PHP - Prefilling Forms (quotes Problem?)

Hello everyone!  This is my first post.  I am very new to php and mysql and coding in general.  It has not been made 100% clear to me as to when I should use single quotes, double quotes, and {}.  From what I gather you use single quotes for literal interpretation...  so if you put something like a variable in single quotes and echoed it, it would literally echo it as it is written and not the value of the variable.  in double quotes, I gather that it will echo the value of the variable.  as for {} I am unclear as to when to use the curly brackets for a variable.  I am assuming if you had a statement in single quotes and you put a variable in curly brackets you would get the value of the variable?
Edited by LazerOrca, 25 November 2014 - 11:20 PM.

The fancy-looking quotes won't insert into my DB, so I'm trying to convert them to %93 & %94 or normal quotes.    Nothing I've tried works.   Code:   $fancy=" “test” ";
$fixed=htmlentities($old, ENT_QUOTES);   echo "fancy: $fancy<br>"; echo "fixed: $fixed";

Results:

fancy: “test”
fixed:   I want $fixed to be %93test%94, or even "test" would work. 
Edited by rwmaho, 18 October 2014 - 01:28 PM.

I don't think I've asked this before have I??  can someone give me an internet KB that gives me all scenarios that warrant using singles or doubles?  as in, wrapping values, variables, and why I need to do either, and when, etc, etc....?

thanks

Edited March 29 by ajetrumpet

Hello there. Well this problem maybe basic but is kind of annoying me. I havea solution to it which I wil lexplain.

I have created a .php document which has html codes as well. It is a form that provides validation, for arguments sake lets say it is a form that validates if a user has entered their username and password, if not it will produce an error.

The problem I am having is I have embedded the code inside the echo
"
code is here
";
Now I have looked at escape characters and tried afew things, yet it still produces the same error on the same line.

Example

   echo

"      
   
   
   !!!!!!!<form action='book.php' method='post' onsubmit="return checkForm('flogin');">!!!!!!
   The reset of the form is here .....
   
   "";
   echo

The area highlighted in exclamation marks is where the area occurs, due to the quotes.


Any suggestions.


Thanks.

After getting valuable help from DavidAm and wildteen88 I am left with this last piece to the puzzle:

I have created a function which identifies the names of multi-value checkbox fields used on a Post page where a form just filled out has been saved in a serialized array which will contain associative arrays wherever the checkboxes have been selected.

Now I need for the checkbox associative arrays returned on this Review before-final-saving-page to be detected or identified and then Changed to a comma-delimited array, or maybe it just gets converted to one string with commas separating what were parts of the array--I am not sure about that.

At any rate, here are the functions that WORK to do this---but they depend on knowing the specific checkboxes that will show up ahead of time:

 
$postvals['cp_checkbox_amenities']= implode(',', $_POST['cp_checkbox_amenities']);
   $postvals['cp_checkbox_days']= implode(',', $_POST['cp_checkbox_days']);
   $postvals['cp_checkbox_3']= implode(',', $_POST['cp_checkbox_3']);


So I created a function which polls the form and finds the specific names of the checkboxes used on this page--the function ends like this:

        $results = $wpdb->get_results($sql);

        if($results) {

        foreach ($results as $result):
            // now grab all ad fields and print out the field label and value

echo '<li><span>' . $result->field_name . '</li>';

endforeach; 
}

     else {

      echo __('No checkbox details found.', 'cp');

    }
 
}

}

This returns the following:

<li><span>cp_checkbox_help</span></li><li><span>cp_checkbox_charley</span></li><li><span>cp_checkbox_hello</span></li>
</li>


So, I then tried to REPLACE the hard-code functions I show above that take the checkbox arrays and implode them for saving when this form is updated as comma limited values.

I tried various versions of this using the same loop that produced the <li> list with  $result->field_name      :


       foreach ($results as $result):
            // now grab all ad fields and print out the field label and value

   $postvals['. $result->field_name .']= implode(',', $_POST[ '. $result->field_name .']);

endforeach; 
}

     else {

      echo __('No checkbox details found.', 'cp');

    }
 
}

}

Every different way I try to get something either errors out or does not perform the Implode, or notifies me that the Implode is creating problems.

