";
        echo "These errors appear below.<br /><br />";
        echo $error."<br /><br />";
        echo "Please go back and fix these errors.<br /><br />";
        die();
    }
     
    // validation expected data exists
    if(!isset($_POST['contact_name']) ||
        !isset($_POST['last_name']) ||
        !isset($_POST['email']) ||
        !isset($_POST['telephone']) ||
        !isset($_POST['comments'])) {
        died('We are sorry, but there appears to be a problem with the form you submitted.');      
    }
    
    foreach($_POST['check'] as $value) { 
$check_msg .= "Checked: $value\n"; 
} 

    $contact_name = str_replace("'", "&#38;#039;", $contact_name); 
    $contact_name = $_POST['contact_name']; // required
    $last_name = $_POST['last_name']; // required
    $email_from = $_POST['email']; // required
    $telephone = $_POST['telephone']; // not required
    $comments = $_POST['comments']; // required
     
    $error_message = "";
    $email_exp = '/^[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}$/';
  if(!preg_match($email_exp,$email_from)) {
    $error_message .= 'The Email Address you entered does not appear to be valid.<br />';
  }
    $string_exp = "/^[A-Za-z .'-]+$/";
    
  if(!preg_match($string_exp,$contact_name)) {
    $error_message .= 'The First Name you entered does not appear to be valid.<br />';
  }
  if(!preg_match($string_exp,$last_name)) {
    $error_message .= 'The Last Name you entered does not appear to be valid.<br />';
  }
  if(strlen($comments) < 2) {
    $error_message .= 'The Comments you entered do not appear to be valid.<br />';
  }
  if(strlen($error_message) > 0) {
    died($error_message);
  }
    $email_message = "Form details below.\n\n";
     
    function clean_string($string) {
      $bad = array("content-type","bcc:","to:","cc:","href");
      return str_replace($bad,"",$string);
    }
     
    $email_message .= "Contact Name: ".clean_string($contact_name)."\n";
    $email_message .= "Agency/Company Name: ".clean_string($last_name)."\n";
    $email_message .= "Email Address: ".clean_string($email_from)."\n";
    $email_message .= "Dates Required: ".clean_string($telephone)."\n";
    $email_message .= "Type Required: ".clean_string($check_msg)."\n";
    $email_message .= "Any other info: ".clean_string($comments)."\n";


     
     
// create email headers
$headers = 'From: '.$email_from."\r\n".
'Reply-To: '.$email_from."\r\n" .
'X-Mailer: PHP/' . phpversion();
@mail($email_to, $email_subject, $email_message, $headers); 
?>
 
thanks
 
<?php
}
?>

Hi there,   I am getting this in a PHP generated email:   ACWA Member/Subscriber: Melody’s Children’s Service   The line of code in the php is:     $subject = "ACWA Member/Subscriber: $membername";   I have tried htmlentitiies, html_entity_decode, htmlspecialchars but nothing seems to work.   I haven't used htmlentities anywhere else in the code for this variable.   Any suggestions?   All advice gratefully received.

Hello, im trying to update my database with a paragraph of text in a texbox.

The thing is my paragraph has apostrophes

Look:
Code: [Select]
In the run up to the return of the Wilderness, we've released a new wallpaper depicting a green dragon, plus a couple of 'getting started' guides about the Wilderness and free trade.
It doesn't want to update my table and it shows the old paragraph.

Here is how my update database looks like.

<?php
if (isset($_POST['Submit'])) { 
for($i=0;$i<$count;$i++){
$month = $_POST['month'];
$date = $_POST['date'];
$message = $_POST['message'];



$title = $_POST['title'];
$monthday = $month[$i]."<br>".$date[$i];
$sql1="UPDATE $tbl_name SET monthday='$monthday', month='$month[$i]', date='$date[$i]', message='$message[$i]', title='$title[$i]' WHERE id='$id[$i]'";
$result1 = mysql_query($sql1);
} 
header("location:update2.php");
}
?>


Can someone show me to to make it add the strip slashes to the $message variable.

Thanks Alot!

onlinegamekey. com/MTGT-Auction.php is the page I'm working on.

The problem I'm having is cards with an apostrophe in the name breaks the operation.

