PHP - How To Check Entered Text Before Submitting

I have a register script, and I am wanting to make it so that if the username field contains, lets say "mod", "ass", and more, then it'll return an error and wont let them register.

This topic has been moved to PHP Regex.

http://www.phpfreaks.com/forums/index.php?topic=327134.0

Hello,

I am trying to get this backlink checker to work i have it working so it checks that the link itself matches and is there but this is the harder part that I don't understand.

I want to have it also check the nodeValue to make sure that it matches one of the nodeValue's from a mysql table

this is the code I have to make it check the href link

Code: [Select]
function CheckForTargetUrl($links, $target) {   
    foreach ($links as $link) {
        if (strpos($link, $target) !== false) {
            return true;
        }
    }

    return false;
}
                         
function ExtractHrefLinks($html) {
    $dom = new DOMDocument;
    $linkUrls = array();
     

    @$dom->loadHTML($html);
    $links = $dom->getElementsByTagName('a');
     
    foreach ($links as $link){
        $linkUrls[] = $link->getAttribute('href');
    }
   
    return $linkUrls;
}

function backlink_check($contenturl){

$url = 'businessinvestingsource.com';
$source = $contenturl;

$falseFound = false;

    $html = file_get_contents ( $source );
    $links = ExtractHrefLinks($html);
 
    if (CheckForTargetUrl($links, $url) === false) {
        $falseFound = "true";
        $reportArray[$source] = 0;
    } else {
        $falseFound = "false";
    }

return $falseFound;
}
Now this all works fine, I just need it to check the actual nodeValue (anchor text as well) meaning check this:

<a href="http://google.com">Google</a>

There is a mysql table called "allowed_anchors" with 2 rows "id" and "anchor"

I need it to check if the nodeValue matches 1 of the allowed_anchors from the table.

If anyone knows how I can do this that would be very great i have been trying to figure it out for hours with no luck.

Thanks very much for any help to come.

Hello All:

Trying to work with PHP on a contact form with a jQuery Validation to make certain that the visitors fill out the required information. I'll try to show everything that I have, and then the error I am getting when the visitor hits "submit."

I don't know PHP all that well, and trying to learn my way through it. I used a couple of tutorials to add the features I needed and did my own styling on the live site.  Here is the PHP that is currently in the header of my markup:


<?php
//If the form is submitted
if(isset($_POST['submit'])) {

//Check to make sure that the First name field is not empty
if(trim($_POST['firstname']) == '') {
$hasError = true;
} else {
$firstname = trim($_POST['firstname']);
}
    
    //Check to make sure that the Last name field is not empty
if(trim($_POST['lastname']) == '') {
$hasError = true;
} else {
$lastname = trim($_POST['lastname']);
}
    
    //Check to make sure that the Street Address 01 field is not empty
if(trim($_POST['street01']) == '') {
$hasError = true;
} else {
$street01 = trim($_POST['street01']);
}
    
    //If Street02 is filled out, give it a value
    
    $street02  = $_POST['street02'];
    
    //Check to make sure that the City field is not empty
if(trim($_POST['city']) == '') {
$hasError = true;
} else {
$city = trim($_POST['city']);
}
    
    //Check to make sure that the State field is not empty
if(trim($_POST['state']) == '') {
$hasError = true;
} else {
$state = trim($_POST['state']);
}
    
    //Check to make sure that the Zip field is not empty
if(trim($_POST['zip']) == '') {
$hasError = true;
} else {
$zip = trim($_POST['zip']);
}
    
    //If Email is filled out, give it a value 
    
    $email  = $_POST['email'];
    
    //If Telephone is filled out, give it a value 
    
    $telephone  = $_POST['telephone'];
    
    //Default Subject Value 
    
    $subject  = "VMC Inquiry";
    
    //Check checkboxes 
    foreach($_POST['check']  as  $value)  {

$check_msg = "Checked: $value\n";

} 

    //If Message is filled out, give it a value 
    
    $comment  = $_POST['comment'];


