PHP - Chat Filtering Abuse Word Space Problem

Hi ;

I have problem with search script ;

This is code ;
 

$search_form = "<form method='get' action='' ><span class='aktif'>Arama</span><input class='aktif' type='text' name='search' ><input class='aktif' type='submit'></form>";
echo $search_form ;
 
$search = isset($_GET['search']) ? trim($_GET['search']): '';
$a1=(str_replace(' ', '',$search) );
$S1 = ' ';
$S2 = ' ';
$S3 = ' ';
if($search != ''){
	
    // Terimlerin Arama Kısmı
    $S1 = sprintf("WHERE Tetik_Ref like '%%%s%%' OR ",mysql_real_escape_string($search));
	$S2 = sprintf("Marka_Model like '%%%s%%' OR",mysql_real_escape_string($search));
	$S3 = sprintf("Orj_P_N like '%%%s%%'",mysql_real_escape_string($search));
	

}
 
//Verilerin yazdırılma işlemi
$main_query = "SELECT * FROM ats_motor $S1 $S2 $S3   ";
$count_query = "SELECT COUNT(*) FROM ats_motor $S1 $S2 $S3 ";

Orj_P_N column inside Original Part Numbers. Its same of "111 11 111" or "15K 1245 45" etc.   When i search exact records work fine. But I search 11111111 nothing found.   I search that and find str_replace function. But i cant use that. Cant import.   I try change line 8 and 14. it give me error.   Can anybody help me ?

Thanks.
Edited by Seorniyc, 15 May 2014 - 09:55 AM.

Hello,

I am having a problem with a link text when ever there is a text that has multiple words.
(e.g. 2 Cor prints out with the white space but when I click on the text the url is printed without the text as 2Cor and so it doesn't find a match)

here is my code:
Code: [Select]
<?php 
if($_GET['book'] == ''){
$books = $wpdb->get_results("
SELECT book_name 
FROM {$wpdb->prefix}sb_books_sermons 
LEFT JOIN {$wpdb->prefix}sb_books ON {$wpdb->prefix}sb_books_sermons.book_name = name 
GROUP BY book_name 
ORDER BY {$wpdb->prefix}sb_books.id 
ASC 
");

foreach($books as $book){
echo '<li><div class="droidlist"><a href="bible/?book='.htmlentities($book->book_name).'">'.$book->book_name.'</a></div></li>'."\n\t";
}
}

This topic has been moved to CSS Help.

http://www.phpfreaks.com/forums/index.php?topic=332328.0

I have a table with postcodes in it. At some point some of the codes will be entered with spaces (LA12 5TH) and some without (LA17HU) what i need is a function to check if there is a space, if not - count back 3 characters from the end of the string and insert a space.

I don't know which string function to use - looked at pad but that seems to be for either end of string and not the middle - any ideas?

I have a form and script that is used to collect information from users.
There is one field that is url.
There is one field that is email.

I want to filter out scripts.  I also only want to allow url in the url field and email in the email field.

Is there an easy way to filter?  I have tried several pieces of code to no avail.

Code: [Select]
<?php
$root = $_SERVER['DOCUMENT_ROOT'];
include('/home/arts/public_html/shows/includes/config.db.php');
if ($link)
{
  foreach ($_POST as $k => $v)
  {
    if (($k == "start_date") || ($k == "end_date") || ($k == "application_dead"))
  {
  $varray = explode("/",$v);
  $v = $varray[2] . "-" .  $varray[0] . "-" . $varray[1];  
  }
   
  $v = "'" . addslashes($v) . "'";
  
      
  if($k != "captcha_code") 
{
  
$keys[] = $k;
$vals[] = $v;
} 
  }
  
  $fields = implode(",", $keys);  
  $values = implode(",", $vals);
  //$fields = "id," . $fields;
  //$values = "null," . $values;  

  $sql = "INSERT into craft_shows ($fields) VALUES ($values)";  
  
  $result = mysql_query($sql,$link);
if (!$result) {
    die('There was a problem with your submission. Refresh the page to try again');
}
else
{
  echo "Thank you for your submission.<br>";
  echo "<a href=\"http://www.artsandcraftsnetwork.com/shows/\">Back to shows</a><br>";
  echo "<a href=\"http://www.artsandcraftsnetwork.com/shows/shows_submit.php\">Submit another show</a>";
}

  
}
?>

I want to create a feature as you see nn this image, where it says 'filter your results' if a user clicks 'Detached Houses' then only detached houses will be displayed. if a user clicks 'Semi-detached' then only semi detached houses will be shown.
Any help is really appreciated, thank you.
Code: [Select]

<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td><div id="filter"><p class="houses" style="font-family:helvetica;color:#0155a1;font-size:14px;background:url(cutouts/forsale/filter.jpg) no-repeat;"><b><u>Houses</u></b>
<br />
<span class="dh"><b><u>Detached Houses</u></b></span><?php
// Make a MySQL Connection
mysql_connect("localhost", "admin", "1admin") or die(mysql_error());
mysql_select_db("test") or die(mysql_error());

// Get a specific result from the "example" table
$result = mysql_query("SELECT * FROM example
 WHERE name='Sandy Smith'") or die(mysql_error());  

// get the first (and hopefully only) entry from the result
$row = mysql_fetch_array( $result );
// Print out the contents of each row into a table 
echo $row['name']." - ".$row['age'];
?>
<br />
<span class="dh"><b><u>Semi-detached houses</u></b></span>
<br />
<span class="dh"><b><u>Terraced houses</u></b></span>
<br />
<br />
<b><u>Flats / Apartments</u></b>

</p></div></td>
 

hi,

i am trying to filter my gps history points.

i would like to ignore points if they are too close to the previous position.

i can do this like so.

