PHP - Converting Html Input Into Php

Ok so I got BB Code working. Now I want to prevent Users from inserting HTML into Posts. I have the following:


    $PostText = mysql_escape_string($_POST['replytext']);
    $Replace = Array ('/(<)(.+)(>)/','/(<\/)(.+)(>)/');
    $ReplaceWith = Array ('&LT;\\2&GT;','&LT;/\\2&GT;');
    $PostText = preg_replace($Replace, $ReplaceWith, $PostText);


Now If I were to input
Code: [Select]
<a href=http://phpfreaks.net>Php Freaks</a>Into a forum reply it would return:
Code: [Select]
<a href=http://phpfreaks.net>Php Freaks

When Checking the database it has:
Code: [Select]
&LT;a href=http://phpfreaks.net>Php Freaks</a&GT;

Any help on solving this?

How can i make a clickable input button in photoshop, when i click save for web it's just and image.

I've been poking around online for about a day now trying to find a good way to do the following:

I have an "order" I'm reading in from a MySQL database (not completely relevant, but just fyi). And, for this order there are a number of "parts" (automotive parts) that have been ordered. For each part there is data pertaining to the quantity of parts that have been ordered and the number of parts that have been allocated (based on our inventory) and then a third column that has the number of parts still in that order that are still to be allocated at a future date.

Basically, I'm displaying this data in a form with each row having a checkbox to the far left. What I want to do is allow the user to check any number of check boxes. If a check box is checked the form should submit all of the input text boxes for that row (the user can update the quantities) that I talked about in the second paragraph for that "part" (each part is displayed in a row and has a checkbox).

Unfortunately, most of the examples I found for checkboxes in a form submit a specific value (like a number of a letter). I need the form to submit the values that are in the textboxes. So basically, I'm thinking I need the page to update a PHP object whenever the value of a textbox is changed and then when the user clicks a button it will send the php object for each checked row through GET or POST. But, how would I get it to onchange update a PHP object (the PHP object would need to be a 2-D array where the first index allows you to select the part and the second index allows you to select which quantity you will change). I'm thinking I would need to call a script from the onchange like: onchange="somePHPfunction(partNumberIndex, whichQuantityI'mChanging, currentValueOfThatQuantity)" but of course that would require me to embed some php inside the onchange call since the partNumberIndex and whichQuantity are PHP variables..

Any ideas on how to do this sort of thing?
Or any ideas on how to do this differently?
I'm trying to avoid javascript because it would place a javascript constraint on the users.
But, maybe there's no other way to do this sort of thing?

Any help would be greatly appreciated!

Here's a question for all you great php programmers.
What I want to do is use a variable username as the name of a select input of a form.
I.E
echo"<select name='$user'>";

Of course this code doesn't work though I feel sure that there must be a way to do this.
Anyone know it?

This topic has been moved to JavaScript Help.

http://www.phpfreaks.com/forums/index.php?topic=318062.0

I am a little experienced with PHP sessions, but not totally as I haven't got my head completely around its logic yet, as your about to see.

I wonder wondering how I can go about adding a session entity from a HTML form input?
I'm guessing it will be something like:

$_POST['name'] => $_SESSION['delivery']['name'];


Then, to echo the session entity, you would simply do something like:

echo $_SESSION['delivery']['name'];

?

Hi All, I have a form with a jquery autocomplete input field. Once the user has entered 2 characters, there is a list of values (people names) containing this string that appears. This works good. The values come from a database table with two fields (names and ids). The query that extracts the names also retreives the values in the id field. What would be the syntax to set the "value" attribut of the input tag to the id of a name when the user clicks on that name in the list?   The PHP part that builds the json is :

$data[] = array(
'label' => $row['name'],
'value' => $row['name'],
'id' => $row['id']
);
echo json_encode($data);

The JS begins as follows :

jQuery(document).ready(function(){
$('#input_id').autocomplete({source:'my_jquery_suggest.php',    select: function(event, ui) {
                $(event.target).val(ui.item.value);
                $('#form_id').submit();
                return false;
            },
minLength:2,delay: 1000}).focus(function () {
               
                window.pageIndex = 0;
                $(this).autocomplete("search");
            });
...

Thanks for your help.

Hi,
I have made a basic html site and it has two forms on it. I have the forms linking to a file called process.php.
Basically i need to know what code to put in the php file in order for the forms to save whatever is entered in them to a txt file on my server or computer.
Or any other easier way to do the same thing, save the content of two forms on my site.
Hope i posted this in the right forum subject.
Thanks very much for anyone that helps.

The PHP code sends me an email from the server, but the user input is empty or "blank". I only receive: "From: \ Email: \ Subject: \ Message: " and that's it.

How do I fix my PHP and/or HTML code to receive user input from the form? Attached is my existing HTML and PHP code that doesn't send me any "user input" from the form.

Thanks to anyone who can help!!

Hi Guys,

I am trying to use htmlentities and htmlspecialchars to convert a ampersand (&) to the html markup eqivalant (&amp;) to no avail. any ideas ?

htmlentities("this is & that");

Would someone please take a look at this.