//If there is no error, send the email
if(!isset($hasError)) {
$emailTo = 'xxxx.xxxx@gmail.com'; //Put your own email address here
$body = "Name: $firstname $lastname \n\nStreet Address: $street01 \n\nStreet Address*: $street02 \n\nCity: $city \n\nState: $state \n\nZip: $zip \n\nEmail*: $email \n\nTelephone*: $telephone \n\nCheck Box: $check_msg \n\nMessage:\n $comment";
$headers = 'From: XXXXX <'.$emailTo.'>' . "\r\n" . 'Reply-To: ' . $email;

mail($emailTo, $subject, $body, $headers);
$emailSent = true;
}
}
?>

So basically I am using classes to say whether or not something is required, which ties into the jQuery validation. If it isn't required, whatever the visitor types into the box is put into something like "$telephone" which is then printed in the e-mail.

The markup for the forms in the body is the following:

Code: [Select]
<p class="contact-text-right">For more information, or to have a list of our properties mailed to you, please fill out the form below.</p>
    <div id="contact-wrapper">
            <?php if(isset($hasError)) { //If errors are found ?>
        <p class="error">Please check if you've filled all the fields with valid information. Thank you.</p>
            <?php } ?>
            <?php if(isset($emailSent) && $emailSent == true) { //If email is sent ?>
            <p class="accept"><strong><?php echo $firstname;?>,Your Email Successfully Sent!</strong></p> <?php } ?>
    <form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>" id="contactform">
        <div id="names">
            <label for="firstname"><strong>First Name:</strong></label>
            <input type="text" name="firstname" id="firstname" value="" class="required" />
            <label for="lastname"><strong>Last Name:</strong></label>
            <input type="text" name="lastname" id="lastname" value="" class="required" />
        </div>
        <div id="address01">
            <label for="street01"><strong>Street Address:</strong></label>
            <input type="text" name="street01" id="street01" value="" class="required" />
        </div>
        <div id="address02">
            <label for="street02"><strong>Street Address*:</strong></label>
            <input type="text" name="street02" id="street02" value="" />
        </div>
        <div id="city">
            <label for="city"><strong>City:</strong></label>
            <input type="text" name="city" id="city" value="" class="required city" />
            <label for="state"><strong>State:</strong></label>
            <input type="text" name="state" id="state" value="" class="required state" />
            <label for="zip"><strong>Zip Code:</strong></label>
            <input type="text" name="zip" id="zip" value="" class="required zip" />
        </div>
        <div id="email">
            <label for="email"><strong>E-mail*:</strong></label>
            <input type="text" name="email" id="email" value="" class="email"/>
            <label for="telephone"><strong>Telephone*:</strong></label>
            <input type="text" name="telephone" id="telephone" value="" class="telephone" />
            <p class="bottom">*Optional fields.</p>
        </div>
        <div class="checkbox">
            <p><input  type="checkbox"  name="check[]"  value="properties">XXX</p> 
            <p><input  type="checkbox"  name="check[]"  value="contact-regarding">XXXX</p>
            <p class="indent">(Please list properties or ask specific questions in the space below.)</p>       
        </div>
        <div id="comment">
            <label for="comment"></label>
            <textarea name="comment" id="comment" ></textarea>
        </div>
        <div id="button">
        <input type="submit" value="Send Message" name="submit" />
        </div>
    </form>

All seems well until I hit submit on the live site. I think get this error returned to me:

Warning: Invalid argument supplied for foreach() in ......./html/development/contact.php on line 64

The e-mail goes through, with all the information, no problems! I just can't get this error message to go away.
Line 64 of contact.php is where the checkbox coding is:


    //Check checkboxes 
    foreach($_POST['check']  as  $value)  {

$check_msg = "Checked: $value\n";

} 


I know I've submitted a lot of code here, and tried to narrow you down to the exact spot I think the problem is, but hopefully some of you PHP gurus can pick out the flaw in a heartbeat.

I really appreciate all the help.

