PHP - How Can I Prevent Javascript Coding?

Is this a correct approach to prevent email injection?

$to: me@mydomain.com, myPartner@mydomain.com, $emailer;
//then the rest of the stuff.

$emailCheck = $_POST["emailer"];
if (eregi("(\r|\n)", $emailCheck)) {
die("Why ?? ");
}
mail($to, $subject, "", $headers);

Hello! This bit of code actually does work, I just want to check that this is the best/proper/most efficiant way of doing it. Basically i'm calling a PHP function that uses the javascripts prompt function, then returning the value that the user types in back to PHP. Most probably easier to show you.

Code: [Select]
<?php

//prompt function
function prompt($prompt_msg){
echo("<script type='text/javascript'> var answer = prompt('".$prompt_msg."'); </script>");

$answer = "<script type='text/javascript'> document.write(answer); </script>";
return($answer);
}

//program
$prompt_msg = "Please type your name.";
$name = prompt($prompt_msg);

$output_msg = "Hello there ".$name."!";
echo($output_msg);

?>

That is the entire code, I just want to know if this is the proper way to do something like this (using javascript and PHP together) thanks guys!

Hi...

I have a problemand I tried to resolved it but still I failed..

I need to add a code in a php file where I'm not the one who code, now I need to add code on that file, and the problem is the one who the owner of code is not here.

I need to add code :

Code: [Select]
$sub_lotcode = substr($lotCode, 9, 4);
   
    $sql = "SELECT k.PCODE, k.kanban, p.Compounds, p.Max_Lot
            FROM kanban_checker k, param_settings p
        WHERE k.kanban = p.Max_Lot AND k.PCODE = '$sub_lotcode' AND p.Compounds = '$sub_lotcode'";
        $result = mysql_query($sql, $con);
         $total = mysql_num_rows($result);
        if ($total <= 0) {
            notify that PCODE reach the maximum        }
        else{
            echo "continue";
        }

here is the code where I need to add this condition:

Code: [Select]
<?php
error_reporting(0);
$con = mysql_connect('localhost', 'root','');

if (!$con) {
    echo 'failed';
    die();
}

mysql_select_db("mes", $con);

$lotCode = mysql_real_escape_string($_GET['normal']);
$lotCodeDownGrade = mysql_real_escape_string($_GET['downgrade']);
$terminalNo = mysql_real_escape_string($_GET['n']);
$downMode = mysql_real_escape_string($_GET['down']);
   

//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    

if ($terminalNo == "1") {
    
    if ($lotCode != "") {

      
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCode'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        else {    
                //do this if code exist in the database:
            //  //code exist in the database
            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                   TERMINAL_ID='1' AND ACTIVE=TRUE";
            $result = mysql_query($sql, $con);
            $total = mysql_num_rows($result);
            if ($total <= 0) {
                echo "0"; // continue to transact
            }
            else {
            // query the last terminal it was used
                $sql    = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                          ACTIVE=TRUE ORDER BY DATE_ENTRY DESC LIMIT 1";
                
                $result = mysql_query($sql, $con);
                
                $row    = mysql_fetch_array($result);
                $total  = mysql_num_rows($result);
                
          
                echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1                                                HERE TO DISPLAY WHICH TERMINAL TO GO
            }    
        }
    }
}   

//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    

elseif ($terminalNo == "4") {
    
    if ($lotCode != "") {
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCode'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        
        else {
            //if downgrade is checked do this :
            if ($downMode == "true") {
                $advanceTerminal = ((integer)($terminalNo) + 1);
                $advanceTerminal = (string)($advanceTerminal);
                
                $preTerminal = ((integer)($terminalNo) - 1);
                $preTerminal = (string)($preTerminal);

                //query if the lot code exist in advance terminal ..
                $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              TERMINAL_ID='$advanceTerminal' AND ACTIVE=TRUE";
                       $result = mysql_query($sql, $con);
                       $total = mysql_num_rows($result);
                  
                if ($total <= 0) {
                        // check naman kung wala sa naunang terminal
                        $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              TERMINAL_ID='$preTerminal' AND ACTIVE=TRUE";
                        
                        $result = mysql_query($sql, $con);
                        $total = mysql_num_rows($result);
                        
                        if ($total <= 0) {
                            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND ACTIVE=                                      TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                            $result = mysql_query($sql, $con);
                            $row    = mysql_fetch_array($result);
                            $total  = mysql_num_rows($result);
                            if ($total <= 0) {               // NO RECORDS FOUND GO TO TERMINAL 1   == optional
                               echo "notran";                
                            }     
                            else {
                               echo $row['TERMINAL_ID'] ; 
                            }   
                        }
                        