I am populating the Select Box with the Card Names and those are coming in fine, its not until I try to use the select value to get that specific card data do I have an issue.
This query specifically
Code: [Select]
$quer2=mysql_query("SELECT * FROM auctions WHERE Card_Name ='$cards' Order By Price_Per") or die;
I've tried
$quer2=mysql_query("SELECT * FROM auctions WHERE Card_Name =" . htmlspecialchars($cards) . " Order By Price_Per") or die;
but then I get no data for any card.

Here is the page code I'm working with.

Code: [Select]
<?php
$cards = $_POST['cards'];
//SELECTING DATA FOR THE DROPDOWN
$sql = "Select Card_Name From auctions Group BY Card_Name ASC" or die;
$result = mysql_query($sql);
?>
<script type="text/javascript">
<!--
var optList;
var optsValue = new Array();
var optsText = new Array();
//when the page loads get the original options values and text and store them in arrays
window.onload = function() {
optList = document.getElementsByTagName("option");
for(var i=0; i<optList.length; i++) {
     optsValue[i] = optList[i].value;
     optsText[i] = optList[i].text.toLowerCase();   
}   
}
function searchSel(txtSearch) {
//clear all the current options
document.getElementById("items").options.length = 0;
var count = 0;
for(var i=0; i < optsValue.length; i=i+1) {
    if(optsText[i].indexOf(txtSearch.toLowerCase()) == 0) {  //match found
         //add this option to the select list options
         var newOpt = new Option(optsValue[i],optsText[i],false,false);
         document.getElementById("items").options[count] = newOpt;
         count = count+1;
    }
    }
}
function reload(form)
{
var f1 = document.forms['f1']
var val=f1.cards.options[f1.cards.options.selectedIndex].value;
self.location='MTGT-Auction.php?card=' + val ;
}
//-->
</script>
<style type="text/css">
body {
background-color:#000000;
}
.row-one {
    background-color: #666666;
    font-family: Arial, Helvetica, sans-serif;
font-size:12px;
font-weight: bold;
    line-height: 17px;
    color:#CCFF33;
}
.row-two {
    background-color: #333333;
    font-family: Arial, Helvetica, sans-serif;
font-size:12px;
font-weight: bold;
    line-height: 17px;
    color: #FF0;
}
.th {
background-color:#000000;
font-family:Arial, Helvetica, sans-serif;
font-size:14px;
font-weight:bold;
color:#CC0000;
padding: 2;
}
</style>
<!-- CREATE FORM & SELECT BOX -->
<form method="post" name="f1" action="MTGT-Auction.php">
    <select name="cards" id="items">
    <option value='0'>Select...</option>
    <?php while ($row=mysql_fetch_array($result)) {
if ($row['Card_Name']==@$cards) {
echo "<option selected value='$row[Card_Name]'>$row[Card_Name]</option>";
} else {
echo "<option value='$row[Card_Name]'>$row[Card_Name]</option>";
}
}
 ?>
    </select>
    <br />
     <input type="text" id="txt" value="Card Name?" onfocus="this.value==this.defaultValue?this.value='' :null" onkeyup="searchSel(this.value);" style="color:#000000; font:Arial; font-size:12px; background-color:#e1e1e1;" />
     <BR />
<input type="submit" value="Submit" name="submit" />
                        <input type=button onClick="location.href='MTGT-Auction.php'" value='Reset' />
            </form>
            <!-- CREATE TABLE WHERE DATA GOES -->
<table border="1" bordercolor="#000000">
<tr align="center">
<th class="th">Auction ID</th>
<th class="th">Card Name</th>
<th class="th">Cards Per Auction</th>
<th class="th">Auction Price</th>
<th class="th">Cost Per Card</th>
<th class="th">Date Listed</th>
<th class="th">Seller Name</th>
</tr>
<?php
//GET DATA FOR TABLE BASED ON SELECTED CARD & LOOP THROUGH
$quer2=mysql_query("SELECT * FROM auctions WHERE Card_Name ='$cards' Order By Price_Per") or die;
$i =1;
WHILE($row = mysql_fetch_array($quer2)) { 
if ($i%2 !=0)
$rowColor = "class='row-one'";
else
$rowColor = "class='row-two'";
echo "<tr $rowColor>" . "<td>" . $row[Auction_ID] . "</td><td>" . $row[Card_Name] . "</td><td>" . $row[Qty_Listed] . "</td><td>" . $row[Price] . "</td><td>" . $row[Price_Per] . "</td><td>" . $row[Date] . "</td><td>" . $row[Seller] . "</td></tr>";
$i++;
}
//}
?>
<?php
//QUICK CHECK IS OUR VARIABLE SET???
echo "<font color=\"#FFFFFF\">". $cards . "</font>";
?>
</table>
I image this is probably a very common problem & easy fix that has been answered many times, but I haven't found any thing that worked for me so any help.. or links to similar issues would really be appreciated.

