PHP - Coding A Javascript Prompt Function With Php

Hi,

When i am getting the part of the text using the function substr, am getting this kind of problem , (text in the end not printing properly) how to solve this.

تسر مؤسسة مهارات التقنية ومؤسسة اشبكة الثنائية ان تطلع جميع عملاءها بإصدار نظام تاتش لإدارة الموقع الالكترونية من يوم السبت ا�


This is the code am using
$sub_string_content = substr($temp['News_Content'],0,300);



Thanks,

I've been alerted that someone can attack my site using XSS. I have a search box on my site and I've tested it by simply writing "<script>alert('test')</script>" When I do this a pop-up box does come up displaying the word "Test" I have written a preg_replace previously but now I want to add something to it to prevent <script>.

This was my original code
Code: [Select]
$search = mysql_real_escape_string(preg_replace('/[^\w\'\"\@\-\.\,\(\) ]/i', '', " $_POST['search']));
This is what I thought might work but no luck
Code: [Select]
$search = mysql_real_escape_string(preg_replace('/[^\w\'\"\@\-\.\,\(\) ]/i', '', "/<script[^>]*>.*<*script[^>]*>/i", $_POST['search']));
Could anyone please help and tell me how to modify the code to prevent javascript?

Thanks

Hi...

I have a problemand I tried to resolved it but still I failed..

I need to add a code in a php file where I'm not the one who code, now I need to add code on that file, and the problem is the one who the owner of code is not here.

I need to add code :

Code: [Select]
$sub_lotcode = substr($lotCode, 9, 4);
   
    $sql = "SELECT k.PCODE, k.kanban, p.Compounds, p.Max_Lot
            FROM kanban_checker k, param_settings p
        WHERE k.kanban = p.Max_Lot AND k.PCODE = '$sub_lotcode' AND p.Compounds = '$sub_lotcode'";
        $result = mysql_query($sql, $con);
         $total = mysql_num_rows($result);
        if ($total <= 0) {
            notify that PCODE reach the maximum        }
        else{
            echo "continue";
        }

here is the code where I need to add this condition:

Code: [Select]
<?php
error_reporting(0);
$con = mysql_connect('localhost', 'root','');

if (!$con) {
    echo 'failed';
    die();
}

mysql_select_db("mes", $con);

$lotCode = mysql_real_escape_string($_GET['normal']);
$lotCodeDownGrade = mysql_real_escape_string($_GET['downgrade']);
$terminalNo = mysql_real_escape_string($_GET['n']);
$downMode = mysql_real_escape_string($_GET['down']);
   

//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    

if ($terminalNo == "1") {
    
    if ($lotCode != "") {

      
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCode'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        else {    
                //do this if code exist in the database:
            //  //code exist in the database
            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                   TERMINAL_ID='1' AND ACTIVE=TRUE";
            $result = mysql_query($sql, $con);
            $total = mysql_num_rows($result);
            if ($total <= 0) {
                echo "0"; // continue to transact
            }
            else {
            // query the last terminal it was used
                $sql    = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                          ACTIVE=TRUE ORDER BY DATE_ENTRY DESC LIMIT 1";
                
                $result = mysql_query($sql, $con);
                
                $row    = mysql_fetch_array($result);
                $total  = mysql_num_rows($result);
                
          
                echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1                                                HERE TO DISPLAY WHICH TERMINAL TO GO
            }    
        }
    }
}   

//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    

elseif ($terminalNo == "4") {
    
    if ($lotCode != "") {
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCode'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        
        else {
            //if downgrade is checked do this :
            if ($downMode == "true") {
                $advanceTerminal = ((integer)($terminalNo) + 1);
                $advanceTerminal = (string)($advanceTerminal);
                
                $preTerminal = ((integer)($terminalNo) - 1);
                $preTerminal = (string)($preTerminal);

                //query if the lot code exist in advance terminal ..
                $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              TERMINAL_ID='$advanceTerminal' AND ACTIVE=TRUE";
                       $result = mysql_query($sql, $con);
                       $total = mysql_num_rows($result);
                  
                if ($total <= 0) {
                        // check naman kung wala sa naunang terminal
                        $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              TERMINAL_ID='$preTerminal' AND ACTIVE=TRUE";
                        
                        $result = mysql_query($sql, $con);
                        $total = mysql_num_rows($result);
                        
