PHP - Adding An Autoresponder To Feedback Form

Hi.

Can someone show me the proper way to do a feedback form (like a "Contact US" form).
I have read about SQL injections and would like to know I am protecting against it.

And the proper way to store the submitted data in a database for a client's records.

I have a basic form I use, but I am unable to store the data properly.

Any help or a code idea would be appreciated.

Thanks much.

Hello:

Did my first post last week and am new to PHP. Making the jump from Classic ASP into PHP. I got some good advice last time.

I have a feedback form I have been using, and it works fine for sending results to the website owner.

How can I add to it so it will first add all the data to mySQL database, and then email the results to the site owner? Also, I hear about SQL injection attacks a lot - is my current code safe from that?

This is what I have:

contact.php
Code: [Select]
...

<form method="post" name="myform" action="sendmail.php">


Full Name: <input type="text" name="FullName" />

Address: <input type="text" name="Address" />

City: <input type="text" name="City" />

State: <input type="text" name="State" />

Zip: <input type="text" name="Zip" />

Phone: <input type="text" name="Phone" />

Email: <input type="text" name="Email" />

Website: <input type="text" name="Website" />

Comments: <textarea cols="43" rows="6" name="Comments"></textarea>


<input type="submit" /><br />

</form>

...


sendmail.php

Code: [Select]
<?php

$FullName = $_REQUEST['FullName'] ;
$Address = $_REQUEST['Address'] ;
$City = $_REQUEST['City'] ;
$State = $_REQUEST['State'] ;
$Zip = $_REQUEST['Zip'] ;
$Phone = $_REQUEST['Phone'] ;
$Email = $_REQUEST['Email'] ;
$Website = $_REQUEST['Website'] ;
$Comments = $_REQUEST['Comments'] ;

mail( "info@website.com", "Contact Request",

"Full Name: $FullName\nAddress: $Address\n City: $City\n State: $State\n Zip: $Zip\n Phone: $Phone\n Email: $Email\n Website: $Website\n Comments: $Comments\n",    
"From: $Email" );

header( "Location: http://www.website.com/thanks.php" );

?>


Any help or coding examples would be most appreciated!

Thanks!

Hi again:

What I want to do - and am stuck on - is to allow the user to add files to the feedback, submit the form, and the data will get stored in the DB (and the uploaded files will get stored in "uploads"), plus an email will get sent to the client who can click the files links in the email, and download them that way.

I have done this via ASP, but never tried it with PHP ...

This is what my database table looks like"
Code: [Select]
CREATE TABLE `myProductRightData2` (
  `myDate` varchar(55) default NULL,
  `myNameAndProduct` text,
  `myWebsite` text,
  `myProductUse` text,
  `myProductProblemSolver` text,
  `myProductUnique` text,
  `myWhyBetter` text,
  `myProductAppeal` text,
  `myProductSelling` text,
  `myProductResearch` text,
  `file1` varchar(255) default NULL,
  `myProductStory` text,
  `mySpokesperson` text,
  `myProductReviewed` text,
  `myProductDecision` text,
  `file2` varchar(255) default NULL,
  `file3` varchar(255) default NULL
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

--
-- Dumping data for table `myProductRightData2`
--

INSERT INTO `myProductRightData2` VALUES('February 22, 2011', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test', 'test.pdf', 'test', 'test', 'test', 'test1.jpg', 'test2.jpg');

And this is the form code:
Code: [Select]
<?php
$error = NULL;
$myDate = NULL;
$myNameAndProduct = NULL;
$myPhone = NULL;
$myEmail = NULL;
$myWebsite = NULL;
$myProductUse  = NULL;
$myProductProblemSolver = NULL;
$myProductUnique = NULL;
$myWhyBetter = NULL;
$myProductAppeal = NULL;
$myProductSelling = NULL;
$myProductResearch = NULL;
$file1 = NULL;
$myProductStory = NULL;
$mySpokesperson = NULL;
$myProductReviewed = NULL;
$myProductDecision = NULL;
$file2 = NULL;
$file3 = NULL;



if(isset($_POST['submit'])) {

if ((($_FILES["file1"]["type"] == "image/gif")
|| ($_FILES["file1"]["type"] == "image/jpg")
|| ($_FILES["file1"]["type"] == "image/jpeg")
|| ($_FILES["file1"]["type"] == "image/pjpeg"))
&& ($_FILES["file1"]["size"] < 20000))
  {
  if ($_FILES["file1"]["error"] > 0)
    {
    echo "Return Code: " . $_FILES["file1"]["error"] . "<br />";
    }
  else
    {
    echo "Upload: " . $_FILES["file1"]["name"] . "<br />";
    echo "Type: " . $_FILES["file1"]["type"] . "<br />";
    echo "Size: " . ($_FILES["file1"]["size"] / 1024) . " Kb<br />";
    echo "Temp file: " . $_FILES["file1"]["tmp_name"] . "<br />";

    if (file_exists("upload/" . $_FILES["file1"]["name"]))
      {
      echo $_FILES["file1"]["name"] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES["file1"]["tmp_name"],
      "upload/" . $_FILES["file1"]["name"]);
      echo "Stored in: " . "uploads/" . $_FILES["file1"]["name"];
      }
    }
  }
else
  {
  echo "Invalid file";
  }
  