Thank you,

Hello,

I'm trying to echo an additional variable using this:

$numincorrect = '<div id="incorrectnum">Sorry, that number was not correct.</div>';

I want to incorperate:

$code from require('send.php');

I've tried

$numincorrect = '<div id="incorrectnum">Sorry, that number was not "$code".</div>';

However, it literally displays $code on output.

Many thanks

I have mysql table with Type, Month, Date, and Quantity. I am doing query, and writing to xml which will pass to chart. My error is coming because for each <row> I need to have same number of child tags. For instance, if there are six months represented in first row (<header>), I need to have six <number> tags in all the following rows, even when there may not be any Quantity for that particular month in mysql table. Right now, if a particular Type in my table doesn't show quantity for some months, than I end up with fewer <number> tags. My php is here, and xml structure below:

Code: [Select]
//start the XML output
print "<chart>";
print "<chart_data>";

//output the first row that contains the years
print "<row>";
print "<null></null>";
$category = mysql_query ("SELECT prMonth FROM table1 GROUP BY prMonth ORDER BY prDate");
for ( $column=0; $column < mysql_num_rows($category); $column++ ) {
print "<header>".mysql_result ( $category, $column, "prMonth")."</header>";
}
print "</row>";


//output row 2 to 4. Each row contains a type name and its data (Qty, Prem, Comm ...)
$series = mysql_query ("SELECT prType FROM table1 GROUP BY prType ORDER BY prType");
for ( $row=0; $row < mysql_num_rows($series); $row++ ) {
print "<row>";
$type = mysql_result ( $series, $row, "prType");
print "<string>$type</string>";

$data = mysql_query ("SELECT SUM(prQty) FROM table1 WHERE prType='$type' GROUP BY prMonth ORDER BY prDate");
for ( $column=0; $column < mysql_num_rows($data); $column++ ) {
// Need to do something here to
// get number tags to show zero
// when there's no data for that
// month
print "<number>".mysql_result($data,$column)."</number>";
}
print "</row>";
}


//finish the XML output
print "</chart_data>";
print "</chart>";

XML structu

Code: [Select]
<chart>
<chart_data>
<row> ----this row will be the head row----
</null>
<header>Month name</header>
<header>Month name</header>
...
</row>
<row> ----this row will start body rows----
<string>Type name</string>
<number>total quantity for month, for this type</number>
<number>total quantity for month, for this type</number>
...
</row>
...
</chart_data>
</chart>

Hi there i have a basic query that is simply not outputting, i just dont get it. Im pretty sure the query is sound. If you can spot anything wrong here please let me know.

Code: [Select]
$colname_RecordSet1 = "-1";
if (isset($_SERVER['MM_Username'])) {
  $colname_RecordSet1 = (get_magic_quotes_gpc()) ? $_SERVER['MM_Username'] : addslashes($_SERVER['MM_Username']);
}
mysql_select_db($database_swb, $swb);
$query_resultp = sprintf("SELECT PlayerName, PlanetName, Class1, Class2, Class3, Class4 FROM planet WHERE PlayerName = %s", GetSQLValueString($colname_RecordSet1, "text"));
$resultp = mysql_query($query_resultp, $swb) or die(mysql_error());
$row_resultp = mysql_fetch_assoc($resultp);
$totalRows_resultp = mysql_num_rows($resultp);

<?php  do { 
echo 'Class: ';
echo $row_resultp['PlanetName'];
echo $row_resultp['Class1'];
echo $row_resultp['Class2'];
echo $row_resultp['Class3'];
echo $row_resultp['Class4'];

?>
  <?php } while ($row_resultp = mysql_fetch_assoc($resultp)); 

mysql_free_result($resultp); ?>
 
Thanks

I'm doing the following query where "ctext" comes from the clues table and "answerid" and "atext" come from the answers table...

