PHP - Php Feedback/blog

Hi all
I have just started with PHP I am using 5.2.5 and Apache 2.2.8
My problem is I am not getting anything back from my code to tell me what is happening
Code is
<?php
$username = "root";
$password = "";
$hostname = "localhost";

//connection to the database
echo '<p>Got Here</p>';

$dbhandle = mysql_connect($hostname, $username, $password)
  or die("Unable to connect to MySQL");

if (!$dbhandle){
echo '<p>Failed</p>';
}

var_dump($dbhandle) ;

print_r ($dbhandle);

echo '<p>Got Here Two</p';

?>
All I get is the first echo
nothing from the die or the if or var_dump or print_r
I am used to being able to step through code line by line is there any software for PHP which will do this ?
Alternatively can anyone say why I am getting no output
TIA

Hi there,

I'm trying to add a feedback form to my website, so that people can send me emails directly from my site. I found this code on another website, which works fine except that when the sender doesn't enter their reply email address it still sends it anyway - which is what this code is supposed to prevent.

This is the code:

<?php
if (isset($_REQUEST['email']))
//if "email" is filled out, send email
  {
  //send email
  $email = $_REQUEST['email'] ;
  $subject = $_REQUEST['subject'] ;
  $message = $_REQUEST['message'] ;
  mail( "myname@mydomain.com", "Subject: $subject",
  $message, "From: $email" );
  echo "Your message has been sent";
  }
else
//if "email" is not filled out, display the form
  {
  echo "<form method='post' action='feedback.php'>
  Your Email Address: <input name='email' type='text' size='50' /><br /><br />
  Subject: <input name='subject' type='text' size='50' /><br /><br />
  Message:<br />
  <textarea name='message' rows='15' cols='56'>
  </textarea><br />
  <input type='submit' name='sendEMail' value='Send Email' />
  </form>";
  }
?>

Am I supposed to redirect the user to another page? I want it to simply say "please enter your email address" next to the email field box if the user forgets to enter it.

Please help.

I'm running one of those really dense zend-based frameworks with masses of recursion (Magento), and I'm getting a problem with reading/writing the session, before I deal with that I'm trying to find some feedback on where the issue is happening.

I've got everything ( i know of ) switched on, 

error_reporting(E_ALL);
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);

+ I'm using PHPStorm with Xdebug and I've got Php Exception breakpoint set, I'm watching the Phpstorm Output/Console/Terminal (don't quite know the difference) +var/log/Exception.log, but....It just hangs without telling me which line.

Is this someting I've got to take on the chin with Php (I'm a relative newbie)? Or is there some way else?

Debian/Php 7.3

I have a Feedback form that I use to get peoples input. So far it works But I have 2 Problems

Here is the Code:
Code: [Select]
<?php
include "includes/config.php";
$date   = date('jS \of F  h:i A');



$sql="INSERT INTO news (Name, Email, Comments, date)
VALUES
('$_POST[gamertag]', '$_POST[email]', '$_POST[password]', '$date')";

header( 'Location: thanks.php' );

mysql_close($con)
?>
I'm making a VB.net Feedback form and I want to imput like this

http://mysite.com/feedback.php?name=Mike&email=test@test.net&comments=comment&date=20th of April  12:30 AM

But so far from my testing it doesn't register the values and says that there is a Duplicate value for email ".

I'd like it to register values somehow and if there is a duplicate email entered then have it update it or write over it.

Any help appreciated,
Thanks!

The following code used to work in PHP 4, but it no longer works under PHP 5. Can someone take a look and let me know what needs fixing please? I'm not new to PHP, but I'm not an expert.
Code: [Select]
<?