I am trying to use a form to allow users to answer yes or no with radio buttons, and then print it out on another page.
I can only get the script to print the number 1 no matter which button is selected.
When I check the database the number 1 is recorded no matter which button is selected.
In the top of the input form I have
Code: [Select]
<input type='hidden' name='electricity' value='0'>In the body of the input form I have
Code: [Select]
Electricity <input type='radio' name='electricity' value='0'>no <input type='radio' name='electricity' value='1'>yesAnd on the output page I have
Code: [Select]
$electricity = $row['electricity'];
if ($electricity == 1) 
{
$answer = "YES";
}
else
{
$answer = "NO";
}and
Code: [Select]
echo $row['electricity'];I have been over and over this and can not discover my error.
Thank you for looking.

Hi All,

I am trying to "echo" a result from a SQL query, that returns a size in KB, but I want this to read in MB or GB - can PHP change this for me, or is it something I need to do in SQL?

Cheers
Matt

xml file:
Code: [Select]
<PRICES>
<PRICE>
<WIC>HDE0AAFGRBOX</WIC>
<STOCK>100+</STOCK>
<MY_PRICE>219.00</MY_PRICE>
</PRICE>
</PRICES>php file:
Code: [Select]
<?
$filexml='stock.xml';
if (file_exists($filexml)) {
$xml = simplexml_load_file($filexml);
$f = fopen('stock.csv', 'w');
foreach($xml->PRICES->PRICE as $price) {
fputcsv($f, get_object_vars($price),',','"');
}
fclose($f);
}
?>
Error:
Warning: Invalid argument supplied for foreach() in C:\xampp\htdocs\stock.php on line 6

Please help with this.

I hope I can explain what is happening.  I have created two forms in PHP.  The first 'almost' works, i.e. it shows the data.  But I have two problems - 1) the second pulldown menu is always empty and 2) $value from the first pulldown menu ALWAYS equals the last entry thus the last 'if' in the function subdomains ($domains) is always called (but still empty).  The code may explain this better than me:

<!DOCTYPE html>
<html>
<body>
   <!-- processDomains.php is this file - it calls itself (for testing purposes so I can see what is happening) -->
   <form action="processDomains.php" method="post">
   <?php
       // create the domains array (there are actually several entries in the array but I cut it down for testing)
       $domains = array (1 => 'Decommission', 'Migration');
    
       echo "Select Domain:";
       echo "<br>";
    
       // Make the domain pull-down menu - this displays correctly
       echo '<select name="domain">';
       foreach ($domains as $key => $value) {
          echo "<option value=\"$key\">$value</option>\n";
       }
       echo '</select>';

       // input doesn't matter what is 'submitted', always goes to last $value
       echo '<input type="submit" name="submit" value="Submit">';

       // call function subdomains
       subdomains ($value);
    
       function subdomains ($domains) {
           // define values for each array - each array contains available choices for the subdomain pulldown menu
           $migration = array (1 => 'Application Migration', 'Application Patch', 'Application Upgrade');
           $decommission = array (1 => 'Applications', 'Servers', 'Storage');
    
           if ($domains === 'Migration') {
              echo "Select subdomain:";
              echo "<br>";
              // Make the Migration pull-down menu
              echo '<select name="migration">';
              foreach ($migration as $key => $value) {
                  echo "<option value=\"$key\">$value</option>\n";
              }
              echo '</select>';
           } else if ($domains === 'Decommission') {

              /* ===
               * since 'Decommission' is the last entry in the 'Domains' pulldown list, $value ALWAYS equals
               * 'Decommission' and $domains equals $value. So this menu SHOULD work but is always
               * empty.  Thus, two problems - the pulldown menu is always empty and $value isn't based
               * upon user input.
              */
              echo "Select subdomain:";  // this prints so I know I'm in 'Decommission (I eliminated the echo "$domain" to show I'm always coming here)'
              echo "<br>";
              // Make the 'Decommission' pull-down menu
              echo '<select name="decommission">';
              foreach ($decommission as $key => $value) {
                  echo "<option value=\"$key\">$value</option>\n";
              }
              echo '</select>';
              echo '<input type="submit" name="submit" value="Submit">'
           ) // end of 'if-else'
    } // end of function 'subdomain'
     
?>
</form>
</body>
</html>

Let me say thank you in advance and I appreciate the help!  I know I'm doing something (or more than one thing) wrong and I hope someone can tell me what it is.    Best Regards!
Edited by mac_gyver, 19 January 2015 - 09:37 PM.
code tags around posted code please

I am writing a script that will parse my PHP classes and check for things like coupling, visualize my objects and connections, dependencies, check for convention usage, etc.   So, I have a simple file upload.  I'm never saving the files, just get contents and dump the file and work with the string version.   I'm writing it for me, but I figure I might want to open it for others to use in the future, so I may as well write it that way to begin with -- so I need to validate user input.  Problem is, the user input is supposed to be valid PHP code.  I'm thinking that, as long as I'm careful, I shouldn't be executing any code contained in strings, but I'm no security expert and I want a warm fuzzy that my thought on this is correct.  What kinds of things do I need to look out for?  Is it possible to inject when working with strings?   My initial thought is to regex the entire file and replace key portions with known replacements.  So ( and ) would become !* and !^ or $ would become @~ (combinations that -- I think -- don't make sense to php?)  But that may be completely unnecessary processing time if I'm not in any danger, here.  Thanks ahead of time for any help.   PS - as a side question -- what's the best way to verify a file is a php file?  I know of getimagesize for images, but should I just check for <? to verify it's php?  That seems like it would be too easy to fool -- then again, it might not matter much.   -Adam