PHP - $_post Filter

Hello,
I have a client with a "contact us" form who has recently been receiving a lot of spam emails from the form.  I already have a session set in place so the form is only active one time.  I am now creating a filter for the message to look for things like a url or bb style codes etc.  What I've got seems to be working but would like your thoughts on maybe a better way of doing it or if you see something I may be missing.  IF an offending text is detected the ip address is sent to me and I can block ip from the site.  If the message passes it is sent to the client.  This is the related code.
Code: [Select]
<?php
$themessage=str_replace("\r",'<br>',$_POST['message']);

$badwords=array("[", "url", "http", "link", ".com", ".net", ".org", ".biz", "<");
$o=0;
foreach($badwords as $key2 => $value2){
    $pos = strpos($themessage, $value2); 
if ($pos==0) {
}
else{ 
$o=$o+1;
}
} 
if ($o==0) {
//compose and send email to client
}
else{
$useraddress=$_SERVER['REMOTE_ADDR'];
//compose and send email to me containing offending address
}
?>

I have a MySql table full of records.

id
owner
car
location

on my page i have these results in a table i want to set a filter up so the table will only show cars from eg location England.
at the minute its just set to show cars that owner has but i want a location filter any help

Hello Guys,

I need some help  here.. I want to implement a Bad word filter and not quite sure how to do it..

I am grabbing the following vars from the text fields

$ad_title = filter_var($_POST['ad_title'], FILTER_SANITIZE_STRING,FILTER_FLAG_NO_ENCODE_QUOTES);
$ad_body = filter_var($_POST['description'], FILTER_SANITIZE_STRING,FILTER_FLAG_NO_ENCODE_QUOTES);

Then its inserted into the db.

I would like to run it through this function first..

Code: [Select]

FUNCTION BadWordFilter(&$text, $replace){

 
     // fill this array with the bad words you want to filter and their replacements
     $bads = ARRAY (
          ARRAY("butt","b***"),
          ARRAY("poop","p***"),
          ARRAY("crap","c***")
     );
 
     IF($replace==1) {                                        //we are replacing
          $remember = $text;
 
          FOR($i=0;$i<sizeof($bads);$i++) {               //go through each bad word
               $text = EREGI_REPLACE($bads[$i][0],$bads[$i][1],$text); //replace it
          }
 
          IF($remember!=$text) RETURN 1;                     //if there are any changes, return 1
 
     } ELSE {                                                  //we are just checking
 
          FOR($i=0;$i<sizeof($bads);$i++) {               //go through each bad word
               IF(EREGI($bads[$i][0],$text)) RETURN 1; //if we find any, return 1
          }     
     }
}
 
// this will replace all bad words with their replacements. $any is 1 if it found any
$any = BadWordFilter($wordsToFilter,1);
 


I really would also like to query a table for any words that match and then use a replacement like [censored]

Any help would be greatly appreciated!

Hi All

I have a script which imports values from a csv file created using excel.   However there are several blank values within the file where the person creating it has used blank columns to create whitespace in the file.

I have used array_filter to remove these from the array, however how do I remove the redundant keys and 'squash' everything together so it is nice and neat?

eg
import would be , ,id, , surname, ,firstname, ,DOB, , address, ,

which returns array after array_filter
[1]-> id
[3]->surname
[5]->firstname
[7]->DOB
[9]->address

I want to return as an array which would be
Quote

[0]-> id
[1]->surname
[2]->firstname
[3]->DOB
[4]->address


Is there a function to do this or would I need to create a custom one?

Hi.

I was hoping someone could tell me whether this is possible and if so how I could go about doing it preferably with a tutorial as im pretty new to programming.

I have a database that will contain 100's of records. I want users to be able to select filter parameters on this data by both text and checkboxes with it automatically updating the results (hopefully without page reload).

I managed this so far using this Jquery filter script: http://www.picnet.com.au/picnet-table-filter.html. As this will table will have so many rows however I think it would take ages to load so instead I would like to paginate the table but still allow filters applied to affect all records not just the ones displayed on the current page.

Any ideas on how i could do this? Thanks in advance for your help.

Code: [Select]
SELECT *
FROM table1,table2,table3,table4,table5
WHERE table1_f = table2_id
AND table1_g = table3_id 
AND table4_p = table1_id
AND table5 _m = table4_id
ORDER BY RAND()
LIMIT 1
Right, Now What I want to do, is have a filter form, which posts to the above, and if:

$filter1 = "";

it wont be include in the above code

$filter1 = "word";

then i want to include

AND table3_n = '$filter1';

in the above code

thanks in advance.

Hi !

I have an 2d array like this:
                     column 1              column 2          column 3
                      $data[0][0]      $data[0][1]    $data[0][2]
$data[0][0]    RDR                   -1.3                0.001
$data[1][0]    RQR                    0.4                0.01
$data[2][0]    DDR                    1                   0.00004
and more...

Now i need to filter this data. I only need the rows with column 3 < 0.01 AND column2 > 1 or column 2 < -1 .
I have this, but it doesn't work:

$teller = 0;
for($i = 0; $aantal>$i; $i++)
{
   if($data[$i][2]<=0.01)
   {
      
      $p[$teller][0] = $data[$i][0];
      $p[$teller][1] = $data[$i][1];
      $p[$teller][2] = $data[$i][2];   
      $teller++;
   }
}
$teller2 = 0;
for($i = 0; $teller>$i; $i++)
{
   
   if($p[$i][1] < -1 || $p[$i][1] > 1 )
   {
      #als de p value kleiner is dan 0.01 dan alles kopieren in een nieuwe array
      $r[$teller2][0] = $p[$i][0];
      $r[$teller2][1] = $p[$i][1];
      $r[$teller2][2] = $p[$i][2];   
      $teller2++;
   }
}

Can you help me?