// Set page variables.
$title = "Feedback Form";
$back = "";
$bg = '000066';
$text = 'ffffff';
$link = 'ffff00';
$vlink = 'ff0000';
$trans = 'spinoutin';
$btntag = 'text=000070 insetselection';
$txtbxtag = 'bgcolor=ffffff text=000070 cursor=ff autoactivate nohighlight';
$ip = $_SERVER['REMOTE_ADDR'];

// Remove < and > from the email message.
$msg = str_replace("<","",$msg);
$msg = str_replace(">","",$msg);

// Set email variables.
$your_email = 'email@mydomain.com';
$your_name = 'Joe Blogs';
$your_link = 'http://www.mydomain.com/';
$confirm_sub = 'Message Sent';

$confirm_msg = "Hi $feedbackname,

Thank you for your email message sent from the $sub.

I will respond to it as quickly as I can.

Thanks again,

$your_name

$your_link";

$contact_msg = "$feedbackname ($feedbackemail) wrote:
$msg

$ip";

// Begin the sendmail routine.
if ($send) {
if (!$feedbackname || !$feedbackemail || substr_count($feedbackemail, '@') < 1 ||
substr_count($feedbackemail, '.') < 1 || !$sub || !$msg || substr_count($spam, 'clark') < 1) {
   print <<<EOF
<html>
<title>Error!</title>
<body background="$back" bgcolor="$bg" text=$text link=$link
vlink=$vlink transition=$trans fontsize=medium>
<center>
<br><br>
<font s=7 c=f0><b>
Error!</b></font>
<p>
Please go back and correct the errors listed below:
<p>
<table>
<tr><td>
<ul>
EOF;

if (!$feedbackname) {
   print "<li>Your name is missing!<br>"; }
if (!$feedbackemail || substr_count($feedbackemail, '@') < 1 || substr_count($feedbackemail, '.') < 1) {
   print "<li>Your email is missing or invalid!<br>"; }
if (!$sub) {
   print "<li>The email subject is missing!<br>"; }
if (!$msg) {
   print "<li>The email message is missing!"; }
if (substr_count($spam, 'clark') < 1) {
print "You need to correctly type in the Anti-Spam word. Hit Back and try again."; }

   print <<<EOF
</ul>
</table>
<p>
<A href="feedback.php">Back</A>
<br><br><br><br>
</center>
</body>
</html>
EOF;
}
else {

// Email that gets sent to you.
mail($your_email, $sub, $contact_msg, "From: $feedbackname < $feedbackemail >");

// Email that gets sent to them.
mail($feedbackemail, $confirm_sub, $confirm_msg, "From: $your_email");

// Print the thank you page.
   print <<<EOF
<html>
<head><title>Message Sent</title>
</head>
<body background="$back" bgcolor="$bg" text=$text link=$link vlink=$vlink transition=$trans>
<H2>Feedback</H2>

Thanks $feedbackname for sending your message to me!<P>

You will receive a confirmation email momentarily.<P>

</body>
</html>
EOF;
}
}
else {

// Print the contact form page.
   print <<<EOF
<H3>Feedback Form</H3>

To send an email to me simply fill out the form below.<P>

<form method=post>

Name: <input name=feedbackname $txtbxtag size=40><P>

Email: <input name=feedbackemail $txtbxtag size=40><P>

<INPUT type="hidden" name="sub" value="Feedback Form">

Message:<br>
<textarea name=msg rows=10 cols=50 maxlength=500
$txtbxtag></textarea><P>

<IMG SRC="images/sh-layout/turing.jpg" WIDTH="100" HEIGHT="30" BORDER="0" ALT="turing"><BR>
Anti-Spam Measure - In lowercase letters, retype the word in the image above:<BR>
<input name=spam $txtbxtag size=40><P>

<INPUT TYPE=submit NAME=send $BTNTAG VALUE="Send"><BR>
</form>

EOF;
}

?>

I get this error: 

Oops! Please ensure you have completed all fields before submitting the form.

Also ensure that there is only one email address.

All are filled out properly on the web page?

Can someone please help?

This is the page: http://www.blizzarddynamics.com/feedback_form.html

Help! I'm stuck!

