PHP - Hiding Form After Submission With <?php Echo $_server['php_self']; ?>

I have a code built in, which is in my localhost and connects to an external database. I have set my connections right, and when I try to login via the page, after pressing submit, my url changes to
localhost/<? echo $_SERVER['PHP_SELF']; ?>?action=validate

And I get this displayed.
Quote

Quote

    Access forbidden!

    You don't have permission to access the requested object. It is either read-protected or not readable by the server.

    If you think this is a server error, please contact the webmaster.



where validate is for validating. Any help?

Hi,

I have an issue here, after user log in, it will direct them back to the url link '.admin.php', however it has directed them to this url 'http://www.123.com\/admin.php'. As you can see there is an extra backward slash, may I know what would have caused the backward slash? May I know how do I rectify it? Thanks


Code: [Select]
$home_url = 'http://' . $_SERVER['HTTP_HOST'] . dirname($_SERVER['PHP_SELF']) . '/admin.php';
header('Location: ' . $home_url);

How come my$_SERVER['PHP_SELF'] echos the filename.php

I have a rewrite rule and i need it to echo

http://site.com/file/321

instead of filename.php?id=321


Help! Godaddy wont tell me why its doing that

I am just setting up a db to catch user info on my site. After some testing all is working except that when I use Safari, my log wrongly shows that I am using Firefox. I have been scanning the web for a solution but all workarounds I have found seem to be very out of date. Can anyone help with this? here is the code I am using:

Code: [Select]
//logs user info to db
$browser = $_SERVER['HTTP_USER_AGENT'];
$time = $_SERVER['REQUEST_TIME'];
$refer = $_SERVER['HTTP_REFERER'];
$page = $_SERVER['PHP_SELF'];
$pageQuery = $_SERVER['QUERY_STRING'];
$ip = $_SERVER['REMOTE_ADDR'];

I successfully build a form, and I have a few echo's which will echo out error messages when an input box is left empty.

The echo messages used to be on the same page while I was using PHP_SELF, now that I've separated the script from the form it will now be shown on a new empty page and the user has to use the browser's navigators to navigate back. I'd still like to keep my script from the form separated for read-ability reasons, but I'd also like to have the echo messages outputted on the same page as the form.

How can I do that?

I'm a newbie, so excuse this basic question.


P.S.
If somebody can give me a tip how to position the echo messages in the design, I'd appreciate it a lot, because it sometimes messes up the design.

Hello

I have a from that updates a few things in the db, and uses "<?php echo $PHP_SELF;?>".

The form does update everything fine, however that page does not reflect it. If I refresh the page manually
I can see the new values.

Is this a common thing, and can anything be done to fix this?

This topic has been moved to JavaScript Help.

http://www.phpfreaks.com/forums/index.php?topic=326389.0

what's the difference between them? how to use them. i print_r($_SERVER). there are no result of $_SERVER['PATH_INFO'] and $_SERVER['PORIG_PATH_INFO'] .why? how to enable it.i have read the php manual about them, but still don't understand . expect someone can explain them.thank you

Hi there,

I am having some issues with a page failing security tests because of a form. The form's text input files is getting sanitized when posted but the only thing I can think is that the form action="" is $_SERVER['REQUEST_URI'] and this then includes anything that is within the URL.

<form name="zipcode" id="zipcode" action="<?php echo htmlentities($_SERVER['REQUEST_URI'], ENT_QUOTES, "UTF-8"); ?>" method="post">
   <label for="zip" class="smalllbl">Zipcode: </label>
   <input type="text" class="smallzip" name="zip" id="zip" value="" />
</form>

Has anyone else experienced this when running PCI Compliance style security tests? And if you have, why would this happen as the same form action is used elsewhere with no issues.

Many thanks in advance
Simon

Where should my Form go once it is submitted?

I am reading through some old code, and I was using some pretty convoluted programming to get everything (e.g. error and success messages after form submittal) to work.

Basically what I would do was...
Code: [Select]
HTML to Open Page
PHP to Handle Form
If Data Okay...
Success Message (e.g. "Your account was created!")
HTML to close out Page
If Data Invalid...
Failure Message (e.g. "A System Error occurred.  Please contact the Administrator.")
HTML to close out Page
HTML Form
HTML to Close Page
I have heard that you should always put your PHP first in the script and then follow it up with your HTML Page and Form.