$old_lat = $old_long = "0";

                 foreach($history['data'] as $record) {

//calculate distance in meters
$distance = distance($record['latitude'], $record['longitude'], $old_lat, $old_long, "V");

if($distance >= 300) {
echo 'add(jQuery(this), number += 1, "' . date("d-m-Y @ h:i:s",$record['timestamp']) . '", "map_post.php?n=' . $name . 'u=' . $history['user'] . '", "' . $history['user'] . '", "' . $record['latitude'] . '", "' . $record['longitude'] . '");';
                
$old_lat = $record['latitude'];
$old_long = $record['longitude'];
}

the problem with the above is that if i arrive home at 6pm on friday and stay outside my house for 24hours, it will show the latest position as at 6pm on fri.

i would like it to show the 6pm friday position but with a date 'from and to' time like (28/10/11 18:00 - 29/10/11 18:00) rarther than just (28/10/11 18:00) which looks inacurate.

Possible?

First off, i have made a validation class using array_diff() to check if there are invalid characters submitted by a user.
Some extracts:
Code: [Select]
$this->chr_alpha_lower=array('a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z');
$this->chr_alpha_upper=array('A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P','Q','R','S','T','U','V','W','X','Y','Z');
$this->chr_numeric=array('0','1','2','3','4','5','6','7','8','9');
$this->chr_symbol=array(' ','!','@','#','$','%','&','(',')','[',']','.',',',':',';','\'','"','/','=','\\','-','_','?');

...

// lets say only alpha and numeric characters are allowed
$allowed_characters=array();
$allowed_characters=array_merge($allowed_characters,$this->chr_alpha_lower,$this->chr_alpha_upper);
$allowed_characters=array_merge($allowed_characters,$this->chr_numeric);

$input_split=str_split($this->input);
$invalid=array_diff($input_split,$allowed_characters);

if(empty($invalid)){
return true;
}
return false;

I have two questions.
First, for acsii characters is this method 'full proof' or is there a way for someone to get around this validation script?

Second, a new site im developing is going to be built with UTF-8 in mind so people can use the site in their own language. How do i validate UTF-8 user input? I know about mb_strings and sanitizing UTF-8 input using this:
Code: [Select]
preg_match_all('/([\x09\x0a\x0d\x20-\x7e]'. // ASCII characters
 '|[\xc2-\xdf][\x80-\xbf]'. // 2-byte (except overly longs)
 '|\xe0[\xa0-\xbf][\x80-\xbf]'. // 3 byte (except overly longs)
 '|[\xe1-\xec\xee\xef][\x80-\xbf]{2}'. // 3 byte (except overly longs)
 '|\xed[\x80-\x9f][\x80-\xbf])+/', // 3 byte (except UTF-16 surrogates)
 $input, $clean_pieces );

$clean_output = join('?', $clean_pieces[0] );

But how do i know what to filter?

Example:
a field for the user to input first name
English: only alpha characters
Other language: ?????

Help much appreciated.

I'm pretty sure the problem is starring me in the face, but I can't seem to locate it.


function filter($string)
{
//swear words pulled from bannedwordlist.com
$f = fopen('../badwords.txt', 'r');
$bad_words = fread($f, filesize('../badwords.txt'));
$bad_words = explode('\n', $bad_words);

$input = strtolower($string);

foreach($bad_words as $value)
{
$string = str_replace($value, '****', $input);
}

return $string;
}


UPDATED CODE

function filter($string)
{
//swear words pulled from bannedwordlist.com
$f = fopen('../badwords.txt', 'r');
$bad_words = fread($f, filesize('../badwords.txt'));
$bad_words = explode('\n', $bad_words);

$input = strtolower($string);
$string = str_replace($bad_words, '****', $input);

return $string;
}


I've already echoed out $value in the foreeach loop, and it does correctly retrieve the bad words and put them into an array. My only problem is, the returned string is still in strtolower() form, and the words aren't censored. :/

This topic has been moved to PHP Regex.

http://www.phpfreaks.com/forums/index.php?topic=334433.0

Hello, Is it possible to allow '@' and '.' while maintaining the rest of this regex?

$email= 'adsfsa@asdf.edu';
$email= preg_replace("/[^A-Za-z0-9]/", " ", $email);
echo $email;

Hi all,

    I am working on a tool to pull data remotely and the data is set to xml format. I want to post items that meet a certain criteria only, essentially there are several layers/tags on the data being brought over. The sStatus is the primary item I am looking for, not only that but only if it has or equals to "Waiting". Any thoughts or suggestions greatly appreciated. Below is the basic code I have in place currently and am working on.