This is the feedback form file I made.
Code: [Select]
<html>
<head><title>Bob's Auto Parts - Customer Feedback</title></head>
<body>

<h1>Customer Feedback</h1>
<p>Please tell us what you think.</p>

<form action="processfeedback.php" method="post">

<p>Your name:<br/>
<input type="text" name="name" size="40" /></p>
     
<p>Your email address:<br/>
<input type="text" name="email" size="40" /></p>
     
<p>Your feedback:<br/>
<textarea name="feedback" rows="8" cols="40" wrap="virtual" /></textarea></p>
     
<p><input type="submit" value="Send feedback" /></p>

</form>
</body>
</html>

And this is the process feedback file I made.
Code: [Select]
<?php

//create short variable names
$name = trim($_POST['name']);
$email = trim($_POST['email']);
$feedback = trim($_POST['feedback']);

//set up some static information
$toaddress = "wolocaw@localhost";

$subject = "Feedback from web site";

$mailcontent = "Customer name: ".$name."\n".
            "Customer email: ".$email."\n".
               "Customer comments:\n".$feedback."\n";

$fromaddress = "From: webserver@example.com";

//invoke mail() function to send mail
mail($toaddress, $subject, $mailcontent, $fromaddress);

?>
<html>
<head>
<title>Bob's Auto Parts - Feedback Submitted</title>
</head>
<body>
<h1>Feedback submitted</h1>
<p>Your feedback (shown below) has been sent.</p>
<p><?php echo nl2br($mailcontent); ?> </p>
</body>
</html>


After I fill out the form, it brings me to a page that says "Feedback submitted" at the top and "Your feedback (shown below) has been sent." below it. And that's it. nl2br($mailcontent) doesn't do anything. What am I doing wrong? I don't understand! 

Hello:

I have this form below that stores the data in a database, and sends an email to my client so he gets the information (And if there is a more proper way to code this, I am all ears):
Code: [Select]
<?php
include('include/myConn.php');
?>

<html>
...

<?php

$error = NULL;
$myDate = NULL;
$ParentsName = NULL;
$BestPhone = NULL;
$Email = NULL;
$StudentsName  = NULL;
$StudentsSchool = NULL;

if(isset($_POST['submit'])) {

$myDate = $_POST['myDate'];
$ParentsName = $_POST['ParentsName'];
$BestPhone = $_POST['BestPhone'];
$Email = $_POST['Email'];
$StudentsName = $_POST['StudentsName'];
$StudentsSchool = $_POST['StudentsSchool'];
 
 if(empty($ParentsName)) {
   $error .= '<div style=\'margin-bottom: 6px;\'>- Enter the parent\'s name.</div>';
 }
 
 if(empty($BestPhone)) {
   $error .= '<div style=\'margin-bottom: 6px;\'>- Enter the best phone number to reach you.</div>';
 }
 
 if(empty($Email) || !preg_match('~^([0-9a-zA-Z]([-.\w]*[0-9a-zA-Z])*@([0-9a-zA-Z][-\w]*[0-9a-zA-Z]\.)+[a-zA-Z]{2,9})$~',$Email)) {
  $error .= '<div style=\'margin-bottom: 6px;\'>- Enter a valid email.</div>';
 }
 
 if(empty($StudentsName)) {
   $error .= '<div style=\'margin-bottom: 6px;\'>- Enter the student\'s name.</div>';
 }

 if(empty($StudentsSchool)) {
   $error .= '<div style=\'margin-bottom: 6px;\'>- Enter the student\'s school.</div>';
 }


if($error == NULL) {

$sql = sprintf("INSERT INTO mySignUpData(myDate,ParentsName,BestPhone,Email,StudentsName,StudentsSchool) VALUES ('%s','%s','%s','%s','%s','%s')",

mysql_real_escape_string($myDate),
mysql_real_escape_string($ParentsName),
mysql_real_escape_string($BestPhone),
mysql_real_escape_string($Email),
mysql_real_escape_string($StudentsName),
mysql_real_escape_string($StudentsSchool);