  
  
 $myDate = $_POST['myDate'];
 $myNameAndProduct = $_POST['myNameAndProduct'];
 $myPhone = $_POST['myPhone'];
 $myEmail = $_POST['myEmail'];
 $myWebsite = $_POST['myWebsite'];
 $myProductUse = $_POST['myProductUse'];
 $myProductProblemSolver = $_POST['myProductProblemSolver'];
 $myProductUnique = $_POST['myProductUnique'];
 $myWhyBetter = $_POST['myWhyBetter'];
 $myProductAppeal = $_POST['myProductAppeal'];
 $myProductSelling = $_POST['myProductSelling'];
 $myProductResearch = $_POST['myProductResearch'];
 $file1 = $_POST['file1'];
 $myProductStory = $_POST['myProductStory'];
 $mySpokesperson = $_POST['mySpokesperson'];
 $myProductReviewed = $_POST['myProductReviewed'];
 $myProductDecision = $_POST['myProductDecision'];
 $file2 = $_POST['file2'];
 $file3 = $_POST['file3'];
  
 if(empty($myNameAndProduct)) {
   $error .= '-- Enter your Name and Product. <br />';
 }

 if(empty($myPhone)) {
   $error .= '-- Enter your Phone Number. <br />';
 }

 if(empty($myEmail)) {
   $error .= '-- Enter your Email. <br />';
 }

if($error == NULL) {

$sql = sprintf("INSERT INTO myProductRightData2(myDate,myNameAndProduct,myPhone,myEmail,myWebsite,myProductUse,myProductProblemSolver,myProductUnique,myWhyBetter,myProductAppeal,myProductSelling,myProductResearch,file1,myProductStory,mySpokesperson,myProductReviewed,myProductDecision,file2,file3) VALUES ('%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s')",

mysql_real_escape_string($myDate),
mysql_real_escape_string($myNameAndProduct),
mysql_real_escape_string($myPhone),
mysql_real_escape_string($myEmail),
mysql_real_escape_string($myWebsite),
mysql_real_escape_string($myProductUse),
mysql_real_escape_string($myProductProblemSolver),
mysql_real_escape_string($myProductUnique),
mysql_real_escape_string($myWhyBetter),
mysql_real_escape_string($myProductAppeal),
mysql_real_escape_string($myProductSelling),
mysql_real_escape_string($myProductResearch),
mysql_real_escape_string($file1),
mysql_real_escape_string($myProductStory),
mysql_real_escape_string($mySpokesperson),
mysql_real_escape_string($myProductReviewed),
mysql_real_escape_string($myProductDecision),
mysql_real_escape_string($file2),
mysql_real_escape_string($file3));

                        
  if(mysql_query($sql)) {
  
    $error .= 'Thank you for submitting your product. We will be in contact with you soon.';
    
mail( "m@sp.com", "Product Submission",

"Date Sent: $myDate\n Name and Product: $myNameAndProduct\n Phone: $myPhone\n Email: $myEmail\n Website: $myWebsite\n Product Use: $myProductUse\n Problem Product Solves: $myProductProblemSolver\n Product Uniqueness: $myProductUnique\n Product Better Because: $myWhyBetter\n Product Appeal: $myProductAppeal\n Product Selling Places: $myProductSelling\n Product Research: $myProductResearch\n Research Documentation: $file1\n Product Story: $myProductStory\n Product Spokesperson: $mySpokesperson\n Product Reviewed: $myProductReviewed\n Product Decision Maker: $myProductDecision\n Samples: $file2\n $file3",
"From: $Email" );
  }
  else {
    $error .= 'There was an error in our database, please try again!';
  }
}
}
echo '<span class="textError">' . $error . '</span>';

?>

<form name="myform" action="" method="post" enctype="multipart/form-data">
<input type="hidden" name="myDate" size="45" maxlength="50" value="<?php echo date("F j, Y"); ?>" />


What is the name of your company and product?
<textarea name="myNameAndProduct" cols="72" rows="1"><?php echo $myNameAndProduct; ?></textarea>


What is your phone number?
<textarea name="myPhone" cols="72" rows="1"><?php echo $myPhone; ?></textarea>


What is your email?
<textarea name="myEmail" cols="72" rows="1"><?php echo $myEmail; ?></textarea>


website we can visit for more information?
<textarea name="myWebsite" cols="72" rows="1"><?php echo $myWebsite; ?></textarea>


What is this product used for?
<textarea name="myProductUse" cols="72" rows="3"><?php echo $myProductUse; ?></textarea>


Does this product solve a problem? If so, how?
<textarea name="myProductProblemSolver" cols="72" rows="3"><?php echo $myProductProblemSolver; ?></textarea>


Does your product have unique or cutting-edge features, ingredients or benefits?
<textarea name="myProductUnique" cols="72" rows="3"><?php echo $myProductUnique; ?></textarea>


What makes it better than similar products?
<textarea name="myWhyBetter" cols="72" rows="3"><?php echo $myWhyBetter; ?></textarea>


Does this product have mass appeal? Who is the target audience?
<textarea name="myProductAppeal" cols="72" rows="3"><?php echo $myProductAppeal; ?></textarea>