B

Here is my code for entering data into the database
Code: [Select]
<?php
ini_set("display_errors",false);
$link = mysql_connect('mysql5.000webhost.com', 'a9634375_dragons', 'samantha8',true); if (!$link) {      die('Could not connect: ' . mysql_error()); }
mysql_select_db("a9634375_dragons") or die(mysql_error());
$ids=$_GET['checkboxes'];

$user = $_GET['user'];
$young = unserialize(file_get_contents('http://www.dragcave.net/api/samantha8/serialize/user/'.$user.''));

foreach ($young['dragons'] as $key => $value) {
$querya = "DELETE FROM hatch WHERE code='$key'";
$queryb = "DELETE FROM er WHERE code='$key'";
$queryc = "DELETE FROM eggs WHERE code='$key'";
mysql_query($querya);
mysql_query($queryb);
mysql_query($queryc);
}
echo '<br>Dragons updated.<br>';
 echo 'Dragons now entered:<br>';
foreach ($ids as $hey) {
echo '<br><a href="http://www.dragcave.net/view/'.$hey.'" target="frame1"><img src="http://www.dragcave.net/image/'.$hey.'.gif" border="0"></a>&nbsp;';

$data = unserialize(file_get_contents('http://www.dragcave.net/api/samantha8/serialize/view/'.$hey.''));
$hrsleft = $data['dragons'][$hey]['hoursleft'];
$hatch = $data['dragons'][$hey]['hatch'];

if ($hrsleft < 96) {
$query3 = "INSERT INTO er(code) VALUES('$hey')";
mysql_query($query3);
echo 'Dragon has been entered into the ER.<br>';
}
else
{
if  (! $hatch) {
$query4 = "INSERT INTO eggs(code) VALUES('$hey')";
mysql_query($query4);
echo 'Egg has been entered into the Nest.<br>';
}
else
{
$query2 = "INSERT INTO hatch(code) VALUES('$hey')";
mysql_query($query2);
echo 'Hatchling has been entered into the Nursery.<br>';
}
}
}

?>
My table is simply set up with three fields
er
egg
hatch

What am I doing wrong?
Thank you in advance!

Hey guy

<?php
$con = mysql_connect("localhost","root","");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("Examination", $con);

$sql="INSERT INTO Test (Tes_Name, Tes_Description)
VALUES
('$_POST[Tes_Name]','$_POST[Tes_Description]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "1 record added";

mysql_close($con)
?> 

This is my code and I can enter Tes_Name on to mysql but nothing is shown for Tes_Description.

The form is

Code: [Select]
<html>

    <body>

<h3>Test</h3>

<table border="0">
<form method="POST" action="try2.php">
<tr><td>Tes_Name</td><td>:</td><td><input type="text" name="Tes_Name" size="20"></td></tr>
<tr><td>Tes_Description</td><td>:</td><td><input type="Tes_Description" name="password" size="20"></td></tr>
<tr><td>&nbsp;</td><td>&nbsp;</td><td><input type="submit" value="Submit"></td></tr>
</form>
</table>

</body>
</html>

Hi i m new with php.
i entered data in fckeditor ,now i want to save that data in file with.html extension.
please anybody has idea then help me....

I have deleted mysql info for safety reasons.

Here are the two webpage's codes i'm using right now

menu.php
<?
session_start();
if(!session_is_registered(myusername)){
header("location:login.php");
}

