PHP - Adjusting The Time In Php For A Guestbook

I try to adjust my date and time to ("M-d-Y h:i:s A"), but when I do, I get 0's for the both the date and time.

Code: [Select]
<table width="400" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><strong>Test Sign Guestbook </strong></td>
</tr>
</table>
<table width="400" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC">
<tr>
<form id="form1" name="form1" method="post" action="addguestbook.php">
<td>
<table width="400" border="0" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td width="117">Name</td>
<td width="14">:</td>
<td width="357"><input name="name" type="text" id="name" size="40" /></td>
</tr>
<tr>
<td>Email</td>
<td>:</td>
<td><input name="email" type="text" id="email" size="40" /></td>
</tr>
<tr>
<td valign="top">Comment</td>
<td valign="top">:</td>
<td><textarea name="comment" cols="40" rows="3" id="comment"></textarea></td>
</tr>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td><input type="submit" name="Submit" value="Submit" /> <input type="reset" name="Submit2" value="Reset" /></td>
</tr>
</table>
</td>
</form>
</tr>
</table>
<table width="400" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><strong><a href="viewguestbook.php">View Guestbook</a> </strong></td>
</tr>
</table>

Code: [Select]

<?php
$mysql_host = "myhost";
$mysql_database = "guest";
$mysql_user = "myusername";
$mysql_password = "mypassword"; 

//$db_name="guest"; This is not needed, as db_name is $mysql_database above, so please delete this line.
$tbl_name="guestbook"; // Table name

// Connect to server and select database.
mysql_connect("$mysql_host", "$mysql_user", "$mysql_password") or die("cannot connect server ");
mysql_select_db("$mysql_database") or die("cannot select DB");

$name = $_POST['name'];
$email = $_POST['email'];
$comment = $_POST['comment'];
$datetime=date("y-m-d h:i:s"); //date time

$sql="INSERT INTO $tbl_name (name, email, comment, datetime) VALUES ('$name', '$email', '$comment', '$datetime')";
$result=mysql_query($sql);

//check if query successful
if($result){
echo "Successful";
echo "<BR>";
echo "<a href='viewguestbook.php'>View guestbook</a>"; // link to view guestbook page
}

else {
echo "ERROR";
}

mysql_close();
?>


Code: [Select]
<table width="400" border="0" align="center" cellpadding="3" cellspacing="0">
<tr>
<td><strong>View Guestbook | <a href="guestbook.php">Sign Guestbook</a> </strong></td>
</tr>
</table>
<br>

<?php
$mysql_host = "myhost";
$mysql_database = "guest";
$mysql_user = "myusername";
$mysql_password = "mypassword"; 
$tbl_name="guestbook"; // Table name

// Connect to server and select database.
mysql_connect("$mysql_host", "$mysql_user", "$mysql_password") or die("cannot connect server ");
mysql_select_db("$mysql_database") or die("cannot select DB");

$sql="SELECT * FROM $tbl_name";
$result=mysql_query($sql);

while($rows=mysql_fetch_array($result)){
?>
<table width="400" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC">
<tr>
<td><table width="400" border="0" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td>ID</td>
<td>:</td>
<td><? echo $rows['id']; ?></td>
</tr>
<tr>
<td width="117">Name</td>
<td width="14">:</td>
<td width="357"><? echo $rows['name']; ?></td>
</tr>
<tr>
<td>Email</td>
<td>:</td>
<td><? echo $rows['email']; ?></td>
</tr>
<tr>
<td valign="top">Comment</td>
<td valign="top">:</td>
<td><? echo nl2br($rows['comment']); ?></td>
</tr>
<tr>
<td valign="top">Date/Time </td>
<td valign="top">:</td>
<td><? echo $rows['datetime']; ?></td>
</tr>
</table></td>
</tr>
</table>
<BR>
<?
}
mysql_close(); //close database
?>

I am trying to modify Guestbook.  In order to access the page, the user must log in using a screen name and email address that has been registered with the website. 