                        else {
                            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              TERMINAL_ID='$terminalNo' AND ACTIVE=TRUE";
                            $result = mysql_query($sql, $con);
                            $total = mysql_num_rows($result);
                            if ($total <= 0 || $total >= 0) {
                                echo "G";    
                            }
                        }
                                                
                }
                else {
                        $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND ACTIVE=                                      TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                        $result = mysql_query($sql, $con);
                        $row    = mysql_fetch_array($result);
                        $total  = mysql_num_rows($result);
                        echo $row['TERMINAL_ID'] ; 
                }
            }
            
            else {
            
                //query if the lot code exist in this terminal ..
                $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                          TERMINAL_ID='$terminalNo' AND ACTIVE=TRUE";
                $result = mysql_query($sql, $con);
                $total = mysql_num_rows($result);
                
                if ($total <= 0) {  // wala nakita - then tsek if nag exist sa terminal na sinundan
                   $preTerminal = ((integer)($terminalNo) - 1);
                   $preTerminal = (string)($preTerminal);
                   
                   //then tsek if nag exist sa terminal na sinundan
                   $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                          TERMINAL_ID='$preTerminal' AND ACTIVE=TRUE";
                   $result = mysql_query($sql, $con);    
                   $total = mysql_num_rows($result);
                   
                   if ($total <= 0) {   // walang nakita sa mga naunang terminal
                       // do this if no previous transaction with pre requisite process
                       // query the last terminal it was used
                       
                       $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND  ACTIVE=                                  TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                       $result = mysql_query($sql, $con);
                       $row = mysql_fetch_array($result);
                       $total = mysql_num_rows($result);
                      // $row = mysql_fetch_array($result); 
                       if ($total <= 0) {               // NO RECORDS FOUND GO TO TERMINAL 1   == optional
                           echo "notran";                
                       }                                            
                       else {                           
                           echo $row['TERMINAL_ID'];    // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1 HERE TO DISPLAY WHICH                                                           TERMINAL TO GO
                       }                                
                   }   
                   else {
                       echo "G";
                   }
                }
                else { //me record na nakita sa terminal na pinag transakan
                     
                    // query the last terminal it was used
                       $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND                                              ACTIVE=TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                    $result = mysql_query($sql, $con);
                    $row    = mysql_fetch_array($result);
                    $total  = mysql_num_rows($result);
       
                    echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE                                                    ADD 1 HERE TO DISPLAY WHICH TERMINAL TO GO
                 
                }
            } // here is the terminator of else in downgrade
        }  
    }
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    
    if ($lotCodeDownGrade != "") {
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCodeDownGrade'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        else {
                //do this if code exist in the database:
            //  //code exist in the database
            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCodeDownGrade' AND 
                    ACTIVE=TRUE";
            
            $result = mysql_query($sql, $con);
            $total = mysql_num_rows($result);
            if ($total <= 0) {
                echo "0"; // continue to transact
            }
            else {
            // query the last terminal it was used
                $sql    = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCodeDownGrade' AND 
                          ACTIVE=TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                
                $result = mysql_query($sql, $con);
                
                $row    = mysql_fetch_array($result);
                $total  = mysql_num_rows($result);
          
                echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1                                              HERE TO DISPLAY WHICH TERMINAL TO GO
            }
        }
    }
}
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>    
else {
    if ($lotCode != "") {
        $sql = "SELECT BARCODE FROM LEGALCODES WHERE BARCODE='$lotCode'";
        $result = mysql_query($sql, $con);
        $total = mysql_num_rows($result);
        
        if ($total <= 0) {
            echo "X"; // X - for non existent in the mes table
        }
        
        else {
            //query if the lot code exist in this terminal ..
            $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                    TERMINAL_ID='$terminalNo' AND ACTIVE=TRUE";
            $result = mysql_query($sql, $con);
            $total = mysql_num_rows($result);
            
            if ($total <= 0) {  // wala nakita - then tsek if nag exist sa terminal na sinundan
               $preTerminal = ((integer)($terminalNo) - 1);
               $preTerminal = (string)($preTerminal);
               
               //then tsek if nag exist sa terminal na sinundan
               $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND 
                      TERMINAL_ID='$preTerminal' AND ACTIVE=TRUE";
               