Is this product currently selling elsewhere? If so, where and what is the retail price?
<textarea name="myProductSelling" cols="72" rows="3"><?php echo $myProductSelling; ?></textarea>


Do you have independent research to prove claims about this product? Please provide copies.
<textarea name="myProductResearch" cols="72" rows="3"><?php echo $myProductResearch; ?></textarea>


Upload independent research copies (Word or PDF files):
<input type="file" name="file1" id="file1" />


How and why did your company start? Does that "story" make this product more interesting?
<textarea name="myProductStory" cols="72" rows="3"><?php echo $myProductStory; ?></textarea>


Do you have a passionate spokesperson that would be comfortable presenting on TV?
<textarea name="mySpokesperson" cols="72" rows="3"><?php echo $mySpokesperson; ?></textarea>


Has this product ever been submitted to QVC for review? If yes, please provide the details.
<textarea name="myProductReviewed" cols="72" rows="3"><?php echo $myProductReviewed; ?></textarea>


Who from your company will make the decision to proceed if QVC is presents the right opportunity?
<textarea name="myProductDecision" cols="72" rows="3"><?php echo $myProductDecision; ?></textarea>


Upload two samples of your product for review (.JPG or PDF files):

<input type="file" name="file2" id="file2" />

<input type="file" name="file3" id="file3" />


<input type="submit" name="submit" value="Submit New Product" class="submitButtonProduct" /><br />


</form>

It's essentially the same feedback for I always use and it works fine, but I have been trying to integrate the upload portion into it
from a tutorial I found on W3C: http://www.w3schools.com/PHP/php_file_upload.asp

Any ideas on how to make this work?

I have an email form that can have comma separated email addresses. I need to modify my code such that initially if the form does not contain any value, it should let me add email addresses to it. When I enter the web page next time it should display and let me edit the existing email addresses. Here is my code below. Right now it does not insert anything the first time.
Code: [Select]
<?
error_reporting(E_ALL & ~E_NOTICE);
$conn = mysql_connect('localhost','test','*****') or trigger_error("SQL", E_USER_ERROR);
$db = mysql_select_db('test',$conn) or trigger_error("SQL", E_USER_ERROR);
//$sql=mysql_query("SELECT * from new_database") or die(mysql_error());
$getemail=mysql_query("SELECT * from email") or die(mysql_error());
if(mysql_num_rows($getemail) > 0)
{
   while($getemail_results=mysql_fetch_assoc($getemail))
   {
      $getemailadd=$getemail_results['email'];
   }
}
else
{
  $getemailadd='';
}
   if (!isset($_POST['submit']))
   {
   ?>
   <b>ADDING A Email</b><br>
   <form action="<?php echo $PHP_SELF;?>" method="post">
   Email:<br> <input type="text" size ="80" name="email" value="<?PHP if(isset($getemailadd)){ echo $getemailadd; } ?>" /><br>
   <input type="submit" name="submit" value="submit" />
   </form>
   <?
   }
   else
  {

    // Get values from form
    $email=$_POST['email'];
    //$sql=mysql_query("INSERT into email(email)VALUES('$email')") or die (mysql_error());
    $sql=mysql_query("UPDATE email SET email='$email'") or die (mysql_error());
    header('Location: index.php');

}
?>

Hi,

I have this PHP code which displays a form input, but I cannot work out how to add this javascript to the text field.

PHP:

<?php
      $data = '<div class="ui-widget infoBoxContainerSearch">' .
              '  <div class="ui-widget-contentSearch infoBoxContentsSearch" style="text-align: center;">' .
              '  <div style="text-align: center;">' . tep_draw_form('quick_find', tep_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'NONSSL', false), 'get') . '' .
              '    ' . tep_draw_input_field('keywords', '') . '&nbsp;' . tep_draw_hidden_field('search_in_description', '1') . tep_hide_session_id() 
  //. tep_image_submit('search_icon.png', MODULE_BOXES_SEARCH_BOX_TITLE) 
  . '</div>' .
              '    </form>' .
              '  </div>' .
              '</div>';

     echo $data;
?>


JavaScript:

value="Search" onfocus="this.value==this.defaultValue?this.value='':null" onblur="this.value==''?this.value=this.defaultValue:null;"

Could anyone point me in the right direction?

Thanks

Hi People.

I am having a problem with this form and for the life of me can't see where I have made the mistake.

On line 33 I have commented where I get the problem. 

If I remove this line (or comment it out) and remove the insert statements for that line then it all works and I can see the php form on my live site.