?>

<html><title>ChronoServe - Saving Time</title>
<link href="style.css" rel="stylesheet" type="text/css">
<body>
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="container">
  <tr>
    <td>
    <table width="335px" height="50%" border="1" align="center" cellpadding="0" cellspacing="0" class="centered">
      <tr>
        <td>
              <form method="post" action="insertvalues.php">
        <table width="100%" border="0" align="center" cellpadding="3" cellspacing="10">
      <tr>
        <td colspan="2"><div align="center" class="font2">Activation Information</div></td>
      </tr>
      <tr>
        <td colspan="2"></td>
      </tr>
      <tr>
        <td width="40%" class="font3">First Name :</td>
        <td width="60%">          <div align="center">
            <input name="firstname" type="text" class="font3" id="firstname" maxlength="25" />
            </div></td>
      </tr>
      <tr>
        <td class="font3">Last Name :</td>
        <td>          <div align="center">
            <input name="lastname" type="text" class="font3" id="lastname" maxlength="25" />
            </div></td>
      </tr>
      <tr>
        <td height="28" class="font3">Phone Number :</td>
        <td>          <div align="center">
            <input name="pnumber" type="text" class="font3" id="pnumber" maxlength="10" />
            </div></td>
      </tr>
      <tr>
        <td class="font3">Personnel Activated :</td>
        <td>          <div align="center">
            <input name="numberactivated" type="text" class="font3" id="numberactivated" maxlength="3" />
            </div></td>
      </tr>
      <tr>
        <td height="37" colspan="2"></td>
      </tr>
      <tr>
        <td colspan="2"><div align="center">
          <input name="submit" type="Submit" class="font3" value="Submit" />
        </div>
       </td>
      </tr>
    </table>
     </form></td>
      </tr>
    </table>
    </td>
  </tr>
</table>
</body>
</html>


insertvalues.php
<?php
if(isset($_POST['Submit']))
{
$firstname = $_POST['firstname'];
$lastname = $_POST['lastname'];
$pnumber = $_POST['pnumber'];
$numberactivated = $_POST['numberactivated'];

mysql_connect ("deleted", "deleted", "deleted") or die ('Error: ' . mysql_error());
mysql_select_db ("deleted");

$query = "INSERT INTO disney_database (id, firstname, lastname, pnumber, numberactivated, date) VALUES ('NULL', '".$firstname."', '".$lastname."', '".$pnumber."', '".$numberactivated."', 'NULL')";

mysql_query($query) or die('Error updating database');
header("location:menu.php");
echo "Database Updated With: ".$firstname."" - "".$lastname."" - "".$pnumber."" - "".$numberactivated."";
}
else {
echo "Database Error"
{
?>

Here is my problem. I set a one <form> on every form field I have including the submit button. Now whenever I press the submit button it redirects to insertvalues.php which it should be doing. In insertvalues i told it to query the form data and post it into my database's table. Its not doing that and tells me that it has a database error which i set it to tell me if something goes wrong. Anyone can help me? BTW I can manually query in the information using sql with phpmyadmin.

so can someone please review my code for me? thanks big help!

You can see what is happening.
Visit www.chronoserve.com

The username and password are "admin"

hi,
i have a search engine that searches keywords in mysql database...

i have a simple form but if someone enters a load of spaces it displays the whole database contents.. also i wanna remove any words less then 3 characters being searched for..
i have

(strlen($search)<=3)

what else should i add??

cheers
 

Greetings,

I am trying to create a basic booking system, for example there may be 3 events that a user can book. If the user clicks 'Book Now' on Event #1

I need it to take them to the HTML/PHP booking form with the information already entered that is relevant to Event #1 (Or whatever event they choose), such as the event name, time, date etc

I know how to create a contact form etc, its just the carrying of the information over to the form I dont know how to do.

Does anyone know if this is possible/ how it could be achieved?

Any help will be much appreciated,
Thanks!

Hello guy , how do I write PHP page that have table to list all the data I entered to my system.    

I've put together a very simple form & processing script for my site.. Everything works great except the body of the email i receive when the form is submitted contains everything but the info that has been entered into the fields. I'm sure it's something simple that I'm overlooked, but I'm officially stumped.  What am I doing wrong here? 
<?php
$mymail = 'ordietryingodt@yahoo.com';
$cc = 'New Recruit To Add!';
$BoDy = ' ';
$FrOm = 'FROM:' .$_POST['t1'];
$FrOm .= 'Reply-To:' .$_POST['t1'];
$FrOm .= 'X-MAILER: PHP'.phpversion();
$BoDy .= 'Quake Live Name: ';
$BoDy .= $_POST['t1'];
$BoDy .= "\n";
$BoDy .= 'Age: ';
$BoDy .= $_POST['t2'];
$BoDy .= "\n";
$BoDy .= 'Residing Country: ';
$BoDy .= $_POST['t3'];
$BoDy .= "\n";
$BoDy .= 'Favorite Game Type: ';
$BoDy .= $_POST['t4'];
$BoDy .= "\n";
$send = mail("$mymail", "$cc", "$BoDy", "$FrOm");

if($send)
{
echo '<html><head>';
echo '<meta http-equiv="refresh" content="0;URL=/submitted.htm">';
echo '</head><body>Email send....';
echo '</body></html>';
}
?>

