PHP - Form Fields Not Retaining Data On Post

How can I encrypt POST data from a form? Basically, I want to ensure that the data on the form is not in plain text ever. Is this possible?

<form method="post">
<input type="text" name="email" size="40">
<input type="password" name="password"/>
...


Basically, when this posts, I want to do a foreach on $_POST and see something like:
password = 1f3870be274f6c49b3e31a0c6728957f
  and not
password = stringTheUserTyped

I hope what I'm asking for is clear.
(PHP 5.2.14)

Thanks!

I needed a server side PHP validation script for my form to use on top of client side Javascript as a backup. I found a nice package where I just include the validator and set a few options then it does the rest. However it doesn't seem to work with the action="whateveraction.php" for the form. It will skip all the validation and immediately go to the action script. So I left that blank as you can see in the form below and figured I would send the post data somehow to the script using PHP when the validation is successful. However I am stumped on how to do that can I get some coding help?

This is the small validation script. I will attach the formvalidator.php in this post.
Code: [Select]
<?php
require_once "formvalidator.php";
if(isset($_POST['submit']))
{
    $validator = new FormValidator();
    $validator->addValidation("age","req","Please fill in your Age");
    $validator->addValidation("mcid","req","Please fill in your Minecraft Username");
    $validator->addValidation("description","req","Please fill in a Description");
    if($validator->ValidateForm())
    {

      //need something here to have it send the post data to /mcbuildapp/form_submit.php

    }
    else
    {
        echo "<div class=blockrow><b><font size=5>Form Errors:</font><b></div>";

        $error_hash = $validator->GetErrors();
        foreach($error_hash as $inpname => $inp_err)
        {
          echo "<div class=blockrow><p><font color=red>$inp_err</font></p>\n</div>";
        }
    }
}

Then the form if it matters....
Code: [Select]
<div class="blockrow">
<font size=4><b>Minecraft Building Rights Application</b></font>
<br />
<br />
<b>Failing to fill in any of these fields sufficiently will result in an automatic denial of your application!</b><br />
<b>Think of it this way, being lazy and applying wrong is only wasting your time. Take the time to do it correctly the first time.</b>
 
<br />
<br />

<b><font color=red>To ensure proper user authentication and security you must first join the server at least once before applying for your building rights to work!</font></b>
<br />
<br />
<form action="" id="mcbuilderapp" name="mcbuilderapp" method="post">

<label><b>Your Minecraft Username (required)</b><br />
Use exact capitalization and punctuation that matches your Minecraft.net account!</label>
 
<br />
<br />
 
<input type="text" name="mcid" id="mcid" maxlength="25"/>
 
<br />
<br />
 
<label><b>Your Age (required)</b></label>
 
<br />
<br />
                 
<input type="text" name="age" id="age" maxlength="3"/>
   
<br />
<br />
 
<label><b>Describe Yourself (required)</b><br />
Describe yourself in <b>no less</b> than 3 sentences using <b>correct grammar</b>.</label>
 
<br />
<br />
 
<textarea name="description" id="description" minlength="10" maxlength="1000" cols=60 rows=5 wrap="physical">
</textarea>
 
<br />
<br />
 
<input type="submit" name="submit" value="Submit" />
</form>
</div>
MOD EDIT: PHP manual tags changed to code tags . . .

[attachment deleted by admin]

I have a form with lots of fields.

How would I run a loop to get each field name and data into an array, so i can then send it off to a function to process each field name / data differently. Instead of typing all the variables in the main function name for each post.

Would a foreach statement work?

Hi,

I'm working on a web application that will interact with an existing website from another company.

On the other company's site, there will be a form (using POST) that has my web application as the action element. The user who clicked the submit button will be redirected to my site, where I need to receive the $_POST data from this form to process before redirecting into the web application.

I have done work on the other side, using standard form posts to send data to another site, but I've never had to write the code for the receiving end.

