PHP - Wrong Information In Form Fields

I'm making a contact form using PHP, I've got the look of the form done and I'm very happy with the look - but the actual email bit is a bit challenging. I'm using the code from a contact form on css-tricks.com, and the script does send emails... and I receive them but the emails are completely blank apart from the 'name: email: message:' stuff and the subject. What am I doing wrong? Here is the code I am using:

contact.html
Code: [Select]
<form method="post" action="contactengine.php" id="commentForm">
<div class="form">
<p><input type="text" name="fullName" id="firstName" class="required" title="Full name" /></p>
<p><input type="text" name="emailAddress" id="emailAddress" class="required" title="Email Address" /></p>
<p><textarea type="text" name="message" id="message" class="required" title="Message"></textarea></p>
</div>
<p><input type="submit" name="submit" value="Submit" class="submit-button" title="Send" /></p>
</form>
contactengine.php
$EmailFrom = "enquiries@aplinnovations.co.uk";
$EmailTo = "info@aplinnovations.co.uk";
$Subject = "Contact Form Submission";

$fullName = Trim(stripslashes($_POST['Name'])); 
$emailAddress = Trim(stripslashes($_POST['Email'])); 
$message = Trim(stripslashes($_POST['Message'])); 

$Body = "";
$Body .= "Name: ";
$Body .= $fullName;
$Body .= "\n";
$Body .= "Email: ";
$Body .= $emailAddress;
$Body .= "\n";
$Body .= "Message: ";
$Body .= $message;
$Body .= "\n";

$success = mail($EmailTo, $Subject, $Body, "From: $emailAddress");

I really have no idea how to code in PHP, I know I'm a newbie and I'm sure this is a really dumb question... but please help!

Thanks

Hi All,

Not really sure what to call what I want to do, If I knew I could search for information.

I am building a page with 20 pictures on it with a name below each, I want to pull the Name and image file name from a MySQL database but the names and image file names need to come from 20 different rows. My database key name is Id, so I'm guessing somehow I need to to use something to say:  where Id = "var"  Below is part of the code I have I can get the same image file and name in all 20 places.

Any help would be great,


<?php require_once('../../Connections/Trophies.php'); ?>
<?php

mysql_select_db($database_Trophies, $Trophies);
$query_gallery = "SELECT Id, image, name FROM trophies WHERE Id >= 1 ORDER BY Id ASC";
$gallery = mysql_query($query_gallery, $Trophies) or die(mysql_error());
$row_gallery = mysql_fetch_assoc($gallery);
$totalRows_gallery = mysql_num_rows($gallery);
?>


<td width="20%" height="150" align="center" valign="middle" bgcolor="#000000"><img src="deer-images/<?php echo $row_gallery['image']; ?>" alt="<?php echo $row_gallery['name']; ?>" width="125" height="187"/><br />
                              <font color="#FFFFFF" size="1" face="Verdana, Arial, Helvetica, sans-serif"><?php echo $row_gallery['name']; ?></font></td>
                         

<td width="20%" align="center" valign="middle" bgcolor="#000000"><img src="deer-images/<?php echo $row_gallery['image']; ?>" alt="<?php echo $row_gallery['name']; ?>" width="125" height="187" /><br />
                              <font color="#FFFFFF" size="1" face="Verdana, Arial, Helvetica, sans-serif"><?php echo $row_gallery['name']; ?></font></td>
                         

<td width="19%" align="center" valign="middle" bgcolor="#000000"><img src="deer-images/<?php echo $row_gallery['image']; ?>" width="125" height="187" /><br />
                              <font color="#FFFFFF" size="1" face="Verdana, Arial, Helvetica, sans-serif"><?php echo $row_gallery['name']; ?></font></td>



Thanks,
ewaite

When someone types in thier information in my Sign Up form i want the information they entered to stay after the page refresh.