Server version: 5.1.53-log

I have the following queries
Code: [Select]
SELECT user_id FROM phpbb_profile_fields_data WHERE pf_rsname = "Atroxide" LIMIT 1
SELECT user_id FROM phpbb_profile_fields_data WHERE pf_rsname = "Delia Smith" LIMIT 1
SELECT user_id FROM phpbb_profile_fields_data WHERE pf_rsname = "espinozagabe" LIMIT 1
SELECT user_id FROM phpbb_profile_fields_data WHERE pf_rsname = "Jaunty1" LIMIT 1
SELECT user_id FROM phpbb_profile_fields_data WHERE pf_rsname = "lvoos" LIMIT 1 All 5 of these queries are executed at a different time (in a foreach loop).
All 5 except for the one below returned a result.
Code: [Select]
SELECT user_id FROM phpbb_profile_fields_data WHERE pf_rsname = "Delia Smith" LIMIT 1 I couldn't figure out why it wasn't working so I copy pasted it into PHPMyAdmin and it returned the result I was looking for.

What could cause for PHPMyAdmin to work but not the exact same query in a php script to not? It didn't return an error using mysql_error() either.

Pretty sure its irreverent but here is the php script.
Code: [Select]
foreach ($online as $username => $activity) {
$query = "
SELECT user_id
FROM phpbb_profile_fields_data
WHERE pf_rsname = \"" . $username . "\"
LIMIT 1
";
$result = $db->query($query);
}

The table is Code: [Select]
user_id         mediumint(8) UNSIGNED No 0
pf_rsname varchar(255) utf8_bin Yes NULL
                           

Hi!

I'm attempting to do this and feel that I'm fairly close. Would you take a look and throw me any bones?

PHP Code:

Code: [Select]
<?php
if (isset($_POST['ppassword']) && (stristr($string,'') === TRUE)) { 
switch($_POST['ppassword']) {
case "Google":
header("Location: http://www.google.com");
exit();

case "Yahoo":
header("Location: http://www.yahoo.com"); 
exit();

case "Bing":
header("Location: http://www.bing.com");
exit();
}
}
?>
The Form:
Code: [Select]
<form name="portal" id="portal" method="post" action="">
    <input name="ppassword" type="text" id="ppassword" maxlength="25" onfocus="this.select()" onblur="this.value=!this.value?'company name':this.value;" value="company name" onclick="this.value=''" />
    <input name="login" type="submit" id="login" value="Continue" />
</form>

I appreciate any of your help. I feel close and this part Code: [Select]
(stristr($string,'') feels like the missing piece of the puzzle. 

So I built a form and if anyone puts // in the text area field named Code: [Select]
name="background" it won't work... it fails.

This prevents users from entering website URLs, which is an issue since the form is related to website design.  I think I have everything else working just fine.

Any ideas how I can change this so it will work and allow // ?  There may be other things that cannot be entered or maybe a security risk I am missing... here is the code...

Code: [Select]
<?php

    // version 2.2

    // All placeholders that are used such as {yourEmail@yourDomain.com}, {yourSolve360Token}, {ownership},
    // {categoryId}, {templateId} should be replaced with real values without the {} brackets.