How do I receive the form data posted from the other website?  Can I access the $_POST[''] array as I would with any normal same-site POST transaction?

Please let me know if you need additional detail or if my question wasn't clear! I'm fast approaching deadlines and really appreciate your help!

Thanks!

ok..ive done this a million times..i have a working example here and i copied it and amended it for this new project but for some reason i cant get a form to post data to another page.

this is the error message i get

Notice: Undefined index: username in C:\wamp\www\uni\fyp\site\mobile\login.php on line 16

Notice: Undefined index: password in C:\wamp\www\uni\fyp\site\mobile\login.php on line 17

here is my form code:

                    <form method="post" action="login.php">
                        <table align="center" cellpadding="0" cellspacing="0">
                        <tr>
                            <td style="vertical-align:top;">Username:&nbsp; </td><td><input type="text" name="username" value="" /></td>
                        </tr>
                        <tr>
                            <td style="vertical-align:top;">Password:&nbsp; </td><td><input type="password" name="password" value="" /><br /><input type="submit" id="submit" value="Login" /></td>
                        </tr>
                        </table>
                    </form>


and here is the code within the login.php where the form should post to

$username = $_POST['username'];

$password = $_POST['password'];

// Help protect against MySQL injection

$username = stripslashes($username);

$password = stripslashes($password);

$username = mysql_real_escape_string($username);

$password = mysql_real_escape_string($password);

// Selecting data from database where correct username and password are found

$sql="SELECT * FROM customer WHERE username='$username' and password='$password'";

$result=mysql_query($sql) or die(mysql_error());



i cant see anything wrong..been looking for hours...please please help me

Hi, I have been trying to get the below code to work but without luck for the past couple of days.

Can anyone help point out where i am going wrong.

I have a webpage that has several buttons which will eventually let users search for data stored in different tables of a postgresql database ( i have simplified the code here to just two buttons).

When the user clicks the Search for hostname button a form is displayed letting them type in their search criteria.

Upon clicking the submit button i am able to access the users search strings with no problem but i cannot get the original search form to display above the search results additonaly including the users original search strings.

Any help on this would be much appreciated as i am pulling my hair out, as you can probably guess i am very new to PHP/HTML

My code is


<? 
session_start(); 
?>

<form method="POST" action="<? echo $_SERVER['PHP_SELF'];?>">
<center>
<button type="submit" id="green_button" name="searchhostname">Search for Hostname</button>
<button type="submit" id="green_button" name="searchipaddress">Search for IP address</button>
</center>
</form>
</body>




<?
// If user clicks the search hostname button display the additonal search form
if ($_POST['searchhostname'])
{
echo "Search for Hostnames and IP Addresses:<br><br>";
echo "<form method='POST' action='".$_SERVER['PHP_SELF']."'>";
echo "Hostname: <input type='text' name='hostname' size='16' value='".$_POST['hostname']."'/>";
echo "<br>";   
echo "Operating System: <input type='text' name='ostype' size='16' value='".$_POST['ostype']."'/>";
echo "<br>";
echo "<input type='submit' id='green_button' value='Search' name='runsearch'><br><br>";
echo"</form>";


}

// If user has entered criteria to search on run the search but alos display the original search form above
// and any data the user has entered before displaying results

if ($_POST['runsearch'])
{
//In reality this is where the users search data will be compared to a postresql database....

echo "You want to search for hostname: ".$_POST['hostname']."<br>";
echo "You want to search for operating system: ".$_POST['ostype']."<br>";
}


?>

I cannot figure out how to retain the inputted information once submit is pressed. I want the user to enter their first name, last name, hours of work, and hourly pay rate. Then, I want them to press submit. Their pay will be calculated and displayed, but I still want their inputted information to be visible. How can I do that??