<code>
<?php
$soapclient = new SoapClient("https://secure.logmeinrescue.com/api/api.asmx?wsdl");


$sEmail = "dummy@dum.com";
$sPassword = "dum123";
$iNodeID = "123456";   
$eNodeRef = "NODE";   
$sAuthCode = "";

$loginparams = array (
'sEmail' => $sEmail,
'sPassword' => $sPassword);

$loginResult = $soapclient->login($loginparams);

$output = array(
'eOutput' => "XML"
);

$outputResponse = $soapclient->setOutput($output);
         

$sessionparams = array(
'iNodeID' => $iNodeID,
'eNodeRef' => $eNodeRef,
'sAuthCode' => $sAuthCode
);

//get session(s)
$sessionresult = $soapclient->getSession($sessionparams);
$session = $sessionresult->aSessions;
$sessionnodes = $session->SESSION;
$session_status = $sessionnodes[$isessionNodes]->sStatus;
   
   

print_r($sessionresult);

?>
</code>

Hi, I have an issue, I cant filter my data from DB. Whats wrong in my code?
<?php
/* Include Files *********************/
//include("banners/database.php");
mysql_connect("host", "user", "pwd") or die("Connection Failed");
mysql_select_db("DB")or die("Connection Failed");
?>
<?php
$memberIndustries =['memberIndustries'];
if (isset($_POST["memberIndustries"])) {
$memberIndustries = mysql_real_escape_string ($_POST["memberIndustries"]);
$sql="SELECT * FROM Members WHERE Industries_Industry_ID='$memberIndustries'";
$result = mysql_query($sql) or die (mysql_error());
   
while ($myrowe = mysql_fetch_array($result)) {?>
   <? // if new member, label it 
   //$todays_date = date("Y-m-d");
   //$dateCompare = $myrowe[Creation_Date]+30;
   //$dateCompare = strtotime(date("Y-m-d", strtotime($myrowe[Creation_Date])) . " +30 days");
   //if(strtotime($todays_date)<=$dateCompare){
   ?>
   <table width="100%">
   <tr>
   <td align="right">
            <img src="/members/new.gif">
   </td>
   </tr>
   </table>
   <? //}?>
   
   <? if($myrowe[LOGO_lnk]!='') {?>
   <img src="<? echo $myrowe[LOGO_lnk]; ?>">
   <? } ?>
   <br /> <br /> 
   <font style="font-family: Arial; font-size: 10.5pt; font-weight:bold;color:#C1121F">
   <? echo $myrowe[Company_Title];?>
   </font>
   <? if($myrowe[Person_Name_1]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; font-weight:bold;color:#000000"><? echo $myrowe[Person_Name_1];?></font>
   <font style="font-family: Arial; font-size: 8.5pt; font-weight:bold;color:#000000"><? echo $myrowe[Person_Title_1];?></font>
   <? } 
   if($myrowe[Person_Name_2]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; font-weight:bold;color:#000000"><? echo $myrowe[Person_Name_2];?></font>
   <font style="font-family: Arial; font-size: 8.5pt; font-weight:bold;color:#000000"><? echo $myrowe[Person_Title_2];?></font>
   <? } 
   if($myrowe[Person_Name_2]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; font-weight:bold;color:#000000"><? echo $myrowe[Person_Name_3];?></font>
   <font style="font-family: Arial; font-size: 8.5pt; font-weight:bold;color:#000000"><? echo $myrowe[Person_Title_3];?></font>
   <? } 
   if($myrowe[Address_row1]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myrowe[Address_row1];?></font>
   <? } 
   if($myrowe[Address_row_2]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myrowe[Address_row_2];?></font>
   <? } 
   if($myrowe[Address_row_3]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myrowe[Address_row_3];?></font>
   <? } 
   if($myrowe[Phone]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000">Tel:<? echo $myrowe[Phone];?></font>
   <? } 
   if($myrowe[Fax]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000">Fax:<? echo $myrowe[Fax];?></font>
   <? } 
   if($myrowe[email]!='') {?>
   <br />
   <a href="mailto:<? echo $myrowe[email];?>">
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myrowe[email];?></font>
   </a>
   <? } 
   if($myrowe[web]!='') {?>
   <br />
   <a href="<? echo $myrowe[web];?>"target="_blank">
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myrowe[web];?></font>
   </a>
   <? } 
   if($myrowe[Industries_Industry_ID]!=0) {
      $queryInd = "SELECT Industry_Title FROM Industries WHERE Industry_ID=$myrowe[Industries_Industry_ID]";
      $resultInd = mysql_query($queryInd) or die (mysql_error());
      $myroweIND = mysql_fetch_array($resultInd)
   ?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myroweIND[Industry_Title];?></font>
   <? } 
   if($myrowe[Description]!='') {?>
   <br />
   <font style="font-family: Arial; font-size: 8.5pt; color:#000000"><? echo $myrowe[Description];?></font><p></p>
   <? } ?>
   <br /><br />
<? } 
<? }} ?>