SOMEHOW, dynamically for each loop I need for a ' single quote mark to appear on each side of $result->field_name  so that I have dynamically written in the php code the equivalent to

 
$postvals['cp_checkbox_amenities']= implode(',', $_POST['cp_checkbox_amenities']);
   $postvals['cp_checkbox_days']= implode(',', $_POST['cp_checkbox_days']);
   $postvals['cp_checkbox_3']= implode(',', $_POST['cp_checkbox_3']);

the $result->field_name gives me a cp_checkbox_3  or a cp_checkbox_amenities, etc,, but I cannot break it down so that

$postvals['$result->field_name']= implode(',', $_POST['$result->field_name']);

WORKS

and I have tried with [PHP? echo ''' .$result->field_name . ''' ?>] and other ways.

Incidentally, ", double quotes don't play nice on this server with PHP 5.

And I have tried combinations of " '  double quote then single quote and on the other side ' " inside the associative array brackets.. nothing works--either I get errors, implode warnings, or the arrays of these checkboxes do not get changed to comma delimited arrays if the page loads and saves without errors.

I'd appreciate receiving what must be an elegantly simple solution!

Hi

I have a script that pulls all records out of the database, each record is within a form with no name which results with a lot of forms with essentially the same name.  I have an hidden field with the accID which I use to delete the record.

This does what I want it to do but have read that you should avoid having mutliple forms, I guess for validation.  I know I could do this with a link and use GET, but would rather not having this action showing the details of the deletion in the URL.

Is multiple forms so bad?

Thanks

I have a problem with nested forms.. when i click the submit button at the bottom of the page i want it to take to display.php and when i click the upload button on the upload form code i do not want to refresh it.
But right now when i click on upload button it takes me to display.php.
Can someone help me out with the code?
Code: [Select]
<?
include("db.php");
include("upload.php");
error_reporting(E_ALL ^ E_WARNING);
ini_set("display_errors", 1);

<script type="text/javascript">
function initUpload() {

   /*set the target of the form to the iframe and display the status
      message on form submit.
  */
document.getElementById('uploadform').onsubmit=function() {
document.getElementById('uploadform').target = 'target_iframe';
    document.getElementById('status').style.display="block";

}
}

//This function will be called when the upload completes.
function uploadComplete(status){
   //set the status message to that returned by the server
   document.getElementById('status').innerHTML=status;
}

window.onload=initUpload;
</script>

<style type="text/css">
.color
{
   font-weight:bold;
   color:black;
}
</style>


<div class="color">

<body bgcolor="white">
<center><h4><font color="blue">CREATE NEWSLETTER</font></h4></center>
<table align="center" bgcolor="silver">
<form action="display.php" method ="post">

<tr>
   <td>Site: </td>
   <td>
   <select name="new_id">
   <option value="">=============</option>
   <?php foreach($acronym as $key=>$value){ ?>
   <option value="<?php echo $value['site_id']; ?>"><?php echo $value['acronym']; ?></option>

   <?php }?>
   </select>
   </td>
</tr>

<tr>
   <td> Title: </td>
   <td><input type="text" size ="40" name="newsletter_title" /></td>
</tr><tr>
<td>Greeting:</td>




<td><textarea rows="10" cols="80" name="greeting" ></textarea></td>
</tr>

   <td> URL Title: </td>
   <td><input type="text" size ="40" name="url_title" /></td>
</tr>

<tr>
   <td> URL: </td>
   <td><input type="text" size ="40" name="newsletter_url" />Begin url with http://</td>
</tr>

<tr>
  <td  align="center">
  <b><font color="#214754" size="3">Banners</b></font>
  </td>
</tr>
<tr>
   <td>Banner Image URL: </td>
   <td><input type="text" size ="40" name="banner_url1" />
   Banner Link:
   <input type="text" size ="40" name="banner_link_url1" />
   </td>
</tr>
<tr>
   <td>Banner Image URL: </td>
   <td><input type="text" size ="40" name="banner_url2" />
   Banner Link:
   <input type="text" size ="40" name="banner_link_url2" />
   </td>
</tr>
<tr>
   <td>Banner URL: </td>
   <td><input type="text" size ="40" name="banner_url3" />
    Banner Link:
   <input type="text" size ="40" name="banner_link_url3" />
   </td>
</tr>
<tr>
   <td>Banner URL: </td>
   <td><input type="text" size ="40" name="banner_url4" />
   Banner Link:
   <input type="text" size ="40" name="banner_link_url4" />
   </td>
</tr>
<tr>
  <td  align="center">
  <b><font color="#214754" size="3">Threads</b></font>
  </td>
</tr>

   <select name="category1">
   <option value="">==========</option>
   <option value="registry">Registry</option>
   <option value="reviews">Reviews</option>
   <option value="classifieds">Classifieds</option>
   </select>
   </td>
</tr>

