PHP - Passing String Variable From Html Form To Another Php Script

I have a contact form in html with captcha image.The Captcha image is randomnly created using a php file and stored in a session variable.
But when i check whether the session (captcha variable) and the use entered captcha value i dont get answer.
posting my code below

Code: [Select]
contact.php(html's action page)
if(isset($_POST['csubmit']))
{
$name=$_POST['cname'];
$lname=$_POST['last_name'];
$email=$_POST['cemail'];
$tele=$_POST['telephone'];
$comments=$_POST['comments'];
$date_posted=date('Y:m:d H:i:s');$status='Inactive';
$security_code=$_POST['security_code'];
//echo $security_code;
//echo"<br>". $_SESSION['security_code'];

//$_SESSION['security_code'] = $code;
//echo $_SESSION['security_code'];
//if( $_SESSION['security_code'] == $_POST['security_code'] && !empty($_SESSION['security_code'] ) ) {
//if(!(empty($_SESSION['security_code'] ) ||strcmp($_SESSION['security_code'], $_POST['security_code']) != 0))

//if(empty($_SESSION['security_code'] ) || $_POST['security_code']) != 0)
 

 //if( $_SESSION['security_code'] == $_POST['security_code'] && !empty($_SESSION['security_code'] ) ) {
$sql="insert into contact_us(first_name,last_name,email,contact_number,comments,status,date_posted) values('$name','$lname','$email','$tele','$comments','$status','$date_posted')";
$res=mysql_query($sql);


$mail_to_user ="qq@qq.com";
$mail_subject_user="Comments  ";
$mail_body_user='<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td colspan="3"> Sir,<br> Please see the comments </td>
</tr>
<tr>
<td width="20%">&nbsp;</td>
<td width="14%"><strong>First Name</strong></td>
<td width="66%">'.$_POST[cname].'</td>
</tr>
<tr>
<td>&nbsp;</td>
<td><strong>Last Name</strong></td>
<td>'.$_POST[last_name].'</td>
</tr>
<tr>
<td>&nbsp;</td>
<td><strong>Email</strong></td>
<td>'.$_POST[cemail].'</td>
</tr>
<tr>
<td>&nbsp;</td>
<td><strong>Telephone Number</strong></td>
<td>'.$_POST[telephone].'</td>
</tr>
<tr>
<td>&nbsp;</td>
<td><strong>Comments</strong></td>
<td>'.$_POST[comments].'</td>
</tr>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>
</table>';


$headers_user="MIME-Verson:1.0\n";
$headers_user.="Content-Type: text/html;charset=iso-8859-1\n";
$headers_user.="Content-Transfer-Encoding: 8bit\n";
$headers_user.="From: bb@qq.com\n";
$headers_user .="Bcc: aa@gg.com\r\n";
mail($mail_to_user,$mail_subject_user,$mail_body_user,$headers_user);
echo "<script language='javascript'>alert('Message has been sent to the Administrator.');</script>";

//=================email to user
$mail_to_user1 = $_POST['cemail'];
$mail_subject_user1 = "Thanks for contacting with us ";

$mail_body_user1 ='<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td> Sir,<br>
We are very much glad to hear from you. We will contact you soon. <br/><br/> Thanks,
<br/>Cusrtomer Care</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>
</table>';

$headers_user1="MIME-Verson:1.0\n";
$headers_user1.="Content-Type: text/html;charset=iso-8859-1\n";
$headers_user1.="Content-Transfer-Encoding: 8bit\n";
$headers_user1.="From: aa@qq.com ";

mail($mail_to_user1,$mail_subject_user1,$mail_body_user1,$headers_user1);


//header('Location:contact_us.html');
echo "<script> self.location='contact_us.html';</script>";
//}
/*else{

      //Note: the captcha code is compared case insensitively.
      //if you want case sensitive match, update the check above to
      // strcmp()
  //unset($_SESSION['security_code']);
  echo"<script language='javascript'>alert('The security code you entered is not correct');</script>";
  echo "<script> self.location='contact_us.html';</script>";
  //header('Location:contact_us.html');
     // $errors .= "\n The captcha code does not match!";
  }*/

