PHP - Prevent Other People From Making Php Pages That Post To Your Forms?

Hi All,

not sure if this is a php Q but maybe someone has experience with this.
I use a form for people to add an item to the bulletin board. Sometimes the loading of the page takes very long and people think it didn't work so they click reload and post the item twice. I thought of adding a loading.gif so people know they have to wait. Anyone know how and where to put that in?
Code: [Select]
<?PHP
   if(isset($_POST['submit']))
   {

  if ($_POST['type']<>"") { 

  $poster_id = $_SESSION['id'];
  $ID=$_GET['ID'];
  $short=$_POST['short'];
  $location=$_POST['location'];
  if(isset($_POST['type'])) {
  $type=$_POST['type']; }
  $starthour=$_POST['starthour'];
  $startmin=$_POST['startmin'];
  $endhour=$_POST['endhour'];
  $endmin=$_POST['endmin'];
  $reminders=$_POST['reminders'];
      $reminders=addslashes($reminders);
  if(isset($_POST['view'])) {
  $view=$_POST['view']; }
  if(isset($_POST['val'])) {
$val=$_POST['val']; }
 
  $sql = mysql_query("SELECT * from bl_calender where dateclass='$ID' AND viewable='1'");
  $numrows = mysql_num_rows($sql);
// if the event exists then we want to edit it
if ($numrows > 0){
// only the owner can edit an event
while($row = mysql_fetch_array($sql)){
if($row['poster_id'] == $logOptions_id || $account_type == 'c' ){

      $editcal="update bl_calender set datecotent='$reminders', location='$location', type='$type', starthour='$starthour', startmin='$startmin', endhour='$endhour', endmin='$endmin', short='$short', viewable='$view' where dateclass='$ID'";
      mysql_query($editcal) or die("Could not edit calendar");
          $msgToUser = '<br /><br /><font color="#FF0000">Your event has been updated. Close this window.</font><p></p>';
    include_once 'msgToUser2.php';
} else {  // you are not the owner
$msgToUser = '<br /><br /><font color="#FF0000">Sorry but only the owner can change the event details.<br> Close this window.</font><p></p>';
    include_once 'msgToUser2.php';
   }

         }

}  else {      // it's a new event we want to add

         $createevent="Insert into bl_calender (poster_id, dateclass, starthour, startmin, endhour, endmin, location, type, short, datecotent, viewable ) values ('$poster_id', '$ID', '$starthour', '$startmin',  '$endhour', '$endmin', '$location', '$type', '$short', '$reminders', '1')";
         mysql_query($createevent) or die(mysql_error());

$sql2 = mysql_query("SELECT * FROM myMembers WHERE notification_calendar='1'"); // query the members who want an email
$numrows = mysql_num_rows($sql2);
if ($numrows > 0){
while($row = mysql_fetch_array($sql2)){
if($row['email'] =="") {
$to = $row['email_work'];
} else {
$to = $row['email'];
}
$your_firstname = $row['firstname'];
$your_lastname = $row['lastname'];

// send an email to everyone who wants it
$webmaster = "KAI-DEFAT@minbuza.nl";
$headers = "From: MAAC Webmaster<$webmaster>";
$subject = "A new message has been posted in the MAAC Calendar.";
$message = "Hello $your_firstname $your_lastname, a new event has been posted in the MAAC Calendar.\n";
$message .= "Goto the MAAC website to get the details.\n";
$message .= "Click here to view the Calendar $dyn_www/Web_Intersect/calen.php\n";
// send email
mail($to, $subject, $message, $headers);

}
}

}

$msgToUser = '<br /><br /><font color="#FF0000">Your event has been created, Close this window.</font><p></p>';
    include_once 'msgToUser2.php';

}

?>

Hi All,

I was wondering if someone maybe knows a nice way to prevent double posting or posting within a certain time without using javascript. Or maybe even echoing an error if someone posts the exact same ase the previous post.

I found this little snippet:
Code: [Select]
onClick="disabled=true;this.form.submit();return true;" Which prevents double clicking.
But its javascript and I rather have something besides that to cover all situations. Would love to hear what you guys use or reccomend.

Thanks!