Hi there,

I have one question about the function rand(),

What if i want to have an number between 0 and 360

Without 90 to 180

so 91,92,93,94.....180 can't be the number

how can i do that?

btw, I know its possible through if,while,for and so on. But is there an other way to do this?

Hi,   I'm trying to make a program that filters data out of a website. Now I've got a problem. For example, I've this line:

<td class="maintxt" width="200"><a href="profile.php?x=Stranger">Stranger</a></td><td class="maintxt" width="200">Godfather (96.76%)</td><td class="maintxt" width="200"><i><a href="clanprofile.php?x=Ettertjes">Ettertjes</a></i></td>

Form this line I want to set the word "Stranger" in a variable, and do the same for the word "Godfather". What is the best method to do this?   Thanks in advance, iRoot121

hi all i just read an article at http://www.phpro.org/tutorials/PHP-Security.html
about not trusting server variables like $_SERVER['PHP_SELF']

so they explain, it can't be trusted and so on, but when it comes to a real life example i have difficulty understandig what someone could do with it since i assume it only has effect at client side.  they use a form and say that
Code: [Select]
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
   ...
</form>

They give as example that someone could do the following: add
Code: [Select]
<script>alert("XSS HERE");</script>
But i don't see how that would have effect to anyone except for the one that inserts that.
Could someone maybe explain this a little to me.

Hey,

I have a word filter which is dectecting strings that are only embedded in words. Which i don't want it to do.

For example:

If i want to filter "FR" and some one puts france - it flags it because france contains FR.

How do i make it only look for "FR" on its own seperated from a word instead of it flagging nearly all words with the two letters together?

Heres my filter:


$text = 'testing';  //this should not return 1
  // fill this array with the bad words you want to filter and their replacements
     $bads = array ("test");

                
foreach($bads as $key => $search_needle) {

   if(stristr($text, $search_needle) == TRUE) {
       return(1);
       break;
        }
    }

HI all,

Yesterday i read quite alot about htmlentities() htmlspecialchars() mysql_real_escape_string
But today i stumbled upon filter()  (http://www.w3schools.com/php/php_filter.asp). Does anyone know if this is also a good way to sanitize and may even be an alternative for the other functions? OR is it something completly different? I am still a novice with this so please enlighten me : )

TY

I have some text boxes for searching the students in database

also i have a drop down box for selecting student with balance amount to be paid

tell me how to filter or search the list of stuents
Code: [Select]
<select>
            <option value="">All </option>
            <option value="">Unpaid </option>
            <option value="">Paid </option>
        </select>

hey guys
I know this is html but I'm using the php $_POST to grab the information the user chooses, i can't figure out though how to grab the info i'm looking for in this select option form
if they choose PasswordCracker v3.0 what is it i'm looking to set my $_post['']; to?

<FORM action="buy.php" method="POST">
    <select name="passwordcrakers">
      <option value="v2.0">PasswordCracker V2.0</option>
      <option value="v3.0">PasswordCracker V3.0</option>
      <option value="v4.0">PasswordCracker V4.0</option>
      <option value="v5.0">PasswordCracker V5.0</option>
      <option value="v6.0">PasswordCracker V6.0</option>
      <option value="v7.0">PasswordCracker V7.0</option>
      <option value="v8.0">PasswordCracker V8.0</option>
      <option value="v9.0">PasswordCracker V9.0</option>
      <option value="v10">PasswordCracker V10</option>
        </select><br />
<input type="submit" value="Buy" name="submit" />
</FORM>

I use a form to sent date and  use php to display it . However , the code only can working on one page. I can not turn the page. I do not why . Please tell me reason . Thank you very much.

<select name="kind">
  <option >kind</option>
 <option value="Copier Toner">Copier Toner</option>
        <option value="Laser Toner">Laser Toner</option>
      <option value="MICR Toner">MICR Toner</option>
      <option value="Inkjet">Inkjet</option>
    
php code

if (isset($_GET["page"])) { $page  = $_GET["page"]; } else { $page=1; };
$start_from = ($page-1) * 18;



$select="select * from $chun where  brand = '$_POST[brand]' or  sort ='$_POST[kind]' or type='$_POST[type]'  LIMIT $start_from, 18";

$result2=mysql_query($select, $connection) or die (mysql_error());

 <?php
   $sql = "select count(*) from $chun  where   brand = '$_POST[brand]' or sort='$_POST[kind]' or type='$_POST[type]' ";

   
$rs_result = mysql_query($sql,$connection);
$row = mysql_fetch_row($rs_result);
$total_records = $row[0];
$total_pages = ceil($total_records / 18);
 
for ($i=1; $i<=$total_pages; $i++) {



?>


      <div class="trunpage"><a href='table2.php?page=<?php echo  "$i" ; ?>&id=<?php echo "$_POST[brand]";?>&cd=<?php echo "$_POST[kind]";?>&td=<?php echo "$_POST[type]";?>'  ><?php echo  "$i" ; ?></a>
      
       </div>
   
The first page is working fine. The second page I get error message.

Undefined index: brand in C:\wamp\www\php1000\table2.php on line 234