Code: [Select]
$sql = "SELECT * from clues, answers
WHERE clues.quizid = '{$_GET['quizid']}'
AND answers.quizid = '{$_GET['quizid']}'";
$result = mysql_query($sql, $connection);
if (!$result) {
die("Database query failed: " . mysql_error());
} else {

while ($info=mysql_fetch_array($result)) {

echo "<tr><td>" . $info['answerid'] . "</td>";

echo "<td>".$info['ctext']."</td>";

echo "<td>".$info['atext']."</td>";

}
echo "</tr>";
}
}
But when this displays in the browser, it's outputting each result set twice and kinda mixed up.  For example, it looks like this...

1 monkey funny
1 cat funny
2 monkey boring
2 cat boring

But I want (i.e. was expecting) it to display as...

1 monkey funny
2 cat boring

Can anyone tell me why it's showing TWO rows for each and seemingly mixing  up the returned results?

Ultimate question is this.  Do I have to break apart the mysql queries in order to get PHP to display the results how I want?  I gotta think there is a way to do just one query and do what I want, but I obviously can't figure it out

Hello guys. I am facing a little problem on my website when I am trying to output the data from the database in the form of a table. If you go to http://sigmalogistix.com/track-trace/ and enter any on of the following B/L No's:

123456789
987651234
543216789

You can see that the table is being created but the data is not being shown to the user. If I switch back to the old code in which there was no table, then the data is being shown to the user upon entering the B/L No. Please help me guys. Attached below are the codes which I have inside the function.inc.php file and the index.php file.

function.inc.php

Code: [Select]
<?php
include 'db.inc.php';
function search_results($keywords) {
  $returned_results = array();
  $where = "";
  $keywords = preg_split('/[\s]+/', $keywords);
  $total_keywords = count($keywords);
foreach($keywords as $key=>$keyword){
        $where .= "`keywords` LIKE '%$keyword%'";
    if ($key != ($total_keywords - 1)) {
    $where .= " AND ";
     }
  }
  $results = "SELECT `Bill_No`, `Origin_City`, `Origin_Country`, `Destination_City`, `Destination_Country`, `Status`, `Current_Location` FROM `billoflading` WHERE $where";
  $results_num = ($results = mysql_query($results)) ? mysql_num_rows($results) : 0;
  if ($results_num === 0) {
    return false;
}   else {
    while ($results_row = mysql_fetch_assoc($results)) {
      $returned_results[] = array (
                'Bill_No' => $results_row['Bill_No'],
                'Origin_City' => $results_row['Origin_City'],
                'Origin_Country' => $results_row['Origin_Country'],
                'Destination_City' => $results_row['Destination_City'],
                'Destination_Country' => $results_row['Destination_Country'],
                'Status' => $results_row['Status'],
                'Current_Location' => $results_row['Current_Location']
     );
   }
  
   return $returned_results;
  }
  }
?>
index.php

Code: [Select]
<?php include 'func.inc.php'; ?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
       "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<title>search</title>
</head>
<body>
<form action="" method="POST">
    <p>
        <input type="text" name="keywords" size="17" maxlength="9" value="Enter B/L No." onfocus="if(this.value == 'Enter B/L No.'){this.value = '';}" /> <input type="submit" class="formbutton" value="Track" />
    </p>
</form>
<?php
if  (isset($_POST['keywords'])) {
 $suffix = "";
 $keywords = mysql_real_escape_string(htmlentities(trim($_POST['keywords'])));
$errors = array();
if (empty($keywords)) {
  $errors[] = '';
 } else if (strlen($keywords)<9) {
  $errors[] = '<br><strong>Your Bill of Lading Number must contain 9-digits.</strong>';
 } else if (search_results($keywords) === false) {
  $errors[] = '<br><strong>Please enter a valid Bill of Lading Number.</strong>';
 }
if (empty($errors)) {
   $results = search_results($keywords);
   $results_num = count($results);
   $suffix = ($results_num !=1) ? 's' : '';
   foreach($results as $result) {
     echo '<br><table>
    <thead>
        <tr>
            <th><strong>B/L No.</strong></th>
            <th><strong>Origin City</strong></th>
            <th><strong>Origin Country</strong></th>
            <th><strong>Destination City</strong></th>
            <th><strong>Destination Country</strong></th>
            <th><strong>Status</strong></th>
            <th><strong>Current Location</strong></th>
        </tr>
    </thead>
    <tbody>
    <?php
    while ($row = mysql_fetch_assoc($results) {
    ?>
        <tr>
            <td><?php echo $row["Bill_No"]; ?></td>
            <td><?php echo $row["Origin_City"]; ?></td>
            <td><?php echo $row["Origin_Country"]; ?></td>
            <td><?php echo $row["Destination_City"]; ?></td>
            <td><?php echo $row["Destination_Country"]; ?></td>
            <td><?php echo $row["Status"]; ?></td>
            <td><?php echo $row["Current_Location"]; ?></td>
        </tr>
    <?php
    }
    ?>
    </tbody>
</table>';
 }
 } else {
   foreach($errors as $error) {
    echo $error, '</br>';
  }
 }
}
?>
</body>
</html>