But where should you go once the form is submitted?


My second attempt at things - to fix the mess above - was to REDIRECT the user to a "Handling Page" which basically was a large case statement that would read a "processing code" and display the right message.

But that seems kind of hokey too?!   

Can someone help me come up with a more professional and scalable solution??

Thanks,


Debbie

I'm trying to figure out where my problem is. Its not submitting my form. I'm getting the alert but when it submits it does the url?variables=whatever deal.

Code: [Select]
<?php require ('php/eventnames.php'); ?>
   
<script type="text/javascript" src="forms/addnew/js/eventnames.js"></script>

<!-- Form -->
<form action="#" id="eventNameForm" >
    <fieldset>
    <legend>Add New Event Name</legend>
            <div class="field required">
        <label for="eventName">Event Name</label>
        <input type="text" class="text" name="eventName" id="eventName" title="Event Name"/>
        <span class="required-icon tooltip" title="Required field - This field is required, it cannot be blank, and must contain something that is different from emptyness in order to be filled in. ">Required</span>
        </div>
            <div class="field required">
        <label for="shortName">Event Short Name</label>
        <input type="text" class="text" name="shortName" id="shortName" title="Event Short Name"/>
        <span class="required-icon tooltip" title="Required field - This field is required, it cannot be blank, and must contain something that is different from emptyness in order to be filled in. ">Required</span>
        </div>
            <div class="field required">
        <label for="eventType">Event Type</label>
                <select class="dropdown" name="eventType" id="eventType" title="Event Type">
                    <option value="">- Select -</option>
                    <?php
                        $eventTypes = array('Singular', 'Recurring', 'Pay Per View');
                        foreach($eventTypes as $et):
                    ?>       
                        <option value="<?php echo $et; ?>"><?php echo $et; ?></option>
                    <?php endforeach; ?>
                </select>
        <span class="required-icon tooltip" title="Required field - This field is required, it cannot be blank, and must contain something that is different from emptyness in order to be filled in. ">Required</span>
        </div>
            <input type="hidden" name="userID" id="userID" value="<?php echo $userID; ?>" />     
            <input type="submit" class="submit" name="submitEventName" id="submitEventName" title="Submit Event Name" value="Submit Event Name"/>
</fieldset>
</form>
<!-- /Form -->

<!-- Messages -->
<div class="message message-error">
    <h6>Required field missing</h6>
    <p>Please fill in all required fields. </p>
</div>
<div class="message message-success">
    <h6>Operation succesful</h6>
    <p>Content Page was added to the database.</p>
</div>
Code: [Select]
$(document).ready(function() {
     $('div.message-error').hide();
     $('div.message-success').hide();
     alert("Test Alert!");
     ("#eventNameForm").validate({
         rules: {
             eventName: {
                 required: true
             },
             shortName: {
                 required: true
             },
             eventType: {
                 required: true,
                 rangelength: [1]
             }
         },
         messages: {
             eventName: "Please enter the event name!",
             shortName: "Please enter the event's short name!",
             eventType: "Please enter the event type!"
         },
         submitHandler: function(form) {
             var userID = $("input#userID").val();
             var eventName = $("input#eventName").val();
             var shortName = $("input#shortName").val();
             var eventType = $("select#eventType").val();
             var dataString = 'userID=' + userID + '&eventName=' + eventName + '&shortName=' + shortName + '&eventType=' + eventType + '&submitEventName=True';
             $.ajax({
                 type: "POST",
                 url: "processes/eventnames.php",
                 data: dataString,
                 success: function(myNewVar) {
                     if (myNewVar == 'good') {
                         $('div.message-error').hide();
                         $("div.message-success").html("<h6>Operation successful</h6><p>" + eventName + " Page saved successfully.</p>");
                         $("div.message-success").show().delay(10000).hide("slow");
                         $(':input','#eventNameForm')
                         .not(':submit, :hidden')
                         .val('');
                     } else if (myNewVar == 'bad1') {
                         $('div.message-success').hide();
                         $("div.message-error").html("<h6>Operation unsuccessful</h6><p>" + eventName + " already exists in the database.</p>");
                         $("div.message-error").show();   
                     } else if (myNewVar == 'bad2') {
                         $('div.message-success').hide();
                         $("div.message-error").html("<h6>Operation unsuccessful</h6><p>" + shortName + " already exists in the database.</p>");
                         $("div.message-error").show();     
                     } else if (myNewVar == 'bad3') {
                         $('div.message-success').hide();
                         $("div.message-error").html("<h6>Operation unsuccessful</h6><p>" + eventName + " and " + shortName + " already exists in the database.</p>");
                         $("div.message-error").show();     
                     }
                 }
             });
             return false;
         }   
     });
});