    // REQUIRED Edit with the email address you login to Solve360 with
    define('USER', 'me@me.com');
    // REQUIRED Edit with token, Workspace > My Account > API Reference > API Token                             
    define('TOKEN', 'itentionallydeleted');  
    
    // Get request data
    $requestData = array();
    parse_str($_SERVER['QUERY_STRING'], $requestData);
    
    // Configure service gateway object
    require 'Solve360Service.php';
    $solve360Service = new Solve360Service(USER, TOKEN);
    
    //
    // Preparing the contact data
    //
    
    $contactFields = array(
        // field name in Solve360 => field name as specified in html form
        'firstname' => 'firstname',
        'lastname' => 'lastname',
        'businessemail' => 'businessemail',
        'cellularphone' => 'cellularphone',
        'background' => 'background',
    );
    
    
    // kill form if spammers use the siteURL field
if ( $_GET['url'] != '' || $_GET['firstname'] == 'Your Name' || $_GET['businessemail'] == 'Email Address' ) {header("Location: http://www.openpotion.com/new/error");}   
    
    else {
    $contactData = array(
        // OPTION Apply category tag(s) and set the owner for the contact to a group
        // You will find a list of IDs for your tags, groups and users in Workspace > My Account > API Reference
        // To enable this option, uncomment the following:

       
        // Specify a different ownership i.e. share the item
        'ownership'     => 18634876,

        // Add categories
        'categories'    => array(
            'add' => array('category' => array(18660073))
        ),

    );
    
    
    // adding not empty fields
    
    foreach ($contactFields as $solve360FieldName => $requestFieldName) {
        if ($requestData[$requestFieldName]) {
            $contactData[$solve360FieldName] = $requestData[$requestFieldName];
        }
    }
    
    // 
    // Saving the contact
    //
    // Check if the contact already exists by searching for a matching email address.
    // If a match is found update the existing contact, otherwise create a new one.
    //
    
    $contacts = $solve360Service->searchContacts(array(
        'filtermode' => 'byemail',
        'filtervalue' => $contactData['businessemail'],
    ));
    if ((integer) $contacts->count > 0) {
        $contactId = (integer) current($contacts->children())->id;
        $contactName = (string) current($contacts->children())->name;
        $contact = $solve360Service->editContact($contactId, $contactData);
    } else {
        $contact = $solve360Service->addContact($contactData);
        $contactName = (string) $contact->item->name;
        $contactId   = (integer) $contact->item->id;        
    }

    if (isset($contact->errors)) {
        // Mail yourself if errors occur  
        mail(
            USER, 
            'Error while adding contact to Solve360', 
            'Error: ' . $contact->errors->asXml()
        );
        die ('System error');
    } else {
        // Mail yourself the result
        mail(
            USER, 
            'A new sales lead has been posted to Solve360', 
            'Contact "' . $contactName . '" https://secure.solve360.com/contact/' . $contactId . ' was posted to Solve360',
            'From: noreply@openpotion.com' . PHP_EOL . 'Reply-To: ' . $contactData['businessemail'] . PHP_EOL . 'X-Mailer: PHP/' . phpversion()
        );
    }
    
    //
    // OPTION Adding a activity 
    //
    
    /*
     * You can attach an activity to the contact you just posted
     * This example creates a Note, to enable this feature just uncomment the following request
     *      
     */    
    
   /*
    // Preparing data for the note
    $noteData = array(
        'details' => nl2br($requestData['note'])
    );

    $note = $solve360Service->addActivity($contactId, 'note', $noteData);
    
    // Mail yourself the result
    mail(
        USER, 
        'Note was added to "' . $contactName . '" contact in Solve360',
        'Note with id ' . $note->id . ' was added to the contact with id ' . $contactId
    );
    // End of adding note activity
*/
 
    //
    // OPTION Inserting a template of activities
    //
    
    /*
     * You can also insert a template directly into the contact you just posted
     * You will find a list of IDs for your templates in Workspace > My Account > API Reference
     * To enable this feature just uncomment the following request
     *      
     */

    /*
    // Start of template request
    $templateId = {templateId};
    $template = $solve360Service->addActivity($contactId, 'template', array('templateid' => $templateId));
        
    // Mail yourself the result
    mail(
        USER, 
        'Template was added to "' . $contactName . '" contact in Solve360',
        'Template with id ' . $templateId . ' was added to the contact with id ' . $contactId
    );
    // End of template request
    */
    header("Location: http://www.website.com/thank-you");
    
    }

?>


Thanks a ton in advance!
Jason



[attachment deleted by admin]