Hi guys,

I am very simply inserting text into a table with php and mysql, and outputting it, it all works fine but when I use paragraphs when inserting it, and then try to ouput it, all the paragraphs are gone and it looks like one big block of text, I suppose the way to go around this is to use <br> instead of just enters as it probably doesnt read this, but is it possible to make this text area do read and insert <br>'s where people use enter to make paragraphs?

Much help appreciated, I realize this must be a very beginner question but I am not really sure how to word this so I wasn't sure on specific search on this.

On my website, I have Sticky Forms that use the following style code...

<input id="firstName" name="firstName" type="text" maxlength="30"
value="<?php if(isset($firstName)){echo htmlspecialchars($firstName, ENT_QUOTES);} ?>" /><!-- Sticky Field -->




Do I need to use htmlspecialchars($firstName, ENT_QUOTES); anytime I output data to the screen??


For example, in this code do I need to wrap $username??

echo ' <div class="userInfo">
<a href="#" class="username">
<strong>' . $username . '</strong>
</a>';



Debbie

The code below is in a PHP file, but is really HTML with nested PHP.


<img src="<?php echo WEB_ROOT; ?>images/BeachSunset.jpg" width="200"
 alt="Pictu  Beach Sunset."
 title="Pictu  Beach Sunset." />


I want to put it in a MySQL record and output it using PHP.

So how do I re-write this code so that it can be displayed with the same end effect using a PHP Echo statement??

(I seem to be having trouble figuring things out with MySQL in the way?!   

Thanks,


Debbie

At the moment I have multiple pages with different HTML tables coded in (some have 5 columns and some 6 etc) and PHP echoing out data to populate from the database. The table in each page holds different data. It looks messy to me to code a different table for every page so I'm wondering if it's possible to create a function to do this? The function would have to print tables with different amounts of columns and echo out different data depending on what the page is along with table headers etc. How would I go about that? 

Hello guys i am doing a search function whereby users can check whether a setting is Pass or Fail. After user press the search button, it will return the file which contain the settings the user wants. However i have encountered a problem, currently i am using if statement and && operator to search for file so if the file is missing a string whereby the preg_match function couldn't find it, it will not output the file if i check another setting. Hence i am interested on what other options can i use.

Also, Is it possible to use while loop? I tried for awhile and my browser just keeps loading and loading.

Thanks for the help!




Example: I want to check File 1 for Maximum Password Age settings but it does not contain Service Pack Requirement string...








if ((preg_match("/\bService Pack Requirement:(.*)./", $allFiles)) && (preg_match("/\bMaximum Password Age Requirement:(.*)./", $allFiles))
&& (preg_match("/\bMinimum Password Length:(.*)./", $allFiles)) && (preg_match("/\bAudit Account Logon Events:(.*)./", $allFiles))
{
echo "<a href=\"$file\" target=\"_blank\"> $file </a><br />";
}

Hi   I have a self calling script which does the following:   Stage 1: First run, it detects that $_POST is empty, and so displays a chunk of html which prompts for a password. Stage 2: When resubmitted, it detects $_POST and displays another chunk of html which prompts the user for some values Stage 3; When resubmitted the second time, $_POST is detected, along with the user values and some php is executed and a menu displayed.   So, question is this, what is the best method to output the html at stage 1 and stage 2? I have tried using echo statements and wrapping each chunk in a function = messy.  I have tried using HEREDOCS (<<<VARNAME), better but ties my HTML to my script which is a pain I am thinking to use file_get_contents("../html/chunk1.htm") this seems quite elegant and allows me to get someone else on our team to design the HTML keeping it out of my script   Thoughts and suggestions?   Thanks as ever   p.s. who pays for this site, are donation accepted?