/*else{
?>
<script language="javascript">
alert("The security code you entered is not correct");


history.go(-1);
</script>
<?php
} */

}

unset($_SESSION['security_code']);






Code: [Select]
html form=========contact_us.html
<form  name='contact_form' id='contact_form' method="post"   action="contact.php">
                      <table width="518" height="341" align="center"  border="0" style=" vertical-align:top">
                           
                        <tbody><tr><td width="202" height="28" valign="middle"  align="left">
     
<label for="first_name"><span class="style26 style20">First Name *</span></label>
                            </td>
                        <td width="14" align="center" valign="middle">:</td>
                     <td width="448" valign="top"  >
        <div class="con" ><input type="text" size="30" maxlength="50" name="cname" id="cname"  class="contact_text">   </div>                      </td>
          </tr>
                           
                                <tr>
                             <td valign='middle'>
                              <label for="last_name"><span class="style26 style20">Last Name *</span></label>                             </td>
                             <td align="center" valign="middle">:</td>
                             <td valign="top">
                             <div class="con" > <input type="text" size="30" maxlength="50" name="last_name" id="last_name" class="contact_text"></div>                             </td>
                            </tr>
                            <tr>
                             <td valign="middle">
                           
                              <label for="email"><span class="style26 style20">Email Address *</span></label>                             </td>
                             <td align="center" valign="middle">:</td>
                             <td valign="top"><div class="con" ><input type="text" size="30" maxlength="50" name="cemail" id="cemail" class="contact_text"/></div></td>
                          </tr>
            <tr>
                             <td valign="middle">
                              <label for="telephone"><span class="style26 style20">Telephone Number</span></label>                        </td>
                             <td align="center" valign="middle">:</td>
                             <td valign="top">
                             <div class="con" > <input type="text" size="30" maxlength="80" name="telephone" id="telephone" class="contact_text" >  </div>                      </td>
                      </tr>
                            <tr>
                             <td height="123" valign="middle">
                              <label for="comments"><span class="style26 style20">Comments *</span></label>                             </td>
                             <td align="center" valign="middle">:</td>
                           
                             <td valign="middle">
                              <div class="cmn_ct"><textarea rows="6" cols="25" maxlength="1000" name="comments" id="comments"    onfocus=" this.value = this.value.replace(/\s+/g,'');"  onblur="checkLength(this.value,0,100);" class="cmn_text"></textarea></div>
                                                          </td>
                          </tr>
                      <tr><td><label for="security code"><span class="style26 style20">Security Code *</span></label></td><td align="center" valign="middle"></td><td><img  src="CaptchaSecurityImages.php?width=100&height=40&characters=5" alt="security_code" height="22" id="security_code" name='security_code' class='secuimage'/><br />
                           
                           
<div class="se_code"><input id="security_code" name="security_code" type="text" class="secuInput"  /></div>
                  <center></td>
                      <tr>
                             <td height="26" colspan="3" style="text-align: center;">
                             <table  width=69% align="right">
                               <tr><td align='left'>
                              <input type="submit"  value="Submit" name="csubmit" onclick="return verify();"> </td></tr></table>                        </td>
            </tr></table></form></p>




Code: [Select]
CaptchaSecurityImages.php
<?php
class CaptchaSecurityImages {

var $font = 'monofont.ttf';

function generateCode($characters) {
/* list all possible characters, similar looking characters and vowels have been removed */
$possible = '23456789bcdfghjkmnpqrstvwxyz';
$code = '';
$i = 0;
while ($i < $characters) { 
$code .= substr($possible, mt_rand(0, strlen($possible)-1), 1);
$i++;
}
return $code;
}