Hi,

Im trying to make pages switch.
Read data from database and but every 10 data in 1 pages.
I got my way on making pages by using PHP, but my way is not efficient.
 
Please teach me and tell me the correct way or concept to do it.
Or is there any website teaching this?

Appreciate for the help thanks.

Iv tried asking a lot of people and have had no luck resolving this issue, so I will try here.

I have created a Form which gathers its information from a Database. The first form is a Dropdown Option, which when submitted takes you to another page. The new page is Supposed to use the value from the Dropdown to search the database and return the proper rows to populate a few text areas to edit the values. This is where I am stuck.

Compared to what most of you create this is probably sloppy and not too well structured, but I am new to this. Anyways, I will provide more information below now.

The following is the initial page with the first form. This is where you would select what page you wish to edit. (I believe this may be where the issue resides) - (I included the 'num' value before the 'name' value so that I could see it is getting the value from the database, which it is)

<form method="post" action="pageedit.php"><br />    
<?php
include "config.php"; 
    echo "<select name=\"page\">\n";

        $conn = mysql_connect("localhost", "$username", "$password");
        
        if (!$conn) {
            echo "Unable to connect to DB: " . mysql_error();
            exit;
        }
          
        if (!mysql_select_db("$database")) {
            echo "Unable to select $database: " . mysql_error();
            exit;
        }
        
        $sql = "SELECT * FROM sitePages";
        
        $result = mysql_query($sql);
        
        if (!$result) {
            echo "Could not successfully run query ($sql) from DB: " . mysql_error();
            exit;
        }
        
        if (mysql_num_rows($result) == 0) {
            echo "No rows found, nothing to print so am exiting";
            exit;

        }
        
        while ($row = mysql_fetch_assoc($result)) {
            echo "<option value='";
            echo $row['num'];
            echo "'>";
            echo $row['num'];
            echo " - ";
            echo $row['name'];
            echo "</option>";

        }
        
    echo "</select>";
?>
<br />
<input type="submit" />
</form> 

And then the following is the page that the form is sent to when submitted: (I have attempted to Echo the 'num' value sent so that I could verify that it is indeed sent, but it is not. I will post the message I receive after the PHP snippet

<form method="post" action="pageeditinsert.php"><br />
<?php
include "config.php";
echo $_POST['num']; 
$num=$_POST['num'];

$conn = mysql_connect("localhost", "$username", "$password");

if (!$conn) {

echo "Unable to connect to DB: " . mysql_error();

exit;

}

  

if (!mysql_select_db("$database")) {

echo "Unable to select $database: " . mysql_error();

exit;

}

$sql = "SELECT * FROM sitepages WHERE num = '$num'";

$result = mysql_query($sql);

if (!$result) {

echo "Could not successfully run query ($sql) from DB: " . mysql_error();

exit;

}

if (mysql_num_rows($result) == 0) {

echo "No rows found, nothing to print so am exiting";

exit;

}

while ($row = mysql_fetch_assoc($result)) {

echo "<input name'num' type='hidden' class='form1' value='";

echo $num;

echo "' maxlength='10' id='cat' /><br /><br /><br />";

echo "<input name='name' type='text' class='form1' value='";

echo $row['name'];

echo "' maxlength='20' id='name' /><br /><br />";

echo "<input name='desc' type='text' class='form1' value='";

echo $row['desc'];

echo "' maxlength='100' id='desc' /><br /><br /><br />";

echo "<input name='title' type='text' class='form1' value='";

echo $row['title'];

echo "' maxlength='100' id='title' /><br /><br /><br />";

echo "<input name'cat' type='hidden' class='form1' value='cat' maxlength='3' id='cat' /><br /><br /><br />";

}
?>
  <br /><br /><br />
  <center><input type="submit" /><input type="reset" /></center>
</form>

Below is the message I receive when attempting to echo the POSTed 'num' value:

Quote

Notice: Undefined index: num in C:\wamp\www\gondieCOM\editor\edit\pageedit.php on line 16
Call Stack
# Time Memory Function Location
1 0.0025 687600 {main}( ) ..\pageedit.php:0


(I am running the latest WAMP release on my personal PC for testing purposes until I have finished this and upload it to my hosting server)

Anyways thanks for your time. Hopefully someone has an idea for me.