However, with this in, as it is, I can't see anything, I get a blank page altogether.  Please, can anyone see my mistake?  I have been going over the code now for ages and it's getting late, and I probably am missing something stupid.
Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Untitled Document</title>
</head>

<body>

<?php

$host = 'localhost';
$usr = "vinny";
$password = 'thepassword';
$db_name = 'logbook';

$date = $_POST['date'];
$type = $_POST['type'];
$reg_01 = $_POST['reg_01'];
$reg_02 = $_POST['reg_02'];
$captain = $_POST['captain'];
$passenger = $_POST['passenger'];
$where_01 = $_POST['where_01'];
$where_02 = $_POST['where_02'];
$takeoff_hr = $_POST['takeoff_hr'];
$takeoff_min = $_POST['takeoff_min'];
$landing_hr = $_POST['landing_hr'];
$landing_min = $_POST['landing_min'];
$ws_captain_hrs = $_POST['ws_captain_hrs'];
$ws_captain_min = $_POST['ws_captain_min'];
$ws_student_hrs = $_POST['ws_student_hrs'];
$ws_student_min = $_POST['ws_student_min'];
$3_captain_hrs = $_POST['3_captain_hrs'];// I have a problem with this line or where it inserts this into the DB??? 
/*$3_captain_min = $_POST['3_captain_min'];
$3_student_hrs = $_POST['3_student_hrs'];
$3_student_min = $_POST['3_student_min'];
*/
$errorstring = ""; // default value of errorstring

if(isset($_POST['save_flight'])) {
// Validate all the code inputs that are required fields
if ($date =="")
$errorstring = $errorstring. "Date<br>";
if ($type =="")
$errorstring = $errorstring. "Aircraft Type<br>";
if ($reg_01 =="")
$errorstring = $errorstring. "Reg Prefix<br>"; 
if ($reg_02 =="")
$errorstring = $errorstring. "Registration Mark<br>";
if ($captain =="")
$errorstring = $errorstring. "Captain<br>";
if ($where_01 =="")
$errorstring = $errorstring. "Flight From<br>";
if ($where_02 =="")
$errorstring = $errorstring. "Flight To<br>";
if ($takeoff_hr =="")
$errorstring = $errorstring. "Takeoff Hours<br>";
if ($takeoff_min =="") 
$errorstring = $errorstring. "Takeoff Minutes<br>";
if ($landing_hr =="")
$errorstring = $errorstring. "Landing Hours<br>";
if ($landing_min =="") 
$errorstring = $errorstring. "Landing Minutes<br>";


// does the errorstring = "nothing"?
if ($errorstring !="")
echo "You have not put anything in the following fields: <br><br> $errorstring";
//echo "If you have nothing to put in the box please type the word \"None\" or \"N\/A\"";
//die ("Please try again, ensuring that you fill out all the fields!");
else 
{
//echo "Your data has been saved";
//connect to database
mysql_connect ("$host","$usr","$password") or die ('Error During Connect:<br>'.mysql_error());
mysql_select_db ("$db_name") or die ('Error Selecting DB:<br>'.mysql_error());

$insert_query = "INSERT INTO pilots_logbook (date, type, reg_01, reg_02, captain, passenger, where_01, where_02, takeoff_hr, takeoff_min, landing_hr, landing_min, ws_captain_hrs, ws_captain_min, ws_student_hrs, ws_student_min, 3_captain_hrs) VALUES ('$date', '$type', '$reg_01', '$reg_02', '$captain', '$passenger', '$where_01', '$where_02', '$takeoff_hr', '$takeoff_min', '$landing_hr', '$landing_min', '$ws_captain_hrs', '$ws_captain_min', '$ws_student_hrs', '$ws_student_min', '$3_captain_hrs')";
$insert_action = mysql_query($insert_query) or die ('Error During Insert :<br>'.mysql_error().'<br><br>Error occured running the following code :<br>'.$insert_query);

$id = mysql_insert_id();