function CaptchaSecurityImages($width='120',$height='40',$characters='6') {
$code = $this->generateCode($characters);
/* font size will be 75% of the image height */
$font_size = $height * 0.75;
$image = @imagecreate($width, $height) or die('Cannot initialize new GD image stream');
/* set the colours */
$background_color = imagecolorallocate($image, 255, 255, 255);
$text_color = imagecolorallocate($image, 20, 40, 100);
$noise_color = imagecolorallocate($image, 100, 120, 180);
/* generate random dots in background */
for( $i=0; $i<($width*$height)/3; $i++ ) {
imagefilledellipse($image, mt_rand(0,$width), mt_rand(0,$height), 1, 1, $noise_color);
}
/* generate random lines in background */
for( $i=0; $i<($width*$height)/150; $i++ ) {
imageline($image, mt_rand(0,$width), mt_rand(0,$height), mt_rand(0,$width), mt_rand(0,$height), $noise_color);
}
/* create textbox and add text */
$textbox = imagettfbbox($font_size, 0, $this->font, $code) or die('Error in imagettfbbox function');
$x = ($width - $textbox[4])/2;
$y = ($height - $textbox[5])/2;
imagettftext($image, $font_size, 0, $x, $y, $text_color, $this->font , $code) or die('Error in imagettftext function');
/* output captcha image to browser */
header('Content-Type: image/jpeg');
imagejpeg($image);
imagedestroy($image);
$_SESSION['security_code'] = $code;
}

}

$width = isset($_GET['width']) ? $_GET['width'] : '120';
$height = isset($_GET['height']) ? $_GET['height'] : '40';
$characters = isset($_GET['characters']) && $_GET['characters'] > 1 ? $_GET['characters'] : '6';

$captcha = new CaptchaSecurityImages($width,$height,$characters);
?>


I just want to know how will i pass a session variable frm php to html thru js and from there to the php page where action of the html page occurs?

I know this is 'old stuff', but I am new to this and very frustrated- I am trying to pass a variable to a new url via an html onclick event, and failing.  I have found several posts about it but the code posted in those posts does not work when I try it.  I have struggled mightly with this.

Here is my code:  first an echo of two versions of the onclick statement, and two versions of the actual button code.  The echos from the two versions appear identical, but the first button with no variable works while the second using a variable results in no action.  Can anyone point me in the direction of a solution?  I suspect there is some simple principal I am missing relating to parsing strings.
 
<?php   
echo "window.location.href='ManageTitles.php?dog=2'";
echo "\n" ;
echo "window.location.href='ManageTitles.php?dog={$row_rsDogsowned['idDogInfo']}'";
?>
  <form methd="POST" Name="form3" action="<?php echo $editFormAction; ?>">
          <input type="button"
          value="works"
          onclick="window.location.href='ManageTitles.php?dog=2'"  />
         <input type=button
         onclick="window.location.href='ManageTitles.php?dog={$row_rsDogsowned['idDogInfo']}'"
         value="fails" />
</form

Ok here is what im trying to do:
1. drop down list pulled from mysql database.( working )
2. after you select the name in the drop down list
3. Use selected name to another page.
here is code


Code: [Select]
<?php
include('include/db_connection.inc');

$table = "truck_master";

$result = mysql_query( "SELECT driver_name FROM $table" );

$options=""; 
while ($row=mysql_fetch_array($result)) {

$driver_name=$row["driver_name"];

$options.="<OPTION VALUE=\"driver_name\">".$driver_name.'</option>';




} ?>
<html>
<head>
</head>
<body>
<table align="center">

<form name="form1" method="GET" align="center" action="issue.php">

<tr>
<td>Driver Name :</td>
<td><SELECT name="driver_name"><OPTION VALUE=''>Choose<?php echo $options?></SELECT> </td>
</tr>
<tr>
<td><input type="submit" name="Submit" value="Submit"> </td>
</tr>
</form>
</table>
</body>
<html>
Second Code IS
Code: [Select]
$driver = $_GET['driver_name'];

apparently I am doing this wrong. I want my string results from a form that searches DB content to appear within HTML table, tr, td tags. I get the results fine, but the HTML part isn't appearing. How should I be doing this?