<tr>
   <td> Title: </td>
   <td><input type="text" size ="40" name="registry_title1" /></td>
</tr>
<tr>
   <td> Image: </td>
   <td><input type="text" size ="40" name="registry_img1" /></td>
</tr>

<tr>
   <td> URL: </td>
   <td><input type="text" size ="40" name="registry_url1" />Begin url with http://</td>
</tr>
<tr>
   <td height='12'></td>
</tr>
<tr>
   <td> Title: </td>
   <td><input type="text" size ="40" name="registry_title2" /></td>
</tr>
<tr>
   <td> Image: </td>
   <td><input type="text" size ="40" name="registry_img2" /></td>
</tr>
<td>
<form id="uploadform" method="post"
enctype="multipart/form-data"
action="upload.php">

<input name="file" id="file" size="27" type="file" /><br />
<input type="submit" name="action" value="Upload" />
<span id="status" style="display:none">uploading...</span>
<iframe id="target_iframe" name="target_iframe" src="" style="width:0;height:0;border:0px"></iframe>

</form>

</td>


<tr>
   <td> URL: </td>
   <td><input type="text" size ="40" name="registry_url2" /></td>
</tr>
<tr>
<td>
<input type="submit" name="submit" value="submit" />
</td>
</tr>
</form>
</table>
</div>

Control problem based on two forms

Hello everyone,
I have a problem with the control of my two forms
principle it is good for the first form, but if I wanted to control my 2nd form, blocking ca
Here's the script:

Code: [Select]
<html>
<head>
<script type="text/javascript" >
function formValidation1(oEvent) {
oEvent = oEvent || window.event;
var txtField = oEvent.target || oEvent.srcElement;

var txt_nom_pereck1=true;
var msg=" ";
if(document.getElementById("txt_nom_pere").value.length < 3 ){ txt_nom_pereck1=false; msg = msg + "Your name should be minimun 3 char length";}
if(document.getElementById("txt_prenom_pere").value.length < 3 ){ txt_nom_pereck1=false; msg = msg + "Your name should be minimun 3 char length";}


if(txt_nom_pereck1){document.getElementById("submit_etape4").style.display='block'; }
else{document.getElementById("submit_etape4").style.display='none'; }
}

window.onload = function () {


var submit_etape4 = document.getElementById("submit_etape4");

var txt_nom_pere = document.getElementById("txt_nom_pere");
var txt_prenom_pere = document.getElementById("txt_prenom_pere");

var txt_courriel_pere = document.getElementById("txt_courriel_pere");
var txt_courriel_pere_conf = document.getElementById("txt_courriel_pere_conf");



var txt_nom_pereck1=false;
document.getElementById("submit_etape4").style.display='none';
txt_nom_pere.onkeyup = formValidation1;
txt_prenom_pere.onkeyup = formValidation1;

}

//************Partie 2 : ******/////////////////////////////

/*
function formValidation2(oEvent) {
oEvent = oEvent || window.event;
var txtField = oEvent.target || oEvent.srcElement;

var txt_nom_pereck2=true;
var msg=" ";

if(document.getElementById("txt_courriel_pere").value.length < 3 ){ txt_nom_pereck2=false; msg = msg + "Your name should be minimun 3 char length";}
if(document.getElementById("txt_courriel_pere_conf").value.length < 3 ){ txt_nom_pereck2=false; msg = msg + "Your name should be minimun 3 char length";}


if(txt_nom_pereck2){document.getElementById("submit_etape5").style.display='block'; }
else{document.getElementById("submit_etape5").style.display='none'; }
}

window.onload = function () {


var submit_etape5 = document.getElementById("submit_etape5");

var txt_courriel_pere = document.getElementById("txt_courriel_pere");
var txt_courriel_pere_conf = document.getElementById("txt_courriel_pere_conf");



var txt_nom_pereck2=false;
document.getElementById("submit_etape5").style.display='none';
txt_nom_pere.onkeyup = formValidation2;
txt_prenom_pere.onkeyup = formValidation2;
}

Je voulais activer cette partie pour comtrole le Form 2
Le probleme existe au niveau des nom des fonctions

I wanted this part to enable the Comtrol Form 2
The problem exists at the level of function names
*/
</script>

</head>
<body >
<form method=" post" action="form-success.php">
<table>
<tr>
<td>First Name</td>
<td><input type="text" id="txt_nom_pere" name="FirstName"></td>
</tr>
<tr>
<td>First Name</td>
<td><input type="text" id="txt_prenom_pere" name="FirstName"></td>
</tr>
</table>
<input type="button" id="submit_etape4" value="Sign Up!!" style="display:none;"  />
</form>