echo "Thank you, Your logbook entry has been saved.";
}
}

?>
<p>Use this form to add an entry to your logbook.</p>
<form name = "form1" method ="post" action="">
<table width="650" border="1" cellspacing="0" cellpadding="5">
  <tr>
    <td>Required *</td>
    <td>&nbsp;</td>
    <td>This Format Only</td>
  </tr>
  <tr>
    <td width="180">Date *</td>
    <td width="300">
      <input type="text" name="date" id="date" size = "25"/>
    </label>
     <input type="submit" name="today" id="today" value="Add Today" /></td>
    <td width="170">YYYY-MM-DD</td>
  </tr>
  <tr>
    <td>Aircraft Type *</td>
    <td><input type="text" name="type" id="type" size = "40" /></td>
    <td>E.G. Quantum</td>
  </tr>
  <tr>
    <td>Reg Number *</td>
    <td><input type="text" name="reg_01" id="reg_01" size = "5" />
      -
      <input type="text" name="reg_02" id="reg_02" size = "15"/></td>
    <td>G - ABCD</td>
  </tr>
  <tr>
    <td>Captain *</td>
    <td><input type="text" name="captain" id="captain" size = "40" /></td>
    <td>Name of Captain</td>
  </tr>
  <tr>
    <td>Passenger or Student</td>
    <td><input type="text" name="passenger" id="passenger" size = "40" /></td>
    <td>Were you? P or S</td>
  </tr>
  <tr>
    <td>Flight From *</td>
    <td><input type="text" name="where_01" id="where_01" size = "40" /></td>
    <td>Take off Airfield</td>
  </tr>
  <tr>
    <td>Flight To *</td>
    <td><input type="text" name="where_02" id="where_02" size = "40" /></td>
    <td>Landing Airfield</td>
  </tr>
  <tr>
    <td>Takeoff GMT *</td>
    <td><label>Hr
        <input type="text" name="takeoff_hr" id="takeoff_hr" size = "10" />
        Min
        <input type="text" name="takeoff_min" id="takeoff_min" size="10"/>
    </label></td>
    <td>24 Hr Format Only</td>
  </tr>
  <tr>
    <td>Landing GMT *</td>
    <td><label>Hr
        <input type="text" name="landing_hr" id="landing_hr" size="10" />
        Min
        <input type="text" name="landing_min" id="landing_min" size="10" />
    </label></td>
    <td>24 Hr Format Only</td>
  </tr>
  <tr>
    <td>Captain Weighshift</td>
    <td><label>Hrs
      <input type="text" name="ws_captain_hrs" id="ws_captain_hrs" size = "10"/></label>
      <label>Min
        <input type="text" name="ws_captain_min" id="ws_captain_min" size = "10" />
        <input type="submit" name="autofill_ws_captain" id="autofill_ws_captain" value="Auto Insert" />
    </label></td>
    <td>Button works it out and inserts it here</td>
  </tr>
  <tr>
    <td>Student Weightshift</td>
    <td><label>Hrs
      <input type="text" name="ws_student_hrs" id="ws_student_hrs" size = "10"/></label>
      <label>Min
        <input type="text" name="ws_student_min" id="ws_student_min" size="10" />
        <input type="submit" name="autofill_ws_student" id="autofill_ws_student" value="Auto Insert" />
      </label></td>
    <td>Button works it out and inserts it here</td>
  </tr>
  <tr>
    <td>Captain 3 Axis</td>
    <td><label>Hrs
      <input type="text" name="3_captain_hrs" id="3_captain_hrs" size = "10"/>
    </label>
      <label>Min
        <input type="text" name="3_captain_min" id="3_captain_min" size = "10" />
        <input type="submit" name="autofill_3_captain" id="autofill_3_captain" value="Auto Insert" />
    </label></td>
    <td>Button works it out and inserts it here</td>
  </tr>
  <tr>
    <td>Student  3 Axis</td>
    <td><label>Hrs
      <input type="text" name="3_student_hrs" id="3_student_hrs" size = "10"/>
    </label>
      <label>Min
        <input type="text" name="3_student_min" id="3_student_min" size = "10" />
        <input type="submit" name="autofill_3_student" id="autofill_3_student" value="Auto Insert" />
    </label></td>
    <td>Button works it out and inserts it here</td>
  </tr>
  <tr>
    <td>Passenger Interest Only</td>
    <td>Hrs
    <input type="text" name="passenger_only_hrs" id="passenger_only_hrs" size="10"/>
    Min
    <input type="text" name="passenger_only_mins" id="passenger_only_mins" size="10"/>
    <input type="submit" name="passenger_button" id="passenger_button" value="Auto Insert" /></td>
    <td>Button works it out and inserts it here</td>
  </tr>
  <tr>
    <td>Remarks</td>
    <td><textarea name="remarks" id="remarks" cols="45" rows="5"></textarea></td>
    <td>Went to get microlight forum cup from XYZ airfield. Maximum 500 characters</td>
  </tr>
  <tr>
    <td><input type="submit" name="save_flight" id="save_flight" value="Save Flight" /></td>
    <td><input type="submit" name="reset" id="reset" value="Reset Form" /></td>
    <td>&nbsp;</td>
  </tr>
</table>
<p>&nbsp;</p>
<p>&nbsp;</p>
</body>
</html>

Hi, I would like to know if there's a way to quickly collect and sort form data, then use that data in an if statement. I've tried for a while now and i just can't seem to figure it out.



I would like to do this with radio buttons. Hopefully this will make it clear:
Code:
Code: [Select]
<?php

if (isset($_POST['submit'])) 
{
// I don't know how to do this but maybe something like

// if $_POST values == "Yes"
// put them into an array
// then count how many are in the array, e.g. 2 if 2 "Yes" radio buttons are selected

$count = count($array) . " Yes values selected";
echo $count;

//else if do the same for "No" values

// hopefully this is understandable
}

?>

<!-- i want to take these values and group them, so all the "Yes" values selected together and the "no" values together -->
<form method="post" action="">

<input type="radio" name="first" value="Yes" />
<input type="radio" name="first" value="No" />

<input type="radio" name="second" value="Yes" />
<input type="radio" name="second" value="No" />

<input type="submit" name="submit">
</form>

Hiya pplz.

I am trying to add: class="keyboardInput" to activate a javascript script to an input box.

This is the line im trying to add it to:

<td><?php echo form_input(array('name'=>'quantity','value'=>$item['quantity'],'size'=>'2'));?></td>

I have tried:

<td><?php echo form_input(array('name'=>'quantity','value'=>$item['quantity'],'size'=>'2'));? class="keyboardInput"></td>

didn't work.

Any help would be great.

Ian

I have a basic question for anyone that can help me.
Ive added a captcha input field to the form below, as Im having problems with spam appearing on my testimonial page.