What I want to take the log in information and automatically populate the Name and email field of the input comment form.  I have set up SESSION Variables (see below for the login php).

<?php

session_start();

require_once("dbcon.php");

$form = "<table>
            <form action='login.php' method='post'>
            <tr>
                <td>Username: </td><td><input type='text' name='user' size='20' />
            </tr>
            <tr>
                <td>Email: </td><td><input type='text' name='emad' size='30' />
            </tr>
            <tr>
                <td><input type='submit' name='submit' value='Login' />
      <td><a href='New Contact.html'>New Account </a>
            </tr>
            </form>
        </table>"; // Do NOT use \" when you still have the option to use singlequotes, looks so messy...

$user = $_POST['user'];
$emad = $_POST['emad']; //defining these in the start makes the source looks nicer
   
if(!$_POST['submit']) die($form); // just kill the rest of the script if the form isn't submitted.
if(!$user || !$emad) die("Required fields missing<br /><br /> $form"); // killing the rest of the script and echoing the form and error
   
    $sql = "SELECT ident FROM Mix WHERE password = '$pass' AND username = '$user'"; // just like with the variables and prints/echoes, you don't need to ".$var." anything with double quotemarks
    $res = mysql_query($sql) or die(mysql_error());
    if(mysql_num_rows($res) > 0) {
        $row = mysql_fetch_assoc($res);
   $_SESSION['uid'] = $row['id'];
   $_SESSION['un'] = $_POST['user'];   //Setup user name into session variable.
   $_SESSION['ua'] = $_POST['emad'];   //Setup email address into session variable.
   echo "You have been logged in as $user at $emad. Click <a href=\"gbook.php\">here</a> to the member page.";
    } else {
        echo "That username/password combination doesn't exist!<br /><br/> $form";
    }

?>



Below is a copy of the Sign Form. php.  I am trying to populate teh Name and email fields but the SESSION variables don't show up.  Can someone figure out what I AM DOING WRONG.

<?php session_start ();
$un = $_SESSION['un'];
$ua = $_SESSION['ua'];
?>


<div id="gbook_guestbook" align="center">
   <span class="gbook_guestbook"><?php echo $lang['t48']; ?></span><br class="clear" />
   <span class="gbook_required"><?php echo $lang['t49']; ?></span>
</div>

<form action="gbook.php" method="post">
<!--SIGN FORM -->
<div id="gbook_entries">

   <?php
     if ($error)
    {
      echo '<div class="gbook_sign_error">'.$error.'</div>';
    }
   ?>

   <div class="gbook_left"><span class="gbook_entries"><b><?php echo $lang['t50']; ?></b></span></div>
   <div class="gbook_right"><input type="hidden" name="<?php echo $myfield['name']; ?>" value="<?php echo $un; ?>" /></div> <?php echo $un; ?>

   <div class="clear"></div>

   <div class="gbook_left"><span class="gbook_entries"><?php echo $lang['t51']; ?></span></div>
   <div class="gbook_right"><input type="text" name="from" value="<?php echo $from; ?>" size="45" /></div>

   <div class="clear"></div>

   <?php
   if ($settings['use_url'])
   {
      ?>
      <div class="gbook_left"><span class="gbook_entries"><?php echo $lang['t53']; ?></span></div>
      <div class="gbook_right"><input type="text" name="url" value="<?php echo $url; ?>" size="45" maxlength="80" /></div>

      <div class="clear"></div>
       <?php
   }
   ?>

   <div class="gbook_left"><span class="gbook_entries"><?php echo $lang['t52']; ?></span></div>
   <div class="gbook_right"><input type="hidden" name="email" value="<?php echo $ua; ?>" /> <?php echo $ua; ?>
    <?php
    if ($settings['hide_emails'])
    {
      ?>
      <br class="clear" /><span class="gbook_entries"><i><?php echo $lang['t66']; ?></i></span>
       <?php
    }
    ?>
    </div>