                        if ($total <= 0) {
                            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND ACTIVE=                                      TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                            $result = mysql_query($sql, $con);
                            $row    = mysql_fetch_array($result);
                            $total  = mysql_num_rows($result);
                            if ($total <= 0) {               // NO RECORDS FOUND GO TO TERMINAL 1   == optional
                               echo "notran";                
                            }     
                            else {
                               echo $row['TERMINAL_ID'] ; 
                            }   
                        }
                        
                        else {
                            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              TERMINAL_ID='$terminalNo' AND ACTIVE=TRUE";
                            $result = mysql_query($sql, $con);
                            $total = mysql_num_rows($result);
                            if ($total <= 0 || $total >= 0) {
                                echo "G";    
                            }
                        }
                                                
                }
                else {
                        $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND ACTIVE=                                      TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                        $result = mysql_query($sql, $con);
                        $row    = mysql_fetch_array($result);
                        $total  = mysql_num_rows($result);
                        echo $row['TERMINAL_ID'] ; 
                }
            }
            
            else {
            
                //query if the lot code exist in this terminal ..
                $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                          TERMINAL_ID='$terminalNo' AND ACTIVE=TRUE";
                $result = mysql_query($sql, $con);
                $total = mysql_num_rows($result);
                
                if ($total <= 0) {  // wala nakita - then tsek if nag exist sa terminal na sinundan
                   $preTerminal = ((integer)($terminalNo) - 1);
                   $preTerminal = (string)($preTerminal);
                   
                   //then tsek if nag exist sa terminal na sinundan
                   $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                          TERMINAL_ID='$preTerminal' AND ACTIVE=TRUE";
                   $result = mysql_query($sql, $con);    
                   $total = mysql_num_rows($result);
                   
                   if ($total <= 0) {   // walang nakita sa mga naunang terminal
                       // do this if no previous transaction with pre requisite process
                       // query the last terminal it was used
                       
                       $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND  ACTIVE=                                  TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                       $result = mysql_query($sql, $con);
                       $row = mysql_fetch_array($result);
                       $total = mysql_num_rows($result);
                      // $row = mysql_fetch_array($result); 
                       if ($total <= 0) {               // NO RECORDS FOUND GO TO TERMINAL 1   == optional
                           echo "notran";                
                       }                                            
                       else {                           
                           echo $row['TERMINAL_ID'];    // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1 HERE TO DISPLAY WHICH                                                           TERMINAL TO GO
                       }                                
                   }   
                   else {
                       echo "G";
                   }
                }
                else { //me record na nakita sa terminal na pinag transakan
                     
                    // query the last terminal it was used
                       $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              ACTIVE=TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                    $result = mysql_query($sql, $con);
                    $row    = mysql_fetch_array($result);
                    $total  = mysql_num_rows($result);
       
                    echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE                                                    ADD 1 HERE TO DISPLAY WHICH TERMINAL TO GO
                 
                }
            } // here is the terminator of else in downgrade
        }  
    }
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    
    if ($lotCodeDownGrade != "") {
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCodeDownGrade'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        else {
                //do this if code exist in the database:
            //  //code exist in the database
            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCodeDownGrade' AND 
                    ACTIVE=TRUE";
            
            $result = mysql_query($sql, $con);
            $total = mysql_num_rows($result);
            if ($total <= 0) {
                echo "0"; // continue to transact
            }
            else {
            // query the last terminal it was used
                $sql    = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCodeDownGrade' AND 
                          ACTIVE=TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                
                $result = mysql_query($sql, $con);
                
                $row    = mysql_fetch_array($result);
                $total  = mysql_num_rows($result);
          
                echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1                                              HERE TO DISPLAY WHICH TERMINAL TO GO
            }
        }
    }
}
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    
else {
    if ($lotCode != "") {
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCode'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        
        else {
            //query if the lot code exist in this terminal ..
            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                    TERMINAL_ID='$terminalNo' AND ACTIVE=TRUE";
            $result = mysql_query($sql, $con);
            $total = mysql_num_rows($result);
            
            if ($total <= 0) {  // wala nakita - then tsek if nag exist sa terminal na sinundan
               $preTerminal = ((integer)($terminalNo) - 1);
               $preTerminal = (string)($preTerminal);
               
               //then tsek if nag exist sa terminal na sinundan
               $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                      TERMINAL_ID='$preTerminal' AND ACTIVE=TRUE";
               