1) How can I prevent the form from being sent if the wrong or no answer is in the form field.
2) How can i have a message appear saying "Sorry wrong answer" if the from isnt sent for the above reason?

add.php
Code: [Select]
<form method="post" action="process2.php" >
<textarea rows="25" cols="100" wrap="physical" name="data">
</textarea>
<input type="hidden" name="area" value="testimonial"/>
What is 5+5?
<input type="text" name="captcha"/>
<input type="submit" value="Add ">
</form>   

process2.php
Code: [Select]
<p class="add">Thankyou for submitting your testimonial;</br>
<?php $data="<br><br>" . $_POST["data"]; ?><br />
<?php $area=$_POST["area"]; ?>
<?php echo $data; ?></p>
 
<?php mysql_query("UPDATE wheelchairwizard SET data = CONCAT(data, '$data') WHERE area = '$area'"); ?>

</br>
Return to the testimonial page - <a href="http://www.wheelchairwizard.co.uk/testimonials.php">click here</a>

Hey guys! I'm trying to add an upload feature to my contact form. I had one before that simply added the image under the text in the email not as an actual attachment and it was pretty easy but I lost the code and can’t seem to find it again. But I seem to be having a problem finding a form that can help me add this. As of now the code in HTML has the upload but the PHP doesn’t at all.   If anyone could help me add the rest of the PHP code I'd really appreciate it!     HTML:

<form name="htmlform" method="post" action="oc.php"><label for="fname"><p>Full Name:</p></label>

  <input  type="text" name="fname" maxlength="50" size="60" style="color:#000;" required="required">
 </td>
</tr>
 
<tr>
 <td valign="top"> <label for="phone">
   <p>Phone Number: </p></label>

  <input  type="text" name="phone" maxlength="50" size="60" style="color:#000;" required="required">
 </td>
</tr>
<tr>

 <td valign="top">  <label for="email">
   <p> Email Address: </p></label>

  <input  type="text" name="email" maxlength="80" size="60" style="color:#000;" required="required">
 </td>
 
</tr>
<tr>
 
		
</tr>
<tr>
<td>
<h4>DELIVERY INFORMATION:</h4>
  <label for="address">
   <p>Address: </p></label>

  <input  type="text" name="address" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="city">
   <p>City: </p></label>

  <input  type="text" name="city" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="state">
   <p>State: </p></label>

  <input  type="text" name="state" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="zip">
   <p>Zip Code: </p></label>

  <input  type="text" name="zip" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
<h4>INFORMATION:</h4>
  <label for="first">
   <p>First Name: </p></label>

  <input  type="text" name="first" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="last">
   <p>Last Name: </p></label>

  <input  type="text" name="last" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="rec">
   <p>Recommendation ID Number: </p></label>

  <input  type="text" name="rec" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="exp">
   <p>Recommendation Experation Date: </p></label>

  <input  type="text" name="exp" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="doc">
   <p>Doctors Name: </p></label>

  <input  type="text" name="doc" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="docphone">
   <p>Doctors Phone Number: </p></label>

  <input  type="text" name="docphone" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
  <label for="ver">
   <p>Verification Website: </p></label>

  <input  type="text" name="ver" maxlength="80" size="60" style="color:#000;" required="required">
</td>
</tr>
<tr>
<td>
 
</td>
</tr>
<tr>
  <td valign="top"><label for="message"><p>How did you hear about us?</p></label><textarea name="message" id="message"   style="background-color:#fff; color:#000;" cols="45"/></textarea></td>
</tr>


<tr>
 <td colspan="2" style="text-align:left">
 


 <p>&nbsp;&nbsp;&nbsp;Upload Recommendation:</p>
&nbsp;&nbsp;&nbsp;<input type="file" name="pic" id="pic">
<br />
 <p>&nbsp;&nbsp;&nbsp;Upload California State ID:</p>
 	&nbsp;&nbsp;&nbsp;<input type="file" name="id" id="id">
<br />

<br />


<input type="image" value="submit"img src="img/sub.png" onmouseover="this.src='img/sub1.png'" onmouseout="this.src='img/sub.png'" />
  
  </form>	

PHP:

<?php
 
// first clean up the input values
foreach($_POST as $key => $value) {
  if(ini_get('magic_quotes_gpc'))
    $_POST[$key] = stripslashes($_POST[$key]);
 
  $_POST[$key] = htmlspecialchars(strip_tags($_POST[$key]));
}
  

	

$ip=$_SERVER['REMOTE_ADDR'];
      $email_to = "info@example.com";
      $email_subject = "Register";
  

	

$email_message .= "Full Name: ".$_POST["fname"]."\n";
  

	

$email_message .= "Phone Number: ".$_POST["phone"]."\n";
  


$email_message .= "Email Address: ".$_POST["email"]."\n";

$email_message .= "Address: ".$_POST["address"]."\n";

$email_message .= "City: ".$_POST["city"]."\n";

$email_message .= "State: ".$_POST["state"]."\n";

$email_message .= "Zip Code: ".$_POST["zip"]."\n";

$email_message .= "First Name: ".$_POST["first"]."\n";

$email_message .= "Last Name: ".$_POST["last"]."\n";

$email_message .= "Recommendation ID Number: ".$_POST["rec"]."\n";

$email_message .= "Recommendation Exp Date: ".$_POST["exp"]."\n";

$email_message .= "Doctors Name: ".$_POST["doc"]."\n";

$email_message .= "Doctors Phone Number: ".$_POST["docphone"]."\n";

$email_message .= "Verification Website: ".$_POST["ver"]."\n";

$email_message .= "Message: ".$_POST["message"]."\n";



$userEmail = filter_var( $_POST['email'],FILTER_VALIDATE_EMAIL );

if( ! $userEmail ){

    exit;
}
  
	




//email headers
 

	

$headers = 'From: '.$_POST["email"]."\r\n".