<?php

$string = '';

$result = mysql_query($sql);  /// This is the execution
if (mysql_num_rows($result) > 0){
  while($row = mysql_fetch_object($result)){

  echo "<table>";

  echo "<tr>";
    $string .= "<td>".$row->last_name."</td> ";
     $string .= "<td>".$row->first_name."</td>";

  $string .= "<td>".$row->employee_id."</td>";

   $string .= "<td>".$row->title."</b>";

      $string .= "<td>".$row->territory."</td>";

   $string .= "<td>".$row->district."</td>";

    $string .= "<td>".$row->Phase1A_Score."</td>";

  

   $string .= "<td>".$row->Phase1B_Score."</td>";

    $string .= "<td>".$row->Phase1_Average."</td>";

   $string .= "<td>".$row->Phase1A_HS_Exam."</td>";

   $string .= "<td>".$row->Phase1A_HS_Exam_RT."</td>";

    $string .= "<td>".$row->Phase1B_HS_Exam."</td>";

   $string .= "<td>".$row->Phase1B_HS_Exam_RT."</td>";

    $string .= "<td>".$row->Class_Date."</td>";

 $string .= "<td>".$row->Awards."</td>";
    $string .= "<br/>\n";

echo "</tr>";

echo "</table>";
  
  }

}else{

  $string = "No matches found!";
 
} 

echo $string;


?>

I have a html for that posts to a form processing script which is fully functional atm,

in the processing script i have if statements, if the condition is met it updates tables in database, if there not met i echo a "not met" statment.

problem is my form processing script just goes straight back to the index.php page using the following code;


header('Location: index.php');



here is the form processing script:

<?php
session_start();

header('Location: index.php');

include "connect.php";

$id = $_SESSION['id'];
$user = $_SESSION['user'];
$ticketNumber = $_POST[ticketNumber];
//echo $_POST[ticketNumber];
$today = date('Y-m-d H:i:s', time() - 3600);

// Query "Ticket" Table to check if user has purchased a "regular" ticket within the last 24 hours
$query24hour = mysql_query("SELECT * FROM tickets WHERE username = '$user' AND HOUR(TIMEDIFF(NOW() , purchaseDate)) < 24;") or die(mysql_error());

// Query "promoTickets" table to grab information of previous tickets bought to the "promotional" auction and LIMIT tickets to 1 per user for "promotional" auctions. 
$querySold = mysql_query("SELECT * FROM promoTickets WHERE promoID='$_POST[promoID]' AND (ticketNumber='$ticketNumber' OR username = '$user');") or die(mysql_error());
//echo $querySold;
$sold = mysql_fetch_assoc($querySold);
//print_r($sold);
//echo $sold;
//echo query24hour;

$querycount24hour = mysql_num_rows($query24hour);
//echo $querycount24hour;

//check if ticket is sold and if user has purchased a "regular" ticket within 24 hours

if(empty($sold)!=FALSE and $querycount24hour >= 1){

//Checks users balance to see if they have enough for the ticket
$queryBal = mysql_query("SELECT user_iskbalance FROM users WHERE username = '$user';") or die(mysql_error());
//echo $querySold;
//echo $user;
//echo $queryBal;
$balArray = mysql_fetch_assoc($queryBal);
$bal = $balArray[user_iskbalance];
$newBal = $bal-$_POST[ticketPrice];



//check if he has the money to buy the ticket
if($bal>=$_POST[ticketPrice]){
//remove the money
$queryBalRemoveal = mysql_query("UPDATE `users` SET `user_iskbalance`='$newBal' WHERE `username`='$user';") or die(mysql_error());

//buy ticket & insert data into "promoTickets" table
$query = mysql_query("INSERT INTO promoTickets(promoID, username, charID, ticketNumber, ticketPrice, purchaseDate) VALUES ('$_POST[promoID]', '$user', '$id', '$_POST[ticketNumber]', '$_POST[ticketPrice]', '$today');") or die(mysql_error());
}
else{
die("Insufficent balance. Please add more ISK") ;
}


}
else{
die("Ticket has already been Sold or you have already bought a ticket to this promotion..!");
}
?>


any way i can get the errors to be passed onto the index.php (with the form) and echo them there?

as it stands errors arnt shown to the users and its confusing people 

Hi,
I have a Flash contact form that sends its name, e-mail, and message variables to a PHP script. The script works fine if the message is under ~700 characters, but anything more and the script won't post the message at all. An e-mail with just the name and e-mail address will come through to my inbox (which is embarrassing as a potential client sent me a contact form e-mail about a development job  ).

