PHP - All Entries From Db Passed To Output File In Error

I use this code:
Code: [Select]
<?php
$databasehost = "localhost";
$databasename = "export_ajur";
$databasetable = "invoice";
$databaseusername ="root";
$databasepassword = "password";
$fieldseparator = ",";
$lineseparator = "\n";
$csvfile = "1.csv";

$addauto = 0;


$save = 1;
$outputfile = "output.sql";
if(!file_exists($csvfile)) {
echo "File not found. Make sure you specified the correct path.\n";
exit;
}
$file = fopen($csvfile,"r");

if(!$file) {
echo "Error opening data file.\n";
exit;
}

$size = filesize($csvfile);

if(!$size) {
echo "File is empty.\n";
exit;
}

$csvcontent = fread($file,$size);

fclose($file);

$con = @mysql_connect($databasehost,$databaseusername,$databasepassword) or die(mysql_error());
@mysql_select_db($databasename) or die(mysql_error());

$lines = 0;
$queries = "";
$linearray = array();

foreach(explode($lineseparator,$csvcontent) as $line) {

$lines++;

$line = trim($line," \t");

$line = str_replace("\r","",$line);


$linearray = explode($fieldseparator,$line);

$linemysql = implode("','",$linearray);

if($addauto)

$query = "insert into $databasetable values('$linemysql');";
else
$query = "insert into $databasetable values ('$linemysql');";

$queries .= $query . "\n";

@mysql_query($query);
}

@mysql_close($con);

if($save) {

if(!is_writable($outputfile)) {
echo "File is not writable, check permissions.\n";
}

else {
$file2 = fopen($outputfile,"w");

if(!$file2) {
echo "Error writing to the output file.\n";
}
else {
fwrite($file2,$queries);
fclose($file2);
}
}

}

echo "Found a total of $lines records in this csv file.\n";


?>

And th output is:

Code: [Select]
insert into invoice values ('ID_PURCHASE_INVOICE','DOC_TYPE_NAME','DOC_EXT_CODE','DOC_NUM','DOC_DATE','WOVAT_AMOUNT','VAT_AMOUNT','TOTAL_AMOUNT','CONTRAGENT_NAME','CONTRAGENT_BULSTAT','CONTRAGENT_VATNUMBER','CONTRAGENT_POST_ADDRESS','CONTRAGENT_ZIP','CONTRAGENT_CITY','CONTRAGENT_AREA','CONTRAGENT_STREET','CONTRAGENT_MOL','CONTRAGENT_PHONE','CONTRAGENT_BANK','CONTRAGENT_BANK_CODE','CONTRAGENT_BANK_ACCOUNT','CONTRAGENT_EXT_CODE','CONTRAGENT_EMAIL','PAYMENT_NAME','DOC_MARKER1','DOC_MARKER2','DOC_MARKER3','DOC_MARKER4','DOC_MARKER5','DOC_MARKER6','DOC_MARKER7','DOC_MARKER8','DOC_MARKER9','DOC_MARKER10');
insert into invoice values ('108826','ДАНЪЧНА ФАКТУРА','1','111366','2/15/2012','160.08','32.02','192.1','ПРЕЦИЗ ООД','103565237','BG103565237','ВАРНА ГЕН.КОЛЕВ 38','','','','','','','','','','','','БАНКА','','','','','','','','','','');
insert into invoice values ('108830','ДАНЪЧНА ФАКТУРА','1','1002304974','2/15/2012','872.33','174.46','1046.79','ОМВ БЪЛГАРИЯ ООД','121759222','BG121759222','','','СОФИЯ','','','','','','','','','','БАНКА','','','','','','','','','','');
insert into invoice values ('');

I need to remove last line ' insert into invoice values (''); . How to change my code?

I'm trying to display error messages on the same page that submits a form (register_page.php).   So in the script that executes the form submission, I create an array to hold all the error messages, and towards the end of the script I include a conditional at the end, which does the following if there are errors:  First  I convert the $errors array into a string, url encode it, then pass it into the url of the target page (register_page.php).   Then on the target page, I retrieve the message through GET, url decode it, reconvert it to an array and try to print it out the contents of the array. So here is the excerpt of the conditional on the execution page:
Code: [Select]

//Display error messages.


} else {// if errors array is not empty

//Conver the errors array into a string

$errors_string = implode(" ", $errors);

//Encode the imploded string.

$message = urlencode($errors_string);


header("Location: register_page.php?message=$message");

       
    }


And here is the code for the target page: Code: [Select]

</div> <!--closes register box-->


<div id="error">


<?php   if(isset($_GET['message'])) {

//Decode the url

$errors_string = urldecode($_GET['message']);

//Explode the decoded errors string back to an array.
                
$errors = explode(" ", $errors_string);

echo '<h3>Error!</h3>
         The following error(s) occured:<br />';

       
         foreach ($errors as $msg) {
             echo "$msg<br/>\n";
         }


  }

?>

</div> <!--closes error-->

Now everything works just fine, except that the error messages are printed one word per line for example
Your
email
is
not
a
valid
email
address.