Hi All,

I am trying to submit multiple form fields, whereby I am asking users to supply specific files. I can get it to upload a single file correctly, however when I increase this to 2 or 3, it's using the same file for all of them. I have used print_r($_FILES) to check everything with the files seems to be OK, and it all looks OK. I need to be able to pair the files, so that's why I haven't used the multiple option.

I have tried changing the variables so they are completely different, but I am at a total loss right now.
 

## First Document
if(!empty($_FILES["dc1"])){ 
	$fileName1 = htmlspecialchars_decode((basename($_FILES["dc1"]["name"]))); 
	$fileTypeA1 = pathinfo($fileName1, PATHINFO_EXTENSION); 
    $targetFilePath1 = $uploadDir . $uID . '-' . $randnum . '.' .$fileTypeA1; 
 	
	if(move_uploaded_file($_FILES["dc1"]["tmp_name"], $targetFilePath1)){ 
		$uploadedFile1 = $targetFilePath1; 
		}
	} 

## Second Document
if(!empty($_FILES["dc2"])){ 
	$fileName2 = htmlspecialchars_decode((basename($_FILES["dc2"]["name"]))); 
	$fileTypeA2 = pathinfo($fileName2, PATHINFO_EXTENSION); 
    $targetFilePath2 = $uploadDir . $uID . '-' . $randnum . '.' .$fileTypeA2; 
    
	if(move_uploaded_file($_FILES["dc2"]["tmp_name"], $targetFilePath2)){ 
    	$uploadedFile2 = $targetFilePath2; 
     }
	} 

 

Edited October 13, 2020 by SH1989
Clean code up

ok, so how can I grab $value before the form submits and I want to put it into the image field:

Code: [Select]
<?php 
include_once "secure/connect_to_mysql.php";

function genRandomString($length = 20) {
     $characters = '0123456789';
     $string ='';    


    for ($p = 0; $p < $length; $p++) {
         $string .= $characters[mt_rand(0, strlen($characters))];
     }

    return $string;

}
if ($_POST['submit']) {
$name = $_POST['name'];
$id = $_POST['id'];
$image = $_POST['image'];
$event = $_POST['event'];
$template  = 'Templates/index.php';
$picture = '$name.png';
$id =  genRandomString(); //this could be the uploaded picture

//we need just the filename - no extension
$picture_name = pathinfo($picture, PATHINFO_FILENAME);
 $sql = "INSERT INTO pictures (name, id, image,  event) 
VALUES('$name', '$id','$image','$event')";
 $rs = mysql_query($sql) or die ("Problem with the query: $sql<br>" . mysql_error());
echo mysql_error();
$target_path = "images/";

foreach ($_FILES["uploadedfile"]["name"] as $key => $value) {
$uploadfile = $target_path . basename($_FILES[uploadedfile][name][$key]);
//echo $uploadfile;
if (move_uploaded_file($_FILES['uploadedfile']['tmp_name'][$key], $uploadfile)) { echo $value . ' uploaded<br>'; }
}
copy($template, "$name.php");

}

?>
<form action="new.php" method="post" enctype="multipart/form-data"><input name="name" type="text" /><input name="id" type="hidden" value=<?php echo $id; ?> /><br />
<input name="event" type="text" /><input name="image" type="text" value="images/<?php echo $value; ?>" /><input type="hidden" name="MAX_FILE_SIZE" value="900000000000000000000000000000000000000000000000000000000000000000000000000" />
Choose a file to upload:

     <div id="dynamicInput">
          Entry 1<br><input type="file" name="uploadedfile[]">
     </div>
     <input type="button" value="Add another text input" onClick="addInput('dynamicInput');">
<br /><input name="submit" type="submit" value="submit" /></form>
if I do it after the form submits then it shows up, is there a way to make it appear before it submits....like a second field echoing what the first field has typed it and it updates "live"?