Is there some way to check the maximum character length for a string variable? Or to set its length to something higher?

This is my php. Thank you!!
<?

$senderName   = $_POST['userName'];
$senderEmail     = $_POST['userEmail'];
$senderMessage = $_POST['userMsg'];
$senderName   = stripslashes($senderName);
$senderMessage   = stripslashes($senderMessage); 
$senderMessage = strip_tags($senderMessage, '<p><br>');
$to = "kevin@kevinburkeportfolio.com";
$from = "email@kevinburkeportfolio.com";
$subject = "E-mail from $senderName";

$message = "<p><font size='2.5' face='Helvetica Neue, Helvetica, Sans Serif'><b>FROM:</b> $senderName
<br><br>
<b>E-MAIL:</b> <a href='mailto:$senderEmail'>$senderEmail</a>
<br><br>
<b>MESSAGE:</b> $senderMessage</p>";

$headers = "From: $from\r\n";
$headers = "MIME-Version: 1.0\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
$to = "$to";
    mail($to, $subject, $message, $headers);

$my_msg = "Thanks $senderName, your message has been sent.";
    print "return_msg=$my_msg"; 

exit();
?>

I have a simple form and need to convert it to XML so I can send it to my payment gateway.

I have the XML data types (?) they are expecting, but do not have a clue of how to build the string.   

Can someone help me out?

Thanks,


Debbie

Hi all

I have a field in mySQL table called dimensions. It has the double quote in in for inches - "

When I echo the result from the mySQL query on the item page (Customer facing) it's fine. However, I have built a form so that the administrator can edit the dimensions in the admin panel and when I echo it out in to the form field it stops when it gets to the double quotes?

Pete

Hi,

I am trying to make some adjustments to uploadify.php which comes with the latest version of uploadify (3.0 beta), so that it works with a session variable that stores the login username and adds it to the path for uploads.  Here is uploadify.php as it currently looks:

Code: [Select]
<?php
session_name("MyLogin");
session_start();

$targetFolder = '/songs/' . $_SESSION['name']; // Relative to the root

if (!empty($_FILES)) {
$tempFile = $_FILES['Filedata']['tmp_name'];
$targetPath = $_SERVER['DOCUMENT_ROOT'] . $targetFolder;
$targetFile = rtrim($targetPath,'/') .'/'. $_FILES['Filedata']['name'];

// Validate the file type
$fileTypes = array('m4a','mp3','flac','ogg'); // File extensions
$fileParts = pathinfo($_FILES['Filedata']['name']);

if (in_array($fileParts['extension'],$fileTypes)) {
move_uploaded_file($tempFile,$targetFile);
echo '1';
} else {
echo 'Invalid file type.';
}
}

echo $targetFolder;

?>
I added Code: [Select]
echo $targetFolder; at the bottom so that I could make sure that the string returned was correct, and it is, i.e. '/songs/nick'.  For some reason though, uploads are not going to the correct folder, i.e. the username folder, but instead are going to the parent folder 'songs'.  The folder for username exists, with correct permissions, and when I manually enter Code: [Select]
$targetFolder = '/songs/nick';all works fine.  Which strikes me as rather strange.  I have limited experience of using php, but wonder how if the correct string is returned by the session variable, the upload works differently than with the manually entered string.

Any help would be much appreciated.  It's the last issue with a website that was due to go live 2 days ago!

Thanks,

Nick

Pretty simple I would think but I'm unsure on the syntax. I have a variable, $ename. It's actually data from a form that I pass to said variable. What I want is to then in turn use this string in a mkdir() function. Something like

Code: [Select]
mkdir("dir/folder/$ename/");
Obviously that doesn't work. I'd imagine I have to use some sort of . syntax.