I can't seem to find the fluke in the code.  Any ideas? Also is there any potential security risk for passing error messages in a url?  No sensitive information is being transmitted.  Just error messages.

I am attempting to get my email form with file attachment to work. Apparently the file is not reaching getting to the validation portion of the page I have switched $_FILES['X'] on line 203 from file to fakefile as they are labeled in the form also I am employing css hacks to change the input file upload field to have a custom button example -> http://visualrealityink.com/dev/clients/arzan/snell_form_final/form.php

here is my code I appreciate any help
Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<style>
    #form_container{ display:block; position:absolute; width:610px; min-height:450px; background:#f8f8f8; padding: 5px 5px 5px 5px; font-family:Arial, Helvetica, sans-serif; font-size:14px; }
    #form { min-height:450px; width:100%; background:#ececec; padding:0 0 0 0; }
    #formheader { background:url(images/form2_08.png) no-repeat #2f2f2f; margin:0 0 0 0; padding:0 0 0 0; width:631; height:30px;}
    form{margin:35px 0 0 35px;}
     fieldset div
     {
        margin:0.3em 0;
        clear:both;
     }
     label
     {
        float:left;
        width:10em;
        text-align:left;
        margin-right:1em;
font-family:Arial, Helvetica, sans-serif;
font-size:14px;
     }
     input
     {
        padding:0.15em;
margin:0 0 0 -110px;
        width:300px;
background:url(images/inputbg.png) no-repeat;
        border:0px solid #ddd;
        background:#fafafa;
        -moz-border-radius:0.4em;
        -khtml-border-radius:0.4em;
    }
.bg2{background:url(images/inputbg.png) no-repeat; height:28px; line-height:28px;}
     
    fieldset
    {
        border:0px solid #ddd;
        padding:0 0.5em 0.5em;
margin:0 0 0 -100px;
    }

    #details{font-size:10px;}
    #logo{background:url(images/form2_11.png) no-repeat; width:189px; height:238px; margin:-200px 0 0 400px; position:absolute;}
    #submit{margin:14px 0 0 -5px; border:none; position:absolute; cursor:pointer; cursor:hand;}
    #reset{border:none; margin:14px 0 0 115px; position:absolute; cursor:pointer; cursor:hand; }
    #divinputfile{
     background:url(images/form2_27.png) no-repeat 100% 1px;
     height:43px;
     line-height:43px;
     width:340px;
     
    }#divinputfile #filepc{
     opacity: 0.0;
     -moz-opacity: 0.0;
     filter: alpha(opacity=00);
     font-size:18px;
     margin:0 0 0 0;
cursor:hand; cursor:pointer;

}
    #fakeinputfile{
     margin-top:-28px;
    }
    #fakeinputfile #fakefilepc{
background:url(images/inputbg2.png) no-repeat; style:none;
width:240px;
height:28px;
line-height:28px;
border:0;
margin:5px 0 0 0;
font-size:18px;
font-family:Arial;
     }
button {
cursor: hand;
cursor: pointer;
padding: 0px;
margin: 0 0 0 0;
    }
    a.link_button{
    cursor: hand;
    cursor: pointer;
    }
.fileupload{
margin:0 0 0 50px;
}
    input[type="file"] { cursor: pointer; } 
    .error{font-size:9px; font-family:Arial, Helvetica, sans-serif; color:#F00; }
    .error ul { text-decoration: none; list-style: none; }
    .error li { color: #F00;}       
.captcha_form { margin: 0 0 0 -45px; width:235px; }
#captchaimage{ padding:0 0 10px 0;}
.small { font-size:9px;}
</style>

</head>

<body>
<?php

  if ($_POST['_submit_check']) 
{
    // If validate_form( ) returns errors, pass them to show_form( )
    if ($form_errors = validate_form()) 
    {
        show_form($form_errors);
    } else {
    // The submitted data is valid, so process it
        process_form();
    }
} else {
// The form wasn't submitted, so display
    show_form();
}

function show_form($errors = '')
{
// If the form is submitted, get defaults from submitted parameters
    if ($_POST['_submit_check']) 
    {
        $defaults = $_POST;
    } else 
    {
    // Otherwise, set our own defaults: medium size and yes to delivery
        $defaults = array('IssueDate' => '','ExpiryDate' => '');
    }
    if ($errors) 
    {
        $error_text = 'You need to correct the following errors:';
        $error_text .= '<br /><ul>';
        $error_text .= implode('<li>',$errors);
        $error_text .= '</li></ul>';
    } else 
    {  
    // No errors? Then $error_text is blank
    $error_text = '';
    }
    include 'formhelpers.php'
    ?>
     <div id="form_container">
  <div id="form">
  <br />
      <div id="formheader">
    </div>
        <form method="POST" action="<?php print $_SERVER['PHP_SELF']; ?>" enctype="multipart/form-data">
         <span class="error"> <?php print $error_text ?> </span>
         
         <input type="hidden" name="_submit_check" value="1"/>
          <div>
            <label for="name">Name: </label>
            <?php input_text('name', $defaults) ?> </div>
        <div>
        <label for="email">Email:</label>
        <?php input_text('email', $defaults) ?>  </div>
       