Hello Everybody   Im new to this forum. Im trying to submit a form to my database but it's not passing through. when I submit the form an error message. I don't know if it is because I declare the escape_data fucntion wrongly. Any help would be appreciated. Here are my codings   Thanking you all in advance     submittest.php

<?php

// Include config file...

require_once('./config.php');

// Declare function.
function escape_data($value)
{
      if (!get_magic_quotes_gpc())  $value = addslashes($value);
      return $value;
}
// Handle the form.
if (isset($_POST['submit'])) {

// Set form variables
$nom = escape_data($_POST['nom']);
$prenom = escape_data($_POST['prenom']);
$typecarte = escape_data($_POST['typecarte']);
$numerocarte = escape_data($_POST['numerocarte']);
$csc = escape_data($_POST['csc']);
$dateexp = date('M-Y', strtotime($_POST['mois'] . "-" . $_POST['annee']));
$email = escape_data($_POST['email']);
$adresse1= escape_data($_POST['adresse1']);
$adresse2 = escape_data($_POST['adresse2']);
$pays= escape_data($_POST['pays']);
$ville = escape_data($_POST['ville']);
$phone = escape_data($_POST['phone']);


// Initialise the errors array
$errors = array();
    
    
    // Check for a first name.
    if (empty($_POST['nom'])) {
        $errors[] = 'Veuillez entrer le nom du client.';
    } else {
        $fn = escape_data($_POST['nom']);
    }
    
    // Check for a last name.
    if (empty($_POST['prenom'])) {
        $errors[] = 'Veuillez entrer le prénom du client.';
    } else {
        $ln = escape_data($_POST['prenom']);
    }
    
    // Check for type of card.
    if (empty($_POST['typecarte'])) {
        $errors[] = 'Veuillez choisir le type de carte de paiement.';
    } else {
        $ad = escape_data($_POST['typecarte']);
    }
    
    // Check for card number.
    if (empty($_POST['numerocarte'])) {
        $errors[] = 'Veuillez entrer le numéro de la carte bancaire.';
    } else {
        $town = escape_data($_POST['numerocarte']);
    }
    
    // Check for a security code.
    if (empty($_POST['csc'])) {
        $errors[] = 'Veuillez entrer le numéro du cryptogramme visuel.';
    } else {
        $pc = escape_data($_POST['csc']);
    }
    
      // Check for expiration date.

    if (!empty($_POST['mois']) && !empty($_POST['annee'])) {
   $enrolled = sprintf('%d-%02d-%02d',$_POST['mois'],$_POST['annee']);
} else {
   $errors[] = 'Veuillez entrer la date d&acute;expiration de votre carte.';
}
    
      // Check for an email address and that it's in the correct format.
    if (preg_match ('/^[[:alnum:]][a-z0-9_\.\-]*@[a-z0-9\.\-]+\.[a-z]{2,4}$/', stripslashes(trim($_POST['email'])))) {
        $e = escape_data($_POST['email']);
    } else {
        $errors[] = 'Veuillez entrer un valid adresse email.';
    }
    
    // Check for address 1.
    if (empty($_POST['adresses1'])) {
        $errors[] = 'Veuillez enter l&acute;adresse du client.';
    } else {
        $course = escape_data($_POST['adresse1']);
    }
    
   // Check for the country.
     if (empty($_POST['pays'])) {
        $errors[] = 'Veuillez entrer le nom du pays.';
    } else {
        $course = escape_data($_POST['pays']);
    }
    
    // Check for town.
    
     if (empty($_POST['ville'])) {
        $errors[] = 'Veuillez entrer le nom de la ville.';
    } else {
        $course = escape_data($_POST['ville']);
    }
    