Here is my code:
Code: [Select]
<html>
<head>

<?php

$pay = $_POST['pay'];
$hours = $_POST['hours'];
$extra = $_POST['extra'];
$rate = $_POST['rate'];

if ($hours > 40){
        $extra=$hours-40;
        $hours=40;
        $pay=($extra*1.5*$rate)+($hours*$rate);
} else {
        $pay=$hours*$rate;
}
echo "Your pay is:  <br /> $ $pay <br />"
;

?>
</head>
<body>

<form method='post' action='pay2.php'>
First Name: <input type='text' name='first'><br/>
Last Name: <input type='text' name='last'><br/>
Hours of Work: <input type='text' name='hours'><br/>
Hourly Pay Rate: <input type='text' name='rate'><br/>
<input type='submit' value='submit'>

</form>
</body>
</html>

Hello all.

I'm new here... and new to php... so please be gentle if I'm overlooking something that's blindingly obvious.

I have a 'view blog entries' page and an 'edit blog entries' page. When I go to the 'edit blog entries' page, I want the form fields to display the preexisting blog content for whatever entry I'm about to edit.

The code below does display the 'title' but it does not display the 'article' content. (However, the 'title' and 'article' content both show when I view the source code.)

Can anyone tell me what I could be doing wrong? Thanks in advance.

Code: [Select]
// Retrieve the blog post's information:
$q = "SELECT title, article FROM entries WHERE article_id=$article_id";
$r = @mysqli_query ($dbc, $q);

if (mysqli_num_rows($r) == 1) { // Valid blog entry ID, show the form.

// Get the blog entry's information:
$row = mysqli_fetch_array ($r, MYSQLI_NUM);

echo '<form action="edit_entry.php" method="post">

<p>Title:<br />
<input type="text" name="title" size="45" maxlength="80" value="' . $row[0] . '" /></p>
<p>Blog entry<br />
    <textarea name="article" id="article" cols="45" rows="5" ' . $row[1] . '></textarea>
  </p>

<p><input type="submit" name="submit" value="Submit" /></p>
<input type="hidden" name="submitted" value="TRUE" />
<input type="hidden" name="article_id" value="' . $article_id . '" />
</form>';

} else { // Not a valid entry ID.
echo '<p class="error">This page has been accessed in error.</p>';
}
mysqli_close($dbc);
?>

Hi I have a list of states using the array method in a form. The drop down menu works fine.  I want to save the user choice,if the form is re-displayed due to a blank field or pattern mismatch.  I know I can use the selected=selected, but don't know wher to put the statement:
My array is:
state_province = array ("list of states", "provinces")
Var in my labels array is "state"=>"state"
Here is my code for the select/option statement:

{
 if($field == "state")
   {
      echo "<div class='province_state'><label for='state' size='10'>* Province/State</label><select>";
            
      foreach($state_province as $state)
         {
         echo "\n<option value='$state_province' /> ";   
          echo $state ;
          echo "</option>";
         }
      echo "</select></div>\n";   

   }
?Is this the correct code to add and where would I add  it?
          if(@$_POST['state'] == $value)
     {
         echo "selected='selected'  ";
     }          

$post='{"cart_items":[{"configuration":{"price":100,"recharge_number":"9999999999"},"product_id":"999","qty":1}]}';

i try this n reslut was :There are no valid items in cart:   help me plz
Edited by ShivaGupta, 30 November 2014 - 01:11 AM.

Hey guys I have a form, but on the form you are able to add extra fields. My question is how would I POST those extra fields? The way I always do it is $_POST['field_name'], however how would I know if theyve added new fields. Here is an image of what the field looks like so you get a better idea of what im talking about.