<form method=" post" action="form-success.php">
<table>
<tr>
<td>First Name</td>
<td><input type="text" id="txt_courriel_pere" name="FirstName"></td>
</tr>
<tr>
<td>First Name</td>
<td><input type="text" id="txt_courriel_pere_conf" name="FirstName"></td>
</tr>
</table>
<input type="button" id="submit_etape5" value="Sign Up!!" style="display:none;"  />
</form>


</body>
</html>

Hello,

Using the following code, I'm extracting the $current_solution from my database.  However, if the variable has quotes in it, I get gobbledegook.  Code: [Select]
<input type ="radio" name="solution" <?php  echo 'value="' . $current_solution . '"' ?> id="solution" <?php if ($row['solution'] == $current_solution) {echo 'checked = "yes"';} ?>/><?php echo$current_solution; ?></label>
As an example, if the $current_solution variable is:  A right-side up letter u   then I get:

" id="solution" checked = "yes"/>
A right-side up letter "u".

I know that it's a quote issue but am not sure how to fix it.  I tried adding slashes but I fear that it didn't work.  Any thoughts on this would be appreciated!

Thanks so much,

Eric

Hi, newbie here.
Could someone show me how to properly escape the quotes in this code so it works properly? I'm having major problems with it, thanks.

echo "<td style="background-color:#fff"
 onMouseover="this.style.backgroundColor='#ff9900';"
 onMouseout="this.style.backgroundColor='#fff';">"

i have some code which checks to see if a username  and an email is in use. from what i can understand, it uses magic quotes to prevent sql injection. i've heard that magic quotes are not going to be in use in php6, so how can i change it so that it uses real escape string instead?

if (!get_magic_quotes_gpc()) {
$_POST['username'] = addslashes($_POST['username']);
}
$usercheck = $_POST['username'];
$check = mysql_query("SELECT username FROM users WHERE username = '$usercheck'") 
or die(mysql_error());
$check2 = mysql_num_rows($check);
if ($check2 != 0) {
die('Sorry, the username '.$_POST['username'].' is already in use.');
}

if (!get_magic_quotes_gpc()) {
$_POST['email'] = addslashes($_POST['email']);
}
$emailcheck = $_POST['email'];
$check = mysql_query("SELECT email FROM users WHERE email = '$emailcheck'") 
or die(mysql_error());
$check2 = mysql_num_rows($check);
if ($check2 != 0) {
die('Sorry, the email '.$_POST['email'].' is already registered to another account.');
}


Thanks

I'm trying to figure out why it won't display the quote(s) for the selected person. I echoed the query and it's getting the correct id its just not displaying correctly. Any ideas?

function getQuotes($id) {
$id=mysql_real_escape_string($id);
$sql = "SELECT * FROM `efed_bio_quotes` WHERE bio_id = '$id'";
$re = mysql_query($sql);
$i = 0;
$quotes = array();
$row = mysql_fetch_assoc($re);
extract($row);
?>
<ul id="quotes">
<?php
if(count($quotes) > 0){
for($i = 0; $i < count($quotes); $i++){
echo "<li>".$quotes[$i]."</li>";
}
}
else{
echo '<li>This wrestler has no quotes.</li>';
}
?>
</ul>
<?php
}

Alright, I've troubleshooted for about an hour on this and still can't figure it out, I've got the following line of code:

             Code: [Select]
$newstring = '$search = mysql_query("SELECT * FROM cmscbesalke.game where gameTitle = '".$gametitle."'");';
that is giving the following error:

Parse error: syntax error, unexpected '"' in /home/content/06/8675706/html/edit.game.php on line 136

I've tried to do the following as well:
Escaping the ", adding in extra . operators, and removing quotes.

The complicated part here is that I need the fwrite to write the $gametitle variable, with single quotes around it that way the mysql_query will return the correct database entry, but everytime I get the line of code to work it does not put the quotes.

So, I think you have all heard the news. THEY ARE GONE!

Unfortunately, I do have some old code that I do not feel like going line by line and updating. I was wounding if you guys could help me out.

I was hoping that there would be a way to set a define of some sort then when I grab something out of an SQL table it will automatically takeout the "\" (Slashes) and when I insert something into the database it will add the slashes...

YES I know and have read the statement written by the php group [http://www.php.net/manual/en/securit...uotes.why.php] But i do not particularly want to go through my code and change everything by hand.

If you have any idea, or would like me to explain it another way, please post.

Any help will be greatly appreciated.

--redcrusher