                        
if(mysql_query($sql)) {
  
$error .= '<div style=\'margin-bottom: 6px;\'>Thank you for using the sign-up sheet.</div>';
    
mail( "me@mywebsite.com", "Sign-up Sheet Request",


"Date Sent: $myDate\n
Parent's Name: $ParentsName
Best Phone: $BestPhone
Email: $Email
Student's Name: $StudentsName
Student's School: $StudentsSchool\n

",

"From: $Email" 

);


unset($ParentsName); 
unset($BestPhone);
unset($Email);
unset($StudentsName);
unset($StudentsSchool);

  }
  else {
    $error .= 'There was an error in our Database, please Try again!';
  }
}
}


?>

<form name="myform" action="" method="post">
<input type="hidden" name="myDate" size="45" maxlength="50" value="<?php echo date("F j, Y"); ?>" />

<div id="tableFormDiv2">

<fieldset>
<hr />
</fieldset>

<fieldset><span class="floatLeftFormWidth2"><span class="textErrorItalic">* - Required</span></span> <span class="floatFormLeft">&nbsp;</span></fieldset>
<?php echo '<span class="textError">' . $error . '</span>';?>
<fieldset><span class="floatLeftFormWidth2"><span class="textErrorItalic">*</span>&nbsp; Parent's Name:</span> <span class="floatFormLeft"><input type="text" name="ParentsName" size="45" maxlength="50" value="<?php echo $ParentsName; ?>" /></span></fieldset>
<fieldset><span class="floatLeftFormWidth2"><span class="textErrorItalic">*</span>&nbsp; Best Phone # To Reach You:</span> <span class="floatFormLeft"><input type="text" name="BestPhone" size="45" maxlength="50" value="<?php echo $BestPhone; ?>" /></span></fieldset>
<fieldset><span class="floatLeftFormWidth2"><span class="textErrorItalic">*</span>&nbsp; Email:</span> <span class="floatFormLeft"><input type="text" name="Email" size="45" maxlength="50" value="<?php echo $Email; ?>" /></span></fieldset>

<fieldset><span class="floatLeftFormWidth2"><span class="textErrorItalic">*</span>&nbsp; Student's Name:</span> <span class="floatFormLeft"><input type="text" name="StudentsName" size="45" maxlength="50" value="<?php echo $StudentsName; ?>" /></span></fieldset>
<fieldset><span class="floatLeftFormWidth2"><span class="textErrorItalic">*</span>&nbsp; Student's School:</span> <span class="floatFormLeft"><input type="text" name="StudentsSchool" size="45" maxlength="50" value="<?php echo $StudentsSchool; ?>" /></span></fieldset>





</div>
<input type="submit" name="submit" value="Click here to submit your registration form" class="submitButton2" /><br />
</form>



</html>

I want to add a feature that will also send an autoresponder email with a message to the user who submitted the form.

How can that be done?

Do I need to somehow revise this section:
Code: [Select]
mail( "me@mywebsite.com", "Sign-up Sheet Request",


"Date Sent: $myDate\n
Parent's Name: $ParentsName
Best Phone: $BestPhone
Email: $Email
Student's Name: $StudentsName
Student's School: $StudentsSchool\n

",

"From: $Email"

Please let me know and thanks in advance.

I've finished the front end design of my application and now intend to provide a version to my potential users to gain feedback.   Does anyone have any experience with the best methods of capturing this feedback? What methods have you used in the past? Questionnaires?   I want feedback on things like the colour scheme, layouts, ease of use etc. From what I've read I can do things like a 1-5 satisfaction scale on multiple questions, but this seems a little vague    

Hello:

I want to create a feedback form that will allow a user to select from 30 or so items on a page, and send the data to an email address. I think it's something like a shopping cart but without a need to process a payment. I want to list items (like a soccer ball, a basket ball, etc.) and allow the user to select the size of the ball, the color, the number of balls, etc. I want the user to be able to select 1 item or many items.

Once they are done, they would hit submit, and the data would get sent to an email address.

Do I need to use a session to do this?