'Reply-To: '.$_POST["email"]."\r\n" .

'X-Mailer: PHP/' . phpversion();
 

	

echo (mail($email_to, $email_subject, $email_message, $headers) ? "<html><head><meta http-equiv='Refresh' content='0; url=http://www..com/thankyou.html'><body bgcolor='#fff'>
":"<html><body bgcolor='#fff'><center><font color='white'><h2>We're sorry, something went wrong.</h2></font><p><font color='white'>Please return to <a href='http://www..com'></a>.</font></p></center></body></html>");









$ip=$_SERVER['REMOTE_ADDR'];
      $email_to = $_POST["email"];
      $email_subject = "420 In Action";
  
$email_message1 = "Welcome!



Sincerely,

";



//email headers
 

	

$headers = 'From: '.$_POST["email"]."\r\n".

'Reply-To: '.$_POST["email"]."\r\n" .

'X-Mailer: PHP/' . phpversion();
 

	

echo (mail($email_to, $email_subject, $email_message1, $headers) ? "":"");


	

exit();





// test input values for errors
$errors = array();
if(strlen($fname) < 2) {
  if(!$fname) { $errors[] = "You must enter a name."; } 
  else { $errors[] = "Name must be at least 2 characters."; }
}
if(!$email) { $errors[] = "You must enter an email."; } 
else if (!validEmail($email)) { $errors[] = "You must enter a valid email."; }
 
if($errors) {
	// output errors to browser and die with a failure message
	$errortext = "";
	foreach($errors as $error) {
		$errortext .= "<li>".$error."</li>";
	}
	die("<span class='failure'>The following errors occured:<ul>". $errortext ."</ul></span>");
}




// check to see if email is valid
function validEmail($email) {
	$isValid = true;
	$atIndex = strrpos($email, "@");
	if (is_bool($atIndex) && !$atIndex) { $isValid = false; } 
	else {
		$domain = substr($email, $atIndex+1);
		$local = substr($email, 0, $atIndex);
		$localLen = strlen($local);
		$domainLen = strlen($domain);
		if ($localLen < 1 || $localLen > 64) { $isValid = false; }						// local part length exceeded
		else if ($domainLen < 1 || $domainLen > 255) { $isValid = false; }				        // domain part length exceeded
		else if ($local[0] == '.' || $local[$localLen-1] == '.') { $isValid = false; }                  	// local part starts or ends with '.'
		else if (preg_match('/\\.\\./', $local)) { $isValid = false; }					        // local part has two consecutive dots
		else if (!preg_match('/^[A-Za-z0-9\\-\\.]+$/', $domain)) { $isValid = false; }  // character not valid in domain part 
		else if (preg_match('/\\.\\./', $domain)) { $isValid = false; }					// domain part has two consecutive dots
		else if (!preg_match('/^(\\\\.|[A-Za-z0-9!#%&`_=\\/$\'*+?^{}|~.-])+$/', str_replace("\\\\","",$local))) {
			// character not valid in local part unless local part is quoted
			if (!preg_match('/^"(\\\\"|[^"])+"$/', str_replace("\\\\","",$local))) { $isValid = false; }
		}
		if ($isValid && !(checkdnsrr($domain,"MX") || checkdnsrr($domain,"A"))) { $isValid = false; }	// domain not found in DNS
	}
   return $isValid;
}


 ?>

hello, i am hoping someone can help, i have a form that has a body and title fields and then sends to this function below.
it all works fine, but when i add a image or a link it stores it in the text field of the db like this:

<IMG alt=\"\" src=\"/public/images/231781538234094.jpg\" width=796></P>

this is what it should be /public/images/231781538234094.jpg

so when i view the image it doesent show it and i right click the image and goto image properties and i get this:
http://test.cyberglide.co.uk/%22public/images/231781538234094.jpg/%22

Code: [Select]
function content_update() {

$title = mysql_real_escape_string($_POST['title']);
$body = mysql_real_escape_string($_POST['body']);
$page = mysql_real_escape_string($_POST['page']);
$location = mysql_real_escape_string($_POST['location']);
$id = mysql_real_escape_string($_POST['id']);

$sql = "UPDATE content SET title = '$title', body = '$body', page = '$page', location = '$location' WHERE id = '$id'";
$res = mysql_query($sql) or die(mysql_error());
echo "<script>window.location='content.php'</script>";
}

if i manually edit it on the db it works fine

please help, many thanks.

Trying to fix existing some code (complete beginner here) on the company I work for website.

There's a check-box which when ticked should apply delivery charges and if not it shouldn't - currently it's working in that on the same page it calculates the total cost correctly when checked or not checked but when passing on information it always passes on the delivery charge even if un-ticked...

The simplest thing I can see would be to put an if statement in to say if (not ticked) then del_charges = 0.00. Any idea how I can do this in this instance?