               $result = mysql_query($sql, $con);    
               $total = mysql_num_rows($result);
               if ($total <= 0) {   // walang nakita sa mga naunang terminal
                   // do this if no previous transaction with pre requisite process
                   // query the last terminal it was used
                   
                   $sql = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' 
                          AND ACTIVE=TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                   $result = mysql_query($sql, $con);
                   $row = mysql_fetch_array($result);
                   $total = mysql_num_rows($result);

                   if ($total <= 0) {               // NO RECORDS FOUND GO TO TERMINAL 1   == optional
                       echo "notran";                
                   }                                            
                   else {                           
                       echo $row['TERMINAL_ID'];    // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1 HERE TO DISPLAY WHICH TERMINAL TO GO
                   }                                
               }   
               else {
                   echo "G";
               }
            }
            else { //me record na nakita sa terminal na pinag transakan
                 
                // query the last terminal it was used
                $sql    = "SELECT LOT_CODE, TERMINAL_ID, ACTIVE FROM DEPENDENCY WHERE LOT_CODE='$lotCode' AND ACTIVE=                                  TRUE ORDER BY TERMINAL_ID DESC LIMIT 1";
                $result = mysql_query($sql, $con);
                $row    = mysql_fetch_array($result);
                $total  = mysql_num_rows($result);

                echo $row['TERMINAL_ID'] ;  // already used here - me nakita   // GET THE LAST TERMINAL NUMBER ACTIVE ADD 1 HERE TO DISPLAY WHICH TERMINAL TO GO

            }
        }
    }
}   
mysql_close($con);   
?>

Code: [Select]
function unUsedLotId(txtElemID){

    var txtElemID_Active = txtElemID;
//alert("VV" + txtElemID_Active.value + "VV" );
    responsePHP = "no_reply";
    changeFocus = false;
    var termNo = terminalNo();
    ajaxRequest = remoteRequestObject();
    ajaxRequest.onreadystatechange = function(){
        if (ajaxRequest.readyState==4 && ajaxRequest.status==200) {
             
          //   var result = ajaxRequest.responseText;
               responsePHP = ajaxRequest.responseText;
         
          //alert(responsePHP)
         
          //   if (result=="1") { result = "Already used Tag";}
          //   if (result=="0") { result = "Tag ok";}
          //   if (result=="G") { result = "Tag ok";}   
          //   if (result=="B") { result = "Incomplete Process";}   
          //   var resultStr = (result=="1") ? 'Tag used or incomplete prerequisites' : 'Tag unused';
            if (responsePHP == "failed") {
                txtElemID_Active.disabled = false;
                txtElemID_Active.value = "";
                txtElemID_Active.focus();
                notify("Report to MIS<br /> Please scan again.");
            }
//------------------------------added by rhoda for integration--------------------------------------------------
           /* else if (responsePHP == "C"){
                 notify("CCCC");
                if (txtElemID_Active.disabled) {
                    txtElemID_Active.disabled = false;                 
                }
                txtElemID_Active.value = "";
                txtElemID_Active.focus(); 
            } */
   
//--------------------------------------------------------------------------------       
            else if (responsePHP == "X") {
                //result = "Lot ID invalid.";
                //responsePHP = "Lot ID invalid.";
                notify("Lot ID invalid. Scan Again.");
                if (txtElemID_Active.disabled) {
                    txtElemID_Active.disabled = false;                 
                }
                txtElemID_Active.value = "";
                txtElemID_Active.focus(); 
            }
//--------------------------------------------------------------------------------           
            else if (responsePHP =="0" || responsePHP =="G"){
               
               if (txtElemID_Name == "txtLotCode") {
                   window.LotID = (txtElemID_Active.value)
               }   
               if (txtElemID_Name == "txtLotCodeDownGrade") {
                   window.LotID_Down = (txtElemID_Active.value)
               }
               
               
               strip(txtElemID_Active)
 
               if (termNo == "1") {
                   isSelected('txtLotCode', 'selWeight_MachineID');
               }
               if (termNo == "2" || termNo == "3") {
                   isSelected('txtLotCode', 'txtKitWeight');
               }
               if (termNo == "4" || termNo == "5" || termNo == "6" || termNo == "7") {
 //////////////////////////////// downgrade modification  ///////////////////////////////////////
                   if (termNo == "4") {
                        //alert(termNo)
                        var chkDownGrade  = document.getElementById('chkDownGrade')
                        if (chkDownGrade.checked == 1) {
                          //alert("here")   
                              if (txtElemID_Name == 'txtLotCode') {
                                 isSelected('txtLotCode', 'txtLotCodeDownGrade');
                              }
                             