I was trying to work with this code:
Code: [Select]
<?php
session_start();
session_register('product');
session_register('amount');
$_SESSION['product'] = $_POST['product'];
$_SESSION['amount'] = $_POST['amount'];

//SEND THE EMAIL CODE HERE ????

?>
<form method="post" action="">
<input type="text" size="10" name="product"><br />
<input type="text" size="10" name="amount"><br />
<input type="submit" value="Finish">
</form>

But I'm pretty sure I'm not in the ballpark on how to do this.

Anyone have any ideas?

Thanks in advance.

Hello. Basically the issue I am having is my feedback form is not grabbing the Company Name and ID from the URL. I have the php code set in place where it's supposed to post, but it's not getting it. Can someone please help me out? I'm pretty new with php, so I'm kind of at the brink of my knowledge.

Thanks, Jess. 

Code: [Select]
<?php
//Modified because only email is required
//if (empty($_POST['name']) || empty($_POST['email']) || empty($_POST['comments'])) {
if (empty($_POST['email'])) {
$error_msg .= "E-mail is a required field. \n";
} elseif (strlen($_POST['name']) > 15) {
$error_msg .= "The name field is limited at 15 characters. Your first name or nickname will do! \n";
} elseif (!ereg("^[A-Za-z' -]*$", $_POST['name'])) {
$error_msg .= "The name field must not contain special characters. \n";
} elseif (!ereg("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,6})$",strtolower($_POST['email']))) {
$error_msg .= "That is not a valid e-mail address. \n";
} elseif (!empty($_POST['url']) && !preg_match('/^(http|https):\/\/(([A-Z0-9][A-Z0-9_-]*)(\.[A-Z0-9][A-Z0-9_-]*)+)(:(\d+))?\/?/i', $_POST['url']))
$error_msg .= "Invalid website url.";

if ($error_msg == NULL && $points <= $maxPoints) {
$subject = "Feedback for " . $_POST['Company'];

$message = "You received this e-mail message through your website: \n\n";
foreach ($_POST as $key => $val) {
$message .= ucwords($key) . ": $val \r\n";
}
$message .= 'IP: '.$_SERVER['REMOTE_ADDR']."\r\n";
$message .= 'Browser: '.$_SERVER['HTTP_USER_AGENT']."\r\n";
$message .= 'Spam points: '.$points;

if (strstr($_SERVER['SERVER_SOFTWARE'], "Win")) {
$headers   = "From: $yourEmail \r\n";
$headers  .= "Reply-To: {$_POST['email']}";
} else {
$headers   = "From: $yourWebsite <$yourEmail> \r\n";
$headers  .= "Reply-To: {$_POST['email']}";
}

if (mail($yourEmail,$subject,$message,$headers)) {
echo '<p>Thank you for taking the time to send us your feedback. Your comments are appreciated and help us provide the most current and accurate information possible.</p> 
<p>If you require further assistance, please visit our <a href="http://www.domain.com/" target="_blank">contact us</a> page.</p>';
$sentmail = 1;

echo '
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src=\'" + gaJsHost + "google-analytics.com/ga.js\' type=\'text/javascript\'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
var pageTracker = _gat._getTracker("analyticscode"); 
pageTracker._setDomainName(".domain.com");
pageTracker._trackPageview();
</script>
';

} else {
echo '<p>Your mail could not be sent this time.</p>';
}
}
}
function get_data($var) {
if (isset($_POST[$var]))
echo htmlspecialchars($_POST[$var]);
}

?>




<?php
foreach( $_POST as $checkbox ){
echo $checkbox .'<br />';
$checkbox = array("WebsiteLinkIsNotAccurate", "TelephoneNumberIsNotAccurate", "FaxNumberIsNotAccurate", "CompanyIsOutOfBusiness", "CompanyIsNoLongerAtThisLocation", "CompanyDoesNotProvideTheProductOrServiceAsFeatured", "Other(PleaseExplainBelow)");
}
?>