   <div class="clear"></div>

   <div class="gbook_left"><span class="gbook_entries"><b><?php echo $lang['t16']; ?></b></span></div>
   <div class="gbook_right"><span class="gbook_entries"><i><?php echo $lang['t54']; ?></i></span></div>

   <textarea name="<?php echo $myfield['cmnt']; ?>" rows="12" cols="57" id="cmnt"><?php echo $comments; ?></textarea>

   <!--BOTTOM IMAGES -->
   <div id="gbook_bottom_images" class="gbook_bottom_images">

   <a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/bigsmile.gif"  alt="" title="" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' :!cool: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/cool.gif"  alt=":!cool:" title=":!cool:" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' :!cry: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/crying.gif"  alt=":!cry:" title=":!cry:" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' :!devil: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/devil.gif"  alt=":!devil:" title=":!devil:" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/smile.gif"  alt="" title="" width="19" height="19" /></a>&nbsp;
    <a href="#" onclick="document.getElementById('cmnt').value += ' :!mad: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/mad.gif"  alt=":!mad:" title=":!mad:" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' :!thinking: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/thinking.gif"  alt=":!thinking:" title=":!thinking:" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' :p ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/tongueout.gif"  alt=":p" title=":p" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/wink.gif"  alt="" title="" width="19" height="19" /></a>&nbsp;
   <a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/blush.gif"  alt="" title="" width="19" height="19" /></a>&nbsp;

   <a href="javascript:openSmiley()" class="gbook_submitted"><?php echo $lang['t26']; ?></a><br />
   <label><input type="checkbox" name="nosmileys" value="Y" class="gbook_checkbox" <?php echo $nosmileys; ?> /><span class="gbook_entries"><?php echo $lang['t28']; ?></span></label><br class="clear" />

    <?php
    /* Private mesasges */
    if ($settings['use_private'])
    {
       ?>
      <label><input type="checkbox" name="private" value="Y" class="gbook_checkbox" <?php echo $isprivate; ?> /><span class="gbook_entries"><?php echo $lang['t55']; ?></span></label><br class="clear" />
       <?php
    }

    /* Print anti-SPAM features */
    echo $settings['antispam'];
    ?>
   </div>
   <!--BOTTOM IMAGES END -->

   <div align="center">

   <div class="clear">&nbsp;</div>

   <!--SPAM TRAPS -->
    <!-- DON'T DELETE THESE HIDDEN FIELDS AND COMMENTS, THEY HELP CATCH STUPID SPAMBOTS! -->
   <input type="hidden" name="name" />
    <input type="hidden" name="<?php echo $myfield['bait']; ?>" />
    <!-- >
    <input type="text" name="comments" value="1" />
    < -->
    <!--SPAM TRAPS END-->

    <input type="hidden" name="a" value="add" />
   <input type="submit" value="<?php echo $lang['t88']; ?>" class="submit" />
   </div>

    <p>&nbsp;</p>

</div>
<!--SIGN FORM END -->
</form>



   

I'm saving customer comments in an MYSQL. But the when I use mysql_real_escape_string() to filter the input data it's causing wired signs when it's displayed in the guest book. (E.g. whenever there is a ' sign, the output is \').

Is it safe to have a guest book without mysql_real_escape_string( or please suggest how should I go about creating this guest book on my website.

Thanks.
Bickey.

Hello!

I am trying to make a Guestbook with help from the internet. I have created all sites what i need, but i have some problems with the Input.

For example here is the Name inputfrom the "sign.php"

<form id="form1" name="form1" method="post" action="addguestbook.php">
<td>
<table width="400" border="0" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td width="117">Name</td>
<td width="14">:</td>
<td width="357"><input name="name" type="text" id="name" size="40" /></td>
</tr>


And here is the "insert sequence" from the "guestbook.php":

$sql="INSERT INTO $tbl_name(name, email, comment, datetime)
VALUES('$name', '$email', '$comment', '$datetime')";
$result=mysql_query($sql);

If i open the guestbook.php i just can see the datetime. What went wrong?