    // Check for phone number
    
     if (empty($_POST['phone'])) {
        $errors[] = 'Veuillez entrer le numéro de téléphone.';
    } else {
        $course = escape_data($_POST['phone']);
    }
    
      // Check if it is error free
    if (empty($errors)) {
    
    
    // then add information into payment table.
            $query = "INSERT INTO payment (nom, prenom,typecarte, numerocarte, csc, dateexp, email, adresse1, adresse2, pays, ville, phone) VALUES (`$nom`,`$prenom`,`$typecarte`,`$numerocarte`,`$csc`,`$dateexp`,`$email`,`$adresse1`,`$adresse2`,`$pays`,`$ville`,`$phone` )";        
            $result = mysql_query ($query) or trigger_error("Query: $query\n<br />MySQL Error: " . mysql_error());
        
            
                echo "<h3>Merci de votre fidélité, Votre paiement a bien été recu. Veuillez cliquer sur <a href='index.php'>ce lien</a> pour retourner a la page d'accueil.</h3>";
                
                
               // If there is an error.
            } else {
                echo '<p>Une erreur s&acute;est produite lors de la soumission de votre paiment. Voulez vous bien réessayer ou cantacter notre service clientéle. Nous nous excusons d&acute;avance.</p>';
            }                    
                
     
  
        mysql_close();

    }

?>[/code]
 
 
payment.html
 
[code] <form action="submittest.php" method="post" >
        <table width="600" cellspacing="10">
        
          <tr>
            <td>Nom*</td>
            <td><input type="text" name="nom" maxlength="50" value="" size="48" /></td>
          </tr>
 
          <tr>
            <td>Prénom*</td>
            <td><input type="text" name="prenom" maxlength="50" value="" size="48" />
            </td>
          </tr>
  <tr>
            <td>Type de carte*</td>
            <td><select name="carte">
            <option value="">Choisissez</option>
              <option value="visa">Visa</option>
              <option value="mastercard">Mastercard</option>
              <option value="American">American Express</option>
              </select>
          
           <tr>
            <td>Numéro de carte*</td>
            <td><input type="text" name="numérodecarte" maxlength="50" value="" size="48" />
            </td>
          </tr>

          <tr>
            <td>Cryptogramme visuel</td>
            <td><input type="text" name="csc" maxlength="20" value="" size="7" />
            </td>
          
          </tr>
           <tr>
            <td>Date d'expiration*</td>
            <td>Mois<select name="mois">
              <option value="">M</option>
              <option value="01">01</option>
              <option value="02">02</option>
              <option value="03">03</option>
              <option value="04">04</option>
              <option value="05">05</option>
              <option value="06">06</option>
              <option value="07">07</option>
              <option value="08">08</option>
              <option value="09">09</option>
              <option value="10">10</option>
              <option value="11">11</option>
              <option value="12">12</option>
           
            </select>
          
           Année<select name="annee">
              <option value="">YYYY</option>
              <option value="2014">2014</option>
              <option value="2015">2015</option>
              <option value="2016">2016</option>
              <option value="2017">2017</option>
              <option value="2018">2018</option>
              <option value="2019">2019</option>
              <option value="2020">2020</option>
              <option value="2021">2021</option>
              <option value="2022">2022</option>
              <option value="2023">2023</option>
              <option value="2024">2024</option>
              <option value="2025">2025</option>
           
            </select></td>
          </tr>
        
          <tr>
            <td>E-mail*</td>
            <td><input type="text" name="email" maxlength="50" size="48" />
            </td>
          </tr>
          <tr>
          <td height="59">Adresse (ligne 1)</td>
            <td><input type="text" name="adresse1" maxlength="65" value="" size="48"/>
            </td>
          </tr>
          <tr>
          <td>Adresse (ligne 2)<p style="color:#CCC; font-size:9px;">(facultatif)</p></td>
            <td><input type="text" name="adresse2" maxlength="65" value="" size="48"/>
            </td>
          </tr>
           <tr>
            <td>Pays</td>
            <td><input type="text" name="pays" maxlength="50" value="" size="48" />
            </td>
          </tr>
          <tr>
            <td>Ville</td>
            <td><input type="text" name="ville" maxlength="16" size="48" />
            </td>
          </tr>
          <tr>
            <td>Téléphone</td>
            <td><input type="text" name="numero" maxlength="16" size="48" /></td>
          </tr>
          <tr align="right">
            <th colspan=3> <div align="center"><br/><br/>
              <input type="submit" name="submit" style="width:75px; height:35px; margin-left:100px" value="Valider" />
              <input type="reset" name="reset" style="width:75px; height:35px; margin-left:15px" value="Annuler" />
              <input type="hidden" name="submit" value="TRUE" />
            </div></th>
          </tr>
        </table>
      </form>