<?php
// DISPLAY ERROR MESSAGE - CHECK TO SEE IF USER HAS SUBMITTED THE FORM SUCCESSFULLY
if ($error_msg != NULL) {
echo '<p><strong style="color: red;">ERROR:</strong><br />';
echo nl2br($error_msg) . "</p>";
}

if($sentmail == 0){
?>

<form id="feedback" name="feedback" method="post" action="feedback.php" onSubmit="return CheckForm()">
<noscript>
<p><input type="hidden" name="nojs" id="nojs" /></p>
</noscript>

<input type="hidden" name="CompanyID" id="CompanyID" value="<?php echo $_POST['companyid']; ?>">
<input type="hidden" name="Company" id="Company" value="<?php echo $_POST['companyname']; ?>">


<p><strong>If you have different information about <u><?php echo $_POST['companyname']; ?></u>, or were unable to contact them, please let us know by completing the form below.</strong></p>
...

Hello,   I'm the sole developer of Aptugo (http://www.aptugo.com), a web RAD development environment with focus on making every developer's life easier. I've spent countless hours over the last two years developing it, and while the main focus is to be a CRUD boilerplate, it can actually build complete websites with great features (Aptugo's website was completely built with Aptugo, and google page insights gave me a score of 92 right out of the oven and without any effort).   Anyway, it would be really nice if you could spend a few minutes taking a look at Aptugo, It is free, and I really want to keep it free forever, in order to be able to achieve that, I really mouth-to-mouth promotion, so I'm not trying to sell you anything here, I'm just asking for help and your empathy! . If you could tell me: "I would use aptugo if it..." I would really appreciate it.    Have a great day, Gaston

Hi again:

What I want to do - and am stuck on - is to allow the user to add files to the feedback, submit the form, and the data will get stored in the DB (and the uploaded files will get stored in "uploads"), plus an email will get sent to the client who can click the files links in the email, and download them that way.

I have done this via ASP, but never tried it with PHP ...

This is what my database table looks like"
Code: [Select]
CREATE TABLE `myProductRightData2` (
  `myDate` varchar(55) default NULL,
  `myNameAndProduct` text,
  `myWebsite` text,
  `myProductUse` text,
  `myProductProblemSolver` text,
  `myProductUnique` text,
  `myWhyBetter` text,
  `myProductAppeal` text,
  `myProductSelling` text,
  `myProductResearch` text,
  `file1` varchar(255) default NULL,
  `myProductStory` text,
  `mySpokesperson` text,
  `myProductReviewed` text,
  `myProductDecision` text,
  `file2` varchar(255) default NULL,
  `file3` varchar(255) default NULL
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

--
-- Dumping data for table `myProductRightData2`
--

INSERT INTO `myProductRightData2` VALUES('February 22, 2011', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test.pdf', 'test', 'test', 'test', 'test1.jpg', 'test2.jpg');

And this is the form code:
Code: [Select]
<?php
$error = NULL;
$myDate = NULL;
$myNameAndProduct = NULL;
$myPhone = NULL;
$myEmail = NULL;
$myWebsite = NULL;
$myProductUse  = NULL;
$myProductProblemSolver = NULL;
$myProductUnique = NULL;
$myWhyBetter = NULL;
$myProductAppeal = NULL;
$myProductSelling = NULL;
$myProductResearch = NULL;
$file1 = NULL;
$myProductStory = NULL;
$mySpokesperson = NULL;
$myProductReviewed = NULL;
$myProductDecision = NULL;
$file2 = NULL;
$file3 = NULL;



if(isset($_POST['submit'])) {

if ((($_FILES["file1"]["type"] == "image/gif")
|| ($_FILES["file1"]["type"] == "image/jpg")
|| ($_FILES["file1"]["type"] == "image/jpeg")
|| ($_FILES["file1"]["type"] == "image/pjpeg"))
&& ($_FILES["file1"]["size"] < 20000))
  {
  if ($_FILES["file1"]["error"] > 0)
    {
    echo "Return Code: " . $_FILES["file1"]["error"] . "<br />";
    }
  else
    {
    echo "Upload: " . $_FILES["file1"]["name"] . "<br />";
    echo "Type: " . $_FILES["file1"]["type"] . "<br />";
    echo "Size: " . ($_FILES["file1"]["size"] / 1024) . " Kb<br />";
    echo "Temp file: " . $_FILES["file1"]["tmp_name"] . "<br />";