               $result = mysql_query($sql, $con);    
               $total = mysql_num_rows($result);
               if ($total <= 0) {   // walang nakita sa mga naunang terminal
                   // do this if no previous transaction with pre requisite process
                   // query the last terminal it was used
                   
                   $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' 
                          AND ACTIVE=TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                   $result = mysql_query($sql, $con);
                   $row = mysql_fetch_array($result);
                   $total = mysql_num_rows($result);

                   if ($total <= 0) {               // NO RECORDS FOUND GO TO TERMINAL 1   == optional
                       echo "notran";                
                   }                                            
                   else {                           
                       echo $row['TERMINAL_ID'];    // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1 HERE TO DISPLAY WHICH TERMINAL TO GO
                   }                                
               }   
               else {
                   echo "G";
               }
            }
            else { //me record na nakita sa terminal na pinag transakan
                 
                // query the last terminal it was used
                $sql    = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND ACTIVE=                                  TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                $result = mysql_query($sql, $con);
                $row    = mysql_fetch_array($result);
                $total  = mysql_num_rows($result);

                echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1 HERE TO DISPLAY WHICH TERMINAL TO GO

            }
        }
    }
}   
mysql_close($con);   
?>

Code: [Select]
function unUsedLotId(txtElemID){

    var txtElemID_Active = txtElemID;
//alert("VV" + txtElemID_Active.value + "VV" );
    responsePHP = "no_reply";
    changeFocus = false;
    var termNo = terminalNo();
    ajaxRequest = remoteRequestObject();
    ajaxRequest.onreadystatechange = function(){
        if (ajaxRequest.readyState==4 && ajaxRequest.status==200) {
             
          //   var result = ajaxRequest.responseText;
               responsePHP = ajaxRequest.responseText;
         
          //alert(responsePHP)
         
          //   if (result=="1") { result = "Already used Tag";}
          //   if (result=="0") { result = "Tag ok";}
          //   if (result=="G") { result = "Tag ok";}   
          //   if (result=="B") { result = "Incomplete Process";}   
          //   var resultStr = (result=="1") ? 'Tag used or incomplete prerequisites' : 'Tag unused';
            if (responsePHP == "failed") {
                txtElemID_Active.disabled = false;
                txtElemID_Active.value = "";
                txtElemID_Active.focus();
                notify("Report to MIS<br /> Please scan again.");
            }
//------------------------------added by rhoda for integration--------------------------------------------------
           /* else if (responsePHP == "C"){
                 notify("CCCC");
                if (txtElemID_Active.disabled) {
                    txtElemID_Active.disabled = false;                 
                }
                txtElemID_Active.value = "";
                txtElemID_Active.focus(); 
            } */
   
//--------------------------------------------------------------------------------       
            else if (responsePHP == "X") {
                //result = "Lot ID invalid.";
                //responsePHP = "Lot ID invalid.";
                notify("Lot ID invalid. Scan Again.");
                if (txtElemID_Active.disabled) {
                    txtElemID_Active.disabled = false;                 
                }
                txtElemID_Active.value = "";
                txtElemID_Active.focus(); 
            }
//--------------------------------------------------------------------------------           
            else if (responsePHP =="0" || responsePHP =="G"){
               
               if (txtElemID_Name == "txtLotCode") {
                   window.LotID = (txtElemID_Active.value)
               }   
               if (txtElemID_Name == "txtLotCodeDownGrade") {
                   window.LotID_Down = (txtElemID_Active.value)
               }
               
               
               strip(txtElemID_Active)
 
               if (termNo == "1") {
                   isSelected('txtLotCode', 'selWeight_MachineID');
               }
               if (termNo == "2" || termNo == "3") {
                   isSelected('txtLotCode', 'txtKitWeight');
               }
               if (termNo == "4" || termNo == "5" || termNo == "6" || termNo == "7") {
 //////////////////////////////// downgrade modification  ///////////////////////////////////////
                   if (termNo == "4") {
                        //alert(termNo)
                        var chkDownGrade  = document.getElementById('chkDownGrade')
                        if (chkDownGrade.checked == 1) {
                          //alert("here")   
                              if (txtElemID_Name == 'txtLotCode') {
                                 isSelected('txtLotCode', 'txtLotCodeDownGrade');
                              }
                             
                              if (txtElemID_Name == 'txtLotCodeDownGrade') {
                                 isSelected('txtLotCodeDownGrade', 'selMachineID');
                              }
                        }
                        else {
                              //alert("here")
                              if (txtElemID_Name == 'txtLotCode') {
                                 isSelected('txtLotCode', 'selMachineID');
                              }
                       