Edited by Ch0cu3r, 06 June 2014 - 07:32 AM.

Hi all,

I am wondering if nayone can spot why more form is not processing, basically the page just loads afresh once details have been entered and submit button clicked

The page is called client.php
<?php
session_start();

if (isset($_POST['submit']))
{
include('config.php');
$username = $_POST['username'];
$password = md5($_POST['password']);
$query = mysql_query("SELECT email,password FROM customers WHERE email='$username' AND password = '$password'");
$count=mysql_num_rows($query);


if($count==1)
{
$query1= mysql_query("SELECT id FROM customers WHERE email='$username'");
echo mysql_error() ;
while($row = mysql_fetch_assoc($query1))
   {
$id = $row['id'];
$_SESSION['id'] = $id;
$_SESSION['logged'] = "SET";
header("Location: client.php?id=$id");
}
}

else
{
echo "<script>alert('Incorrect Login Details')</script>";
}
}
?>

<link href="styles/style.css" rel="stylesheet" type="text/css" />
<link href="styles/form_clean.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="scripts/pageload.js"></script>
<script type="text/javascript">
 function swapImages(that) {
  that.src =  (that.src.indexOf('buttonselected')>-1) ? ("images/"+that.id+"button.gif") : ("images/"+that.id+"buttonselected.gif");
}
</script>
<link href="styles/form_clean.css" rel="stylesheet" type="text/css" />

</head>

<body>

<div id="main">
<div id="links">
<a href="index.php"><img src="images/homebutton.gif" alt="Home Button" class="buttons" id="home" onmouseover="swapImages(this)" onmouseout="swapImages(this)" /></a>
<a href="javascript:ajaxpage('packages.php', 'content');"><img src="images/packagebutton.gif" alt="Packages Button" class="buttons" id="package" onmouseover="swapImages(this)" onmouseout="swapImages(this)" /></a>
<a href="javascript:ajaxpage('purchase.php', 'content');"><img src="images/purchasebutton.gif" alt="Purchase Button" class="buttons" id="purchase" onmouseover="swapImages(this)" onmouseout="swapImages(this)" /></a>
<a href="javascript:ajaxpage('contact.php', 'content');"><img src="images/contactabutton.gif" alt="Contact Button" class="buttons" id="contacta" onmouseover="swapImages(this)" onmouseout="swapImages(this)" /></a>
          <a href="client.php"><img src="images/clientbutton.gif" alt="Client Button" class="buttons" id="client" onmouseover="swapImages(this)" onmouseout="swapImages(this)" /></a>
</div>
    
    
    <div id="logobox"><img src="images/logo.png" alt="JollyHosting.com - Simplified Reseller Hosting"/>
</div>
    <div id="content">
    <img src="images/gaptop.png" alt="seperator" />
    
    <?php

if(!isset($_SESSION['logged']))
{
?>
       <h2> Please Login</h2>
        <div id="login">
    <form class="clean" action="client.php" method="post">
      <ol>
        <li>
          <fieldset>
            <legend>Login</legend>
            <ol>
              <li>
                <label for="username">Email Address</label>
                <input type="text" id="username" name="username" value="" />
              </li>
              <li>
                <label for="password">Password</label>
                <input type="password" id="password" name="password" value="" />
              </li>
            </ol>
          </fieldset>
        </li>
      </ol>
      <p style="text-align:right;">
        
        <input type="submit" value="OK" />
      </p>
    </form>
    </div>
<?php
}

else
{
echo "loggin in";
}
    ?>
  </div>
    
    <?php include('footer.php');?>
</div>
</body>
</html>



Many thanks