Hello everyone,

Pretty much what I am trying to do is run a query and based of the queries result, return a string - as of now it is turning up blank and cant seem to pass any strings through the function.

Current function:

function addNewBookmark($hash,$url,$title,$username){
     
      Code: [Select]
$query = "INSERT INTO bookmarks (hash,url,title,username) VALUES '".md5($hash)."', '".$url."', '".$title."', '".$username."')";
      $result = mysql_query(query, $this->connection);
      $message = '';
      if(mysql_affected_rows($this->connection)!=1) {

        $message = 'This URL already exists in the database!';
                return $message;
        }
        else
        $message = 'The URL was shared!';
        return $message;
       
           }
The above code seems to run fine, just cant seem to pass a string...read that you can possibly use a __toString function?  but that keeps throwing errors when I try to work with it.

Thanks all!

Hello Everyone, 

 

I have below datetime string 2021-05-06T13:48:19.2064951+05:30 i need to get the server timezone name by passing this string to date_default_timezone_set(). 

here is it valid?

can somebody please help me i need the timezone name with above datetime string 

Thanks,

Krish

Hi guys, sorry for such a newbish question.  Any help would be greatly appreciated.

HTML FORM:
Code: [Select]
<form action="form.php" method="post" onsubmit="return validateForm()" name="form">
<b>First Name:*</b>
<input type="text" name="first_name" size="50" />
<b>Last Name:*</b>
<input type="text" name="last_name" size="50" />
<b>Phone:*</b>
<input type="text" name="phone" size="50" />
<b>Email:*</b>
<input type="text" name="email" size="50" />
<p><b>What is your favorite color?*</b></p>
<p align="left">
<select name="se">
<option value="W">White</option>
<option value="G">Green</option>
<option value="Y">Yellow</option>
</select>
<input type="submit" value="Submit"/>
</form>


FORM.PHP script
Code: [Select]
<?php
$se = $_POST['se'];
$seURL = '';
switch ($se) {
  case 'W':
    $seURL = "http://url1.com";
    break;
  case 'G':
    $seURL = "http://url2.com";
    break;
  case 'O':
    $seURL = "http://url3.com";
    break;
  default:
    $seURL = "";
}
if ($seURL != "") {
/* Redirect browser */
/* make sure nothing is output to the page before this statement */
header("Location: " . $seURL);
}

// get posted data into local variables
$EmailFrom = "noreply@domain.com";                           
$EmailTo = "email@domain.com";                       
$Subject = "Form";                                         
$first_name = Trim(stripslashes($_POST['first_name'])); 
$last_name = Trim(stripslashes($_POST['last_name'])); 
$phone = Trim(stripslashes($_POST['phone'])); 
$email = Trim(stripslashes($_POST['email'])); 

// validation
$validationOK=true;
if (!$validationOK) {
  print "<meta http-equiv=\"refresh\" content=\"0;URL=error.htm\">";
  exit;
}

// prepare email body text
$Body = "";
$Body .= "first_name: ";
$Body .= $first_name;
$Body .= "\n";
$Body .= "last_name: ";
$Body .= $last_name;
$Body .= "\n";
$Body .= "phone: ";
$Body .= $phone;
$Body .= "\n";
$Body .= "email: ";
$Body .= $email;
$Body .= "\n";
$Body .= "color: ";
$Body .= $se;
$Body .= "\n";

// send email 
$success = mail($EmailTo, $Subject, $Body, "From: <$EmailFrom>");

// send email to user
if ($se=="W")
$EmailFrom = "noreply@domain.com";
$to = $email;
$subject = "form email";
$body = "thank you for filling out our form";
if (mail($to, $subject, $body, "From: <$EmailFrom>")) {
  echo("<p>Message successfully sent!</p>");
} else {
  echo("<p>Message delivery failed...</p>");
}

?>
[code]


MOD EDIT: [nobbc][code] . . . [/code][/nobbc] tags added . . .