Hi

I have a form that is to input data from input fields to a table.
The form is as follows:

                            $query = $DB->query("SELECT country_code, country_id, IF(country_code = '".$country_code."', '', '') AS sel FROM exp_sme_countries WHERE site_id='".$this->settings['site_id']."' ORDER BY country_name ASC");
                            foreach ($query->result as $row)
                            {
                               $options .= '<label>' . 'Phrase for ' . $this->settings['countries'][$row['country_code']] . '</label>' . '<br />';
                               $options .= '<input style="width: 100%; height: 5%;" id="country_data" type="text"  name="country_id[]"  />' . '<br /><br />';
                               $options .= '<input type="hidden"  name="country_data[' . $row['country_id'] . ']" value="'.$row['country_id'].'"  />';
                            }


This outputs:
Code: [Select]
<input style="width: 100%; height: 5%;" id="country_data" type="text"  name="country_id[]"  />
<input type="hidden"  name="country_data[68]" value="68"  />

<input style="width: 100%; height: 5%;" id="country_data" type="text"  name="country_id[]"  />
<input type="hidden"  name="country_data[28]" value="28"  />

What I need to do, is get the values from the input fields and then match them with the correct hidden field value

So if in the first input field, I typed in 'Test data' and the second input, i typed 'This is great'

On the POST, I need to find the the value ('Test data') and also the value from the hidden field.

So something like:
Quote

The text you entered is: Test data with hidden value of 68
The text you entered is: This is great with hidden value of 28


I'd rather not use $_GET as this is a form that inserts data into a database.

Could someone point my in the right direction or provide an example?

Hey Guys. I am working with a form that shows the grand total on the checkout page. The value of the grand total is inside a hidden field. When click on  submit, the _POST array doesn't get back the last value of the grand total. I need to hit the button twice to get the last value. The weird thing is when I  echo the value of the grand total it display the latest value, but not with the POST array   For example. If the grand total is $10.00 and I click on submit. It will show the POST['grand_total'] as empty. If I click on submit again it will show the grand total of $10.00. Below is my code that I am working with. Any help would be really appreciated.

if(isset($_POST['submit'])) {
/* Doesn't show if i put it after if($_POST['submit'] */
if(isset($_POST['grand_total'])) {
echo $_POST['grand_total'];
}

}

//A bunch of other html/php code. Another class calculates the subtotal assigns it the variable $subtotal



$cart_totals = new cartTotals($subtotal, $discounted_amount,$post_values->tip); // Cart class is shown below

/* Doesn't show if i put it before if($_POST['submit'] */
if(isset($_POST['grand_total'])) {
echo $_POST['grand_total'];
}
echo  "<input name='grand_total' type='hidden' value='$cart_totals->grand_total'  />"; // Shows the grand total after second from submission
echo "$cart_totals->grand_total"; // Shows grand total after the first submission

Cart Totals Class

class cartTotals  {

	public $subtotal;
	public $sales_tax;
        public $tip;
	public $grand_total;
        public $discount_amount;
	public $href_page;
	public $invalidCouponMessage;
	const  TEST_ENVIORMENT = FALSE;


	/**
	 * [ Function gets constructed in the order summary where the [$discount_amount= ""]  arg does need to be passed.
     * But does get passed in when called on the checkout.php page. Therefore we set the default value to an empty string.]
	 * @param [float] $subtotal   [subtotal get passed in from the parent class coreCartFunction]
	 * @param string $discount_amount [The class checkCouponCode calculates this discount amount based on the
     * subtotal and the discount amount. It gets instantiated on the clients side and passed is this construction function.
     * This is all done on the checkout page.]
	 */