                        }                         
                   }
                   else {
                       
                       isSelected('txtLotCode', 'selMachineID');
                   }
////////////////////////////////////////////////////////////////////////////////////////
               
               
               }
               if (document.getElementById('notice')!== null) {
                   document.getElementsByTagName('body')[0].removeChild(document.getElementById('notice')) //>> clear the box
               }
            }
//--------------------------------------------------------------------------------           
            else if (responsePHP == "notran") {
               var mensahe1 = "Please return to<br /><span style='font-size:30px;'>Chemical Weighing<br /> or Supervisor</span>";
               notify(mensahe1); 
               
               if (txtElemID_Active.disabled) {
                   txtElemID_Active.disabled = false;                 
               }
               txtElemID_Active.value = "";
               txtElemID_Active.focus();
            }
//--------------------------------------------------------------------------------           
            else {
               /*
               responsePHP == "1" || responsePHP == "B") {
               do this if tag is used in this terminal   
               if (responsePHP == "1") {
                  result = "Already used Lot ID";
                  responsePHP = "Already used Lot ID";
                  notify("Already used Lot ID.<br />Scan again.");
               }
               else if (responsePHP == "B") {
                 // result = "Incomplete Transaction Process"; 
                //  responsePHP = "Incomplete Transaction Process";
                  notify("Incomplete Transaction Process.<br />Scan again.");
               }
               */
               var mensahe1 = "Last Process: <span style='font-size:30px;'> Terminal " + responsePHP + "</span><br /><br />";
               var mensahe2 = "Pls. Proceed: <span style='font-size:30px;'> Terminal " + (parseInt(responsePHP) + 1) + "</span>";
               
               notify(mensahe1 + mensahe2);
            //      notify("Incomplete Transaction Process.<br />Scan again.");
           
               if (txtElemID_Active.disabled) {
                   txtElemID_Active.disabled = false;                 
               }
               txtElemID_Active.value = "";
               txtElemID_Active.focus();
            }
 //--------------------------------------------------------------------------------           
        }
    }   

var txtElemID_Name = txtElemID_Active.id;     

if (termNo == "4") {
    var downGrade  = document.getElementById('chkDownGrade').checked;
    var str =  txtElemID_Active.value +  "&n=" + termNo +  "&down=" + downGrade;
}
else {
    var str =  txtElemID_Active.value +  "&n=" + termNo;
}

if (txtElemID_Name == "txtLotCode") {
    //alert(txtElemID_Name)
    var url = "verifyLotId.php?normal=" + str;
}   
if (txtElemID_Name == "txtLotCodeDownGrade") {
    //alert(txtElemID_Name)
    var url = "verifyLotId.php?downgrade=" + str;
}


ajaxRequest.open("GET", url, true);

 // force i.e. not to cache
ajaxRequest.setRequestHeader("If-Modified-Since", "Sat, 1 Jan 2000 00:00:00 GMT");
//--------------------------------------------------
ajaxRequest.send(null);


ajaxTimeOut = window.setTimeout("timeOut('" + txtElemID_Name + "');", 6000);
       
}

Hi all, I want to call a javascript function from a php function like this:

        public function Buscar()
        {
            $HoraInicio = $_POST['edtHoraInicio'];
            $HoraFin = $_POST['edtHoraFin'];
            $FechaInicio = $_POST['edtFec1'];
            $FechaFin = $_POST['edtFec2'];

            $FechaMax = $FechaFin." ".$HoraFin.":00";
            $FechaMin = $FechaInicio." ".$HoraInicio.":00";

            $_GET["FechaMax"] = $FechaMax;
            $_GET["FechaMin"] = $FechaMin;

            echo $FechaMin;

            echo "<script language=javascript>alert('Hi.')</script>";
           
        }

but the function Buscar never show the alert but shows the $FechaMin

I hopu u guys can help me out with this probem

Thanks,

Siddhartha

I have a PHP script with no HTML in it.  The script runs through and updates a bunch of fields in our Active Directory LDAP accounts.  Well, I don't want it to just update every account automatically.  I want it to prompt me for for each user.  Ex.  "Would you like to update John Doe's position to Director?" "Yes/No"  I'm guessing I'll have to use Javascript for this.  But I don't want to add any HTML/JS if possible.  But I'm guessing this isn't possible without adding some.
Thanks
Mike