Code: [Select]
<?php
      // add a checkbox for delivery charges
echo '<span class="form"><label>Delivery Charges</label>';
      echo '<input type="checkbox" name="del_charges" id="del_charges" value="1" class="boxes" ';
      if ( isset($_POST['del_charges']) && !empty($_POST['del_charges']) )
        echo 'checked="checked"';
      echo '/>';                 
?> 
Thanks.

I'm working on a business listing website using a Wordpress theme as the framework.

Unfortunately, there is a limited number of categories with no option for a user to request a category. Below you can see an image of the form that users utilize to create a listing. http://postimg.org/image/5r8scqh8f/

  Here is the relevant code related to that section:
 

function aitDirItemTaxonomies() {

	register_taxonomy( 'ait-dir-item-category', array( 'ait-dir-item' ), array(
		'hierarchical' => true,
		'labels' => array(
			'name'			=> 'Item Categories',
			'singular_name' => _x( 'Category', 'taxonomy singular name', 'ait'),
			'search_items'	=> __( 'Search Category', 'ait'),
			'all_items'		=> __( 'All Categories', 'ait'),
			'parent_item'	=> __( 'Parent Category', 'ait'),
			'parent_item_colon' => __( 'Parent Category:', 'ait'),
			'edit_item'		=> __( 'Edit Category', 'ait'),
			'update_item'	=> __( 'Update Category', 'ait'),
			'add_new_item'	=> __( 'Add New Category', 'ait'),
			'new_item_name' => __( 'New Category Name', 'ait'),
		),
		'show_ui' => true,
		'rewrite' => array( 'slug' => 'cat' ),
		'capabilities' => array(
				'assign_terms' => 'assign_dir_category'
			)
	));


	register_taxonomy( 'ait-dir-item-location', array( 'ait-dir-item' ), array(
		'hierarchical' => true,
		'labels' => array(
			'name'			=> 'Item Locations',
			'singular_name' => _x( 'Location', 'taxonomy singular name', 'ait'),
			'search_items'	=> __( 'Search Location', 'ait'),
			'all_items'		=> __( 'All Locations', 'ait'),
			'parent_item'	=> __( 'Parent Location', 'ait'),
			'parent_item_colon' => __( 'Parent Location:', 'ait'),
			'edit_item'		=> __( 'Edit Location', 'ait'),
			'update_item'	=> __( 'Update Location', 'ait'),
			'add_new_item'	=> __( 'Add New Location', 'ait'),
			'new_item_name' => __( 'New Location Name', 'ait'),
		),
		'show_ui' => true,
		'rewrite' => array( 'slug' => 'loc' ),
		'capabilities' => array(
				'assign_terms' => 'assign_dir_location'
			)
	));

}
add_action( 'init', 'aitDirItemPostType');

Website: http://reliablist.com     I have made multiple attempts to try to create a 'Request a Category' button, but unfortunately have been defeated by my lack of experience.

If I could get help in any direction, it would be greatly appreciated.   

I am trying to add my email to a contact form to where a customer would fill in a few boxes and hit send and i would receive.  Where would i find the code to enter it?  thanks, w

I have a simple contact form I did a while ago for a small company.

They emailed me saying they are getting bits of spam mail from the site occasionally and would like to get it stopped if possible.

This is how my form looks:

Code: [Select]
         <form method="post" action="mailer.php">
                 
              <div class="form_left">
                  <p>Name:<br>
                  <input type="text" name="name" size="24" autofocus="true" placeholder="Type Here" required="true" /></p>
              </div>
         
               <div class="form_right">
                  <p>Email:<br>
                  <input type="email" name="email" size="24" placeholder="Type Here" required="true" /></p>
              </div>
             

              <div class="form_left">
                  <p>Company Name:<br />
                  <input type="text" name="company" size="24" placeholder="Type Here" required="true" /></p>
             </div>
         
         
               <div class="form_right">
                   <p>Phone Number:<br />
                  <input type="text" name="phone" size="24" placeholder="Type Here" required="true" /></p>
              </div>
           
       
             <div class="form_left">
                    <p>Your Message:<br />
                     <textarea rows="6" name="message" cols="55" placeholder="Type Here" ></textarea></p>
           
             </div>
             
             
            <p class="submit"><input type="submit" value="Send Mail" name="submit" /></p>             


      </form>

Code: [Select]
     <?php
if(isset($_POST['submit'])) {

// $to = "mail@mydomain.com";
$to = "mail@mydomain.com";

$subject = "Web Enquiry";

$name = $_POST['name'];
$email = $_POST['email'];
$company = $_POST['company'];
$phone = $_POST['phone'];
$message = $_POST['message'];
 


 if (strlen(trim($message)) > 0) {
 
    $body = "From: $name \n\n Email: $email \n \n Company: $company \n\n Phone Number: $phone \n\n Message: $message";
 
    if (mail($to, $subject, $body)) {
      echo "<h3>Thanks! Your email has been sent <br />We will answer your enquiry as soon as possible.</h3>";
    } else {
      echo 'Cannot sent mail';
    }
  } else {
    echo "<h3>Error! <br />Please ensure that all fields are filled out correctly in order to email us.</h3>";
  } 
}
?>

Any help or pointers as to how I could add in a little security would be appreciated.