                              if (txtElemID_Name == 'txtLotCodeDownGrade') {
                                 isSelected('txtLotCodeDownGrade', 'selMachineID');
                              }
                        }
                        else {
                              //alert("here")
                              if (txtElemID_Name == 'txtLotCode') {
                                 isSelected('txtLotCode', 'selMachineID');
                              }
                       
                        }                         
                   }
                   else {
                       
                       isSelected('txtLotCode', 'selMachineID');
                   }
////////////////////////////////////////////////////////////////////////////////////////
               
               
               }
               if (document.getElementById('notice')!== null) {
                   document.getElementsByTagName('body')[0].removeChild(document.getElementById('notice')) //>> clear the box
               }
            }
//--------------------------------------------------------------------------------           
            else if (responsePHP == "notran") {
               var mensahe1 = "Please return to<br /><span style='font-size:30px;'>Chemical Weighing<br /> or Supervisor</span>";
               notify(mensahe1); 
               
               if (txtElemID_Active.disabled) {
                   txtElemID_Active.disabled = false;                 
               }
               txtElemID_Active.value = "";
               txtElemID_Active.focus();
            }
//--------------------------------------------------------------------------------           
            else {
               /*
               responsePHP == "1" || responsePHP == "B") {
               do this if tag is used in this terminal   
               if (responsePHP == "1") {
                  result = "Already used Lot ID";
                  responsePHP = "Already used Lot ID";
                  notify("Already used Lot ID.<br />Scan again.");
               }
               else if (responsePHP == "B") {
                 // result = "Incomplete Transaction Process"; 
                //  responsePHP = "Incomplete Transaction Process";
                  notify("Incomplete Transaction Process.<br />Scan again.");
               }
               */
               var mensahe1 = "Last Process: <span style='font-size:30px;'> Terminal " + responsePHP + "</span><br /><br />";
               var mensahe2 = "Pls. Proceed: <span style='font-size:30px;'> Terminal " + (parseInt(responsePHP) + 1) + "</span>";
               
               notify(mensahe1 + mensahe2);
            //      notify("Incomplete Transaction Process.<br />Scan again.");
           
               if (txtElemID_Active.disabled) {
                   txtElemID_Active.disabled = false;                 
               }
               txtElemID_Active.value = "";
               txtElemID_Active.focus();
            }
 //--------------------------------------------------------------------------------           
        }
    }   

var txtElemID_Name = txtElemID_Active.id;     

if (termNo == "4") {
    var downGrade  = document.getElementById('chkDownGrade').checked;
    var str =  txtElemID_Active.value +  "&n=" + termNo +  "&down=" + downGrade;
}
else {
    var str =  txtElemID_Active.value +  "&n=" + termNo;
}

if (txtElemID_Name == "txtLotCode") {
    //alert(txtElemID_Name)
    var url = "verifyLotId.php?normal=" + str;
}   
if (txtElemID_Name == "txtLotCodeDownGrade") {
    //alert(txtElemID_Name)
    var url = "verifyLotId.php?downgrade=" + str;
}


ajaxRequest.open("GET", url, true);

 // force i.e. not to cache
ajaxRequest.setRequestHeader("If-Modified-Since", "Sat, 1 Jan 2000 00:00:00 GMT");
//--------------------------------------------------
ajaxRequest.send(null);


ajaxTimeOut = window.setTimeout("timeOut('" + txtElemID_Name + "');", 6000);
       
}

Hello Guys,

Iam making a new ad serving script. In that site every publisher can register & they will get a url to serve ads. When a user click on that url the publisher will get earnings.
But my problem is someone using something like this <iframe src="http://my-site.com/adserve.php" width = "100" height = "100"></iframe> & it will helps to get earnings without clicking on that url.
I want to prevent this type of cheating & how it can be possible ??

I hope a expert will replay for me.

Hi
is there any way we can prevent suppose <textarea></textarea> when page reload it refresh and set default text
i wanted to know is there any way to prevent certain things not to get refreshed  is there any method in php which prevent to reload  this !


<?php
echo  "<textarea > Enter your favorite quote!</textarea> \n" ;
Code: [Select]
if (isset($_GET['edit']) && $_GET['edit'] == 'textupdate'){
}
<a href= \"{$_SERVER['PHP_SELF']}?page=1&edit=textupdate \" >Click</a>?>