Thanks, Mark
p.S.: sorry for my english.

Okay I am extremely new to PHP and am trying to make a 2 page guestbook, where one page has the form to submit a message to the guestbook and the other page displays the messages. However I am having some errors, one being that when I submit a test message it still shows the "please enter your name and comments" thing I have set when people don't fill the required fields. The other error I'm having is if I put two test messages into the guestbook some of the info from the last message fills in the fields of the other one instead of what was actually filled into the form.

For example, if I insert the name "Pat" and the comment "testing 1 2 3" into one message and than insert the name "Bob" and the comment "hi" for another message when I submit the second message it may instead of putting "hi" it'll put "testing 1 2 3"

so I get:

Posted by: Pat
testing 1 2 3
________________

Posted by: Bob
testing 1 2 3

instead of:

Posted by: Pat
testing 1 2 3
________________

Posted by: Bob
hi

Like it should.... What am I doing wrong???? 

My PHP code for submition is:

Code: [Select]
<?php

//connecting to the Database

$connect = mysql_connect("127.0.0.1","patben_guestbook","") or die("Error");

//selecting the table

mysql_select_db("patben_guestbookdatabase") or die("Error");

//selecting ALL data

$queryget = mysql_query("SELECT * FROM guestbook") or die("Error");

//sort the data

while ($row = mysql_fetch_assoc($queryget))
{
$id = $row['id'];
$date = $row['date'];
$name = $row['name'];
$email = $row['email'];
$song = $row['song'];
$part = $row['part'];
$comments = $row['comments'];

//processing data

echo "
<table>
<tr>
<td>
<b>Posted by:</b> $name ($email)<br />
<b>$date</b><br />
<b>Favorite Pat Song:</b> $song<br />
<b>Favorite Part of the Site:</b> $part
</td>
</tr>
<tr>
<td>
".nl2br(strip_tags($comments))."
<hr />
</td>
</tr>
</table>
";

}

if ($_POST['submit']); 
{

$date = date("Y-m-d");
$name = $_POST['name'];
$comments = $_POST['comments'];


if ($name&&$comments)
{

$queryget = mysql_query("INSERT INTO guestbook (id,date, name, email, song, part, comments) VALUES ('','$date','$name','$email','$song','$part','$comments')"); 
echo "Please wait... <meta http-equiv='refresh' content='2'>"; 

echo mysql_error();  

}
else 

echo "Please enter your name and comments";
}

?>
And my HTML form is:

Code: [Select]
<form action="process.php" method="post">
<table width="500" border="0" cellspacing="2" cellpadding="0">
<tr valign="top">
<td width="500px" class="name"><span style="color:#ff0000"><b>*</b></span>Name:</td>
<td width="500px"><input name="name" type="text" id="name" size="32" /></td>
</tr>
<tr valign="top">
<td width="500px" class="bodytext">&nbsp;Email Address:</td>
<td width="500px"><input name="email" type="text" id="email" size="32" /></td>
</tr>
<tr valign="top">
<td width="500px" class="pat">&nbsp;Your Favorite Pat Song?:</td>
<td width="500px"><input name="song" type="text" id="song" size="32" /></td>
</tr>
<tr valign="top">
<td width="500px" class="part">&nbsp;Your Favorite Part of my Site?:</td>
<td width="500px"><input name="part" type="text" id="part" size="32" /></td>
</tr>
<tr valign="top">
<td width="500px" class="comments"><span style="color:#ff0000"><b>*</b></span> Comment:</td>
<td width="500px"><textarea name="comments" id="comments" cols="28" rows="6" class="comments"></textarea></td>
</tr>
<tr valign="top">
<td class="bodytext">&nbsp;</td>
<td align="left" valign="top"><input type="submit" name="Submit" value="Post" class="btn" /></td>
</tr>
</table>
</form>