       <div> Attach Resume:
       <span class="small">(1MB : PDF : DOC : DOCX : TXT)</span>
         </div>
           
          <div>
                <!--<input type="hidden" name="MAX_FILE_SIZE" value="1000000" />
                <label for="userfile"></label>
                <input type="file" name="userfile" id="userfile"/> </div>-->
                <div id="divinputfile">
      <input name="file" type="file" size="30" id="filepc" onchange="document.getElementById('fakefilepc').value = this.value;"/>
      <div id="fakeinputfile">
      <input name="fakefile" type="text" class="link_button" id="fakefilepc" />
      </div>
</div>

        <div id="captchaimage"><img id="captcha" src="/securimage/securimage_show.php" alt="CAPTCHA Image" /></div>
        <div><label for="email"><a style="text-decoration: none" href="#" onclick="document.getElementById('captcha').src = 'securimage/securimage_show.php?' + Math.random(); return false">New Captcha: </a></label>
         <input type="text" name="captcha_code" class="captcha_form" size="10" maxlength="6" /> </div>
         
         <button type="submit" value="submit" id="submit" ><img src="images/form2_33.png" /></button> <button type="reset" value="reset" id="reset" ><img src="images/form2_37.png" /></button>
         
         </form>
        </div>
    <div id="logo"></div>
  </div>
</div>
    <?php
    
}
function validate_form()
{
    $errors = array( );
    // name is required
    if ($_POST['name'] == "") 
    {
        $errors[ ] = 'Please enter your name.';
    }
    if (! strlen(trim($_POST['email']))) 
    {
        $errors[ ] = 'Please enter your Email.';
    }
    if (! preg_match('/^[^@\s]+@([-a-z0-9]+\.)+[a-z]{2,}$/i', $_POST['email'])) 
    {
        $errors[ ] = 'Please enter a valid e-mail address';
    }
    
    $filename=$_FILES['file']['name'];
    //For size
     
    if($_FILES["file"]["size"]>1000000) //1 mb
        {
            $errors[ ] = "File size should be less than 1MB";    
        }
     
    // for extention
     
 $ext = end(explode('.', $filename));


    
    if($ext=='doc' || $ext=='txt' || $ext=='pdf' || $ext=='docx' )
    {
        echo "write the code to upload file";
$max_allowed_file_size = 1024; // size in KB   
$name_of_uploaded_file =  basename($_FILES['file']['name']);  
//get the file extension of the file  
$type_of_uploaded_file = substr($name_of_uploaded_file, strrpos($name_of_uploaded_file, '.') + 1);
$size_of_uploaded_file =  $_FILES["file"]["size"]/1024;//size in KBs 
//copy the temp. uploaded file to uploads folder  
$upload_folder = 'upload/';
$path_of_uploaded_file = $upload_folder . $name_of_uploaded_file;  
$tmp_path = $_FILES["file"]["tmp_name"];  
if(is_uploaded_file($tmp_path)) {  
if(!copy($tmp_path,$path_of_uploaded_file)){  
echo 'error while copying the uploaded file';
die();
}
}  
    }
    else
    {
        $errors[ ] = "Only doc or pdf or txt file is allowed: $filename ";
    }

     
     
     return $errors;
}

function process_form()
{
     

                 
                    $image = "http://www.visualrealityink.com/dev/clients/arzan/snell_form/images/email.png";
                    include_once('Mail.php');  
                    include_once('Mail_Mime/mime.php'); 
                    $to = 'george@visualrealityink.com';
                    $text = $image . "<br />" . $values['name'] . "submitted a resume on our website. Please review the applications and contact the candidate if their resume is a fit for any open opportunities with the company. <br><br> Thank you. <br><br> SEI Team";
                    $message=new Mail_mime();
                    $message=setTXTBody($text);
                    $message=addAttachment($path_of_uploaded_file);
                    $body = $message->get();
                    $extraheaders = array("From"=>$formValues['email'], "Subject"=>$subject, "Reply-To"=>$formValues['email']);
                    $headers = $message->headers($extraheaders);
                    $mail = Mail::factory("mail");
                    $mail->send($to, $headers, $body);
                    echo "email sent"; 

    

}
?>
</body>
</html>

please it is very important!!
I have a script (main file is index.php) that is called into an iframe src via an url reference... http://www.xxxx.com/folder/userfolder/folderwithemailname/index.php
works perfectly!!..

How can i prevent someone getting direct url access to the file?
if someone were to take the url:    http://www.xxxx.com/folder/userfolder/folderwithemailname/index.php and place it into the address bar, they have access to the file...

points to note:
-i have no database for this script,
-the iframe is called directly into a html file,
- i dont know the userfolder or the emailfolder names,
- and the index.php is linked to several other .php and .js and .html files in different folders.... // i can add something like this to these file:(i found this on the net).
Add this to the page that you want to only be included

<?php
if(!defined('MyConst'){die('Direct access not premitted');}
?>

then on the pages that include it add

<?php
define('MyConst', TRUE);
?>

this will prevent the files being accessed, but then i cant access the file via the iframe url..

please any ideas???
best regards
Tony