    /*The way the construct function works is by invoking all the methods the passed arguments
    When the methods get invoked the do all the work and set the properties its values. The properties then get echoed out
    on the client side.  */
	
    function __construct($subtotal="", $discount_amount= "", $tip=""){
    
    $this->subTotal($subtotal, $discount_amount);//SubTotal method takes the discount amount and subtracts it from the subtotal.
    $this->salesTax($subtotal, $discount_amount);
    $this->tip = $tip;
    $this->grandTotal();
	}

    private function subTotal($subtotal,$discount_amount) {

            $rounded_subtotal = round($subtotal-$discount_amount,2);
            $money_format_subtotal =  money_format('%i',$rounded_subtotal);
            $this->subtotal = $money_format_subtotal;
    }


    private function salesTax($subtotal, $discount_amount =""){
	$sales_tax = (STORE_SALES_TAX)?(float)STORE_SALES_TAX:8.875;
	$sales_tax =(($this->subtotal)*$sales_tax)/100;
	$sales_tax = round($sales_tax,2);
	$this->sales_tax = $sales_tax;
	}


	public function Tip() {
    //global $post_values;
    //$last_tip_selected = $post_values->tip > 0 ? $post_values->tip : "" ;
	$tip_output = "<select id='tip' name='tip'>";
 	for($tip=0.00; $tip<=11.75; $tip+=0.25){
 	if( $tip == "2") {$selected = " selected";} else {$selected ="";}
       $formatted_tip =  money_format('%i',$tip);

	$tip_output .= "<option {$selected} id='selected_tip' value='$formatted_tip'>"."$".$formatted_tip ."</option>".PHP_EOL;
		}

		$tip_output .= "</select>";
		return $tip_output;

    }

    private function grandTotal(){
        $grand_total = round($this->sales_tax+$this->subtotal+$this->tip,2);
        $grand_total_formatted =  money_format('%i',$grand_total);
        $this->grand_total = $grand_total_formatted;

    }

I have a form on our website that a user can fill out for custom product.  I want the form data to be 1) stored into a mysql database AND after storing said data, 2) email the same data to our sales department.

1)  The form data DOES get stored into mysql database (except for the first two fields, for some weird reason)

2) I added a "mail" section to the php file that stores the data into the database, but it is not working correctly.  I have stripped the email portion down to sending just one of the fields in the "message" to make it easier for troubleshooting

I have included here, both the form section of the html file, and the formdata.php file that processes the data for your  analysis.  I am relatively new to php so there are going to be some issues with security, but I can work on those after I get the store & email process to work correctly.  Please review my code and see if anyone can be of assistance.  I looked through the forums and couldn't find another issue that was the same as mine.  If I just overlooked, please tell me the thread post #.  Thanks

THE FORM WHICH COLLECTS THE DATA
*******************************
<form method=POST action=formdata.php>