    if (file_exists("upload/" . $_FILES["file1"]["name"]))
      {
      echo $_FILES["file1"]["name"] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES["file1"]["tmp_name"],
      "upload/" . $_FILES["file1"]["name"]);
      echo "Stored in: " . "uploads/" . $_FILES["file1"]["name"];
      }
    }
  }
else
  {
  echo "Invalid file";
  }
  
  
  
 $myDate = $_POST['myDate'];
 $myNameAndProduct = $_POST['myNameAndProduct'];
 $myPhone = $_POST['myPhone'];
 $myEmail = $_POST['myEmail'];
 $myWebsite = $_POST['myWebsite'];
 $myProductUse = $_POST['myProductUse'];
 $myProductProblemSolver = $_POST['myProductProblemSolver'];
 $myProductUnique = $_POST['myProductUnique'];
 $myWhyBetter = $_POST['myWhyBetter'];
 $myProductAppeal = $_POST['myProductAppeal'];
 $myProductSelling = $_POST['myProductSelling'];
 $myProductResearch = $_POST['myProductResearch'];
 $file1 = $_POST['file1'];
 $myProductStory = $_POST['myProductStory'];
 $mySpokesperson = $_POST['mySpokesperson'];
 $myProductReviewed = $_POST['myProductReviewed'];
 $myProductDecision = $_POST['myProductDecision'];
 $file2 = $_POST['file2'];
 $file3 = $_POST['file3'];
  
 if(empty($myNameAndProduct)) {
   $error .= '-- Enter your Name and Product. <br />';
 }

 if(empty($myPhone)) {
   $error .= '-- Enter your Phone Number. <br />';
 }

 if(empty($myEmail)) {
   $error .= '-- Enter your Email. <br />';
 }

if($error == NULL) {

$sql = sprintf("INSERT INTO myProductRightData2(myDate,myNameAndProduct,myPhone,myEmail,myWebsite,myProductUse,myProductProblemSolver,myProductUnique,myWhyBetter,myProductAppeal,myProductSelling,myProductResearch,file1,myProductStory,mySpokesperson,myProductReviewed,myProductDecision,file2,file3) VALUES ('%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s')",

mysql_real_escape_string($myDate),
mysql_real_escape_string($myNameAndProduct),
mysql_real_escape_string($myPhone),
mysql_real_escape_string($myEmail),
mysql_real_escape_string($myWebsite),
mysql_real_escape_string($myProductUse),
mysql_real_escape_string($myProductProblemSolver),
mysql_real_escape_string($myProductUnique),
mysql_real_escape_string($myWhyBetter),
mysql_real_escape_string($myProductAppeal),
mysql_real_escape_string($myProductSelling),
mysql_real_escape_string($myProductResearch),
mysql_real_escape_string($file1),
mysql_real_escape_string($myProductStory),
mysql_real_escape_string($mySpokesperson),
mysql_real_escape_string($myProductReviewed),
mysql_real_escape_string($myProductDecision),
mysql_real_escape_string($file2),
mysql_real_escape_string($file3));