                 
  <table width="640" border=0 align="center">
    <tr>
      <td align=right><b>First Name</b></td>
      <td><input type=text name=FName size=25></td>
      <td><div align="right"><b>Telephone</b></div></td>
      <td><input type=text name=Tel size=25></td>
    </tr>
    <tr>
      <td align=right><b>Last Name</b></td>
      <td><input type=text name=LName size=25></td>
      <td><div align="right"><b>Fax</b></div></td>
      <td><input type=text name=Fax size=25></td>
    </tr>
    <tr>
      <td align=right><b>Title</b></td>
      <td><input type=text name=Title size=25></td>
      <td><div align="right"><b>Email</b></div></td>
      <td><input type=text name=Email size=50></td>
    </tr>
    <tr>
      <td align=right><b>Company</b></td>
      <td><input type=text name=Comp size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Address</b></td>
      <td><input type=text name=Addr size=25></td>
      <td><div align="right"><b>Estimated Annual Volume</b></div></td>
      <td><input type=text name=EAV size=25></td>
    </tr>
    <tr>
      <td align=right><b>City</b></td>
      <td><input type=text name=City size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>State/Province</b></td>
      <td><input type=text name=SProv size=25></td>
      <td><div align="right"><b>Application</b></div></td>
      <td><input type=text name=Appl size=25></td>
    </tr>
    <tr>
      <td align=right><b>Country</b></td>
      <td><input type=text name=Ctry size=25></td>
      <td><div align="right"><b>Type of System</b></div></td>
      <td><input type=text name=Syst size=25></td>
    </tr>
    <tr>
      <td align=right><b>Zip/Postal Code</b></td>
      <td><input type=text name=ZPC size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td><div align="right"><strong><font color="#FFFF00" face="Arial, Helvetica, sans-serif">COIL
          DESIGN</font></strong></div></td>
      <td><font color="#FFFF00" face="Arial, Helvetica, sans-serif"><strong>PARAMETERS</strong></font></td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Primary Resistance (ohms)</b></td>
      <td><input type=text name=Pres size=25></td>
      <td><div align="right"><b>Primary Inductance (mH)</b></div></td>
      <td><input type=text name=Pind size=25></td>
    </tr>
    <tr>
      <td align=right><b>Secondary Resistance (ohms)</b></td>
      <td><input type=text name=Sres size=25></td>
      <td><div align="right"><b>Secondary Inductance (H)</b></div></td>
      <td><input type=text name=Sind size=25></td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Peak Operating Current (Amps)</b></td>
      <td><input type=text name=POC size=25></td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b>Output Energy (mJ)</b></td>
      <td><input type=text name=Egy size=25></td>
      <td><div align="right"><b>Output Voltage (kV)</b></div></td>
      <td><input type=text name=Volt size=25></td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right><b># HV Towers per Coil</b></td>
      <td><input type=text name=TPC size=25></td>
      <td><div align="right"><b># of Coils per Package</b></div></td>
      <td><input type=text name=CPP size=25></td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td align=right>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <th colspan=4><b>Please enter any additional information he </b></th>
    </tr>
    <tr>
      <th colspan=4><textarea name=Mess cols=50 rows=10 id="Message"></textarea></th>
    </tr>
  </table>
  </dl>
  <div align="center">
    <p>
      <input type=hidden name=BodyTag value="&lt;body  bgcolor=&quot;#484589&quot; text=&quot;#FFFFFF&quot; link=&quot;#FFFF00&quot; alink=&quot;#FFFFFF&quot; vlink=&quot;#FF7F00&quot;&gt;">
      <input type=hidden name=FA value=SendMail>
    </p>
    <p><font color="#FFFF00" face="Arial, Helvetica, sans-serif"><strong>PLEASE MAKE SURE ALL
      INFORMATION<br>
      IS CORRECT BEFORE SUBMITTING</strong></font></p>
    <p>
      <input type=submit value="Submit Form">
    </p>
  </div>
</form>
THE FILE THAT PROCESSES THE FORM DATA (formdata.php)
***********************************************
<?php
$con = mysql_connect("localhost","XXX","XXX");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("customform", $con);

$sql="INSERT INTO formdata (Fname, Lname, Title, Comp, Addr, City, SProv, Ctry, ZPC, Tel, Fax, Email, EAV, Appl, Syst, Pres, Pind, Sres, Sind, POC, Egy, Volt, TPC, CPP, Mess)
VALUES ('$_POST[Fname]','$_POST[Lname]','$_POST[Title]','$_POST[Comp]','$_POST[Addr]','$_POST[City]','$_POST[SProv]','$_POST[Ctry]','$_POST[ZPC]','$_POST[Tel]','$_POST[Fax]','$_POST[Email]','$_POST[EAV]','$_POST[Appl]','$_POST[Syst]','$_POST[Pres]','$_POST[Pind]','$_POST[Sres]','$_POST[Sind]','$_POST[POC]','$_POST[Egy]','$_POST[Volt]','$_POST[TPC]','$_POST[CPP]','$_POST[Mess]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "Your Information Was Successfully Posted";

mysql_close($con);

$to = "recipient email address here"; 
$subject = "Custom Form"; 
$email = $_POST['Email'] ; 
$message = $_POST['Comp'] ; 
$headers = "From: $Email"; 
$sent = mail($to, $subject, $message, $headers) ; 
if($sent) 
{print "Your mail was sent successfully"; }
else 
{print "We encountered an error sending your mail"; }
?>