                        
  if(mysql_query($sql)) {
  
    $error .= 'Thank you for submitting your product. We will be in contact with you soon.';
    
mail( "m@sp.com", "Product Submission",

"Date Sent: $myDate\n Name and Product: $myNameAndProduct\n Phone: $myPhone\n Email: $myEmail\n Website: $myWebsite\n Product Use: $myProductUse\n Problem Product Solves: $myProductProblemSolver\n Product Uniqueness: $myProductUnique\n Product Better Because: $myWhyBetter\n Product Appeal: $myProductAppeal\n Product Selling Places: $myProductSelling\n Product Research: $myProductResearch\n Research Documentation: $file1\n Product Story: $myProductStory\n Product Spokesperson: $mySpokesperson\n Product Reviewed: $myProductReviewed\n Product Decision Maker: $myProductDecision\n Samples: $file2\n $file3",
"From: $Email" );
  }
  else {
    $error .= 'There was an error in our database, please try again!';
  }
}
}
echo '<span class="textError">' . $error . '</span>';

?>

<form name="myform" action="" method="post" enctype="multipart/form-data">
<input type="hidden" name="myDate" size="45" maxlength="50" value="<?php echo date("F j, Y"); ?>" />


What is the name of your company and product?
<textarea name="myNameAndProduct" cols="72" rows="1"><?php echo $myNameAndProduct; ?></textarea>


What is your phone number?
<textarea name="myPhone" cols="72" rows="1"><?php echo $myPhone; ?></textarea>


What is your email?
<textarea name="myEmail" cols="72" rows="1"><?php echo $myEmail; ?></textarea>


website we can visit for more information?
<textarea name="myWebsite" cols="72" rows="1"><?php echo $myWebsite; ?></textarea>


What is this product used for?
<textarea name="myProductUse" cols="72" rows="3"><?php echo $myProductUse; ?></textarea>


Does this product solve a problem? If so, how?
<textarea name="myProductProblemSolver" cols="72" rows="3"><?php echo $myProductProblemSolver; ?></textarea>


Does your product have unique or cutting-edge features, ingredients or benefits?
<textarea name="myProductUnique" cols="72" rows="3"><?php echo $myProductUnique; ?></textarea>


What makes it better than similar products?
<textarea name="myWhyBetter" cols="72" rows="3"><?php echo $myWhyBetter; ?></textarea>


Does this product have mass appeal? Who is the target audience?
<textarea name="myProductAppeal" cols="72" rows="3"><?php echo $myProductAppeal; ?></textarea>


Is this product currently selling elsewhere? If so, where and what is the retail price?
<textarea name="myProductSelling" cols="72" rows="3"><?php echo $myProductSelling; ?></textarea>


Do you have independent research to prove claims about this product? Please provide copies.
<textarea name="myProductResearch" cols="72" rows="3"><?php echo $myProductResearch; ?></textarea>


Upload independent research copies (Word or PDF files):
<input type="file" name="file1" id="file1" />


How and why did your company start? Does that "story" make this product more interesting?
<textarea name="myProductStory" cols="72" rows="3"><?php echo $myProductStory; ?></textarea>


Do you have a passionate spokesperson that would be comfortable presenting on TV?
<textarea name="mySpokesperson" cols="72" rows="3"><?php echo $mySpokesperson; ?></textarea>


Has this product ever been submitted to QVC for review? If yes, please provide the details.
<textarea name="myProductReviewed" cols="72" rows="3"><?php echo $myProductReviewed; ?></textarea>


Who from your company will make the decision to proceed if QVC is presents the right opportunity?
<textarea name="myProductDecision" cols="72" rows="3"><?php echo $myProductDecision; ?></textarea>


Upload two samples of your product for review (.JPG or PDF files):

<input type="file" name="file2" id="file2" />

<input type="file" name="file3" id="file3" />


<input type="submit" name="submit" value="Submit New Product" class="submitButtonProduct" /><br />


</form>

It's essentially the same feedback for I always use and it works fine, but I have been trying to integrate the upload portion into it
from a tutorial I found on W3C: http://www.w3schools.com/PHP/php_file_upload.asp

Any ideas on how to make this work?

Hi.

Can someone show me the proper way to do a feedback form (like a "Contact US" form).
I have read about SQL injections and would like to know I am protecting against it.

And the proper way to store the submitted data in a database for a client's records.

I have a basic form I use, but I am unable to store the data properly.

Any help or a code idea would be appreciated.

Thanks much.