For example: I type in my information, but in the email field i forget the '@' symbol and then hit "Sign Up". Then the page would refresh and i would get an error message saying "You must enter a valid email address!" and all the information i typed in before would be gone and i'd have to start over with everything..

My question is, how can i make so that all the information I entered stays after the page refresh? Is there a simple way to do it or do I have to rewrite all my code? (i've provided it below)

I know that you can use jQuery, AJAX and JS to acomplish this and also show the error message without refreshing the page but I don't know much about that and i'm trying to use as little JS as I can. So if there is another easier way?

Here is my PHP script that holds the validation process and shows the errors etc:
<?php

class Register
{
  private $username;
  private $first_name;
  private $last_name;
  private $password;
  private $passmd5;
  private $email;
  private $confemail;
  private $gender;
  private $birth_month;
  private $birth_day;
  private $birth_year;
  private $iagree;

  private $errors;
  private $token;

  public function __construct()
  {
    $this->errors = array();

    $this->username     = $this->filter($_POST['username']);

$this->first_name   = $this->filter($_POST['first_name']);

$this->last_name    = $this->filter($_POST['last_name']);
    $this->password     = $this->filter($_POST['password']);
    $this->email        = $this->filter($_POST['email']);

$this->confemail    = $this->filter($_POST['confemail']);

$this->gender       = $this->filter($_POST['gender']);

$this->birth_month  = $this->filter($_POST['birth_month']);

$this->birth_day    = $this->filter($_POST['birth_day']);

$this->birth_year   = $this->filter($_POST['birth_year']);

$this->iagree       = $this->filter($_POST['iagree']);
    $this->token        = $_POST['token'];

    $this->passmd5      = md5($this->password);
  }

  public function process()
  {
    if($this->valid_token() && $this->valid_data())
         $this->register();

    return count($this->errors)? 0 : 1;
  }

  public function filter($var)
  {
    return preg_replace('/[^a-zA-Z0-9@.]/','',$var);
  }

  public function register()
  {
   mysql_connect("localhost","root","") or die(mysql_error());
   mysql_select_db("membership") or die (mysql_error());

   $sql = "INSERT INTO users(username,password,first_name,last_name,email,gender,birth_month,birth_day,birth_year) VALUES ('{$this->username}','{$this->passmd5}','{$this->first_name}','{$this->last_name}','{$this->email}','{$this->gender}','{$this->birth_month}','{$this->birth_day}','{$this->birth_year}')";

mysql_query($sql) or die(mysql_error());

   if(mysql_affected_rows()< 1)
     $this->errors[] = "Could Not Process Form";
  }

  public function user_exists()
  {
    mysql_connect("localhost","root","") or die(mysql_error());
    mysql_select_db("membership") or die (mysql_error());

    $data = mysql_query("SELECT username FROM users WHERE username = '{$this->username}'");

    return mysql_num_rows($data) > 0 ? 1 : 0;
  }

  public function show_errors()
  {

    foreach($this->errors as $key=>$value)
      echo "<div class=errormessages> 

$value

</div>

<br />";
  }

  public function valid_data()
  {
    if ($this->user_exists()){
      $this->errors[] = 'The username is already taken, choose another one!';
      }

if (empty($this->username)){
      $this->errors[] = 'You must enter a username!';

  }

if (empty($this->first_name)){
      $this->errors[] = 'You must enter your first name';

  }

  
    if (empty($this->password)){
      $this->errors[] = 'You must enter a password!';

  }

elseif (strlen($this->password) < 6){

  $this->errors[] = 'Your password must be longer than 6 characters!';

  }

    if (empty($this->email)){
      $this->errors[] = 'You must enter an email address!';

  }

elseif (!preg_match('/^[a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+\.[a-zA-Z]{2,4}$/',$this->email)){

  $this->errors[] = 'You must enter a valid email address!';

  }

elseif ($this->email != $this->confemail){

  $this->errors[] = 'The email addresses you entered did not match!';

  }

if (empty($this->birth_month)){
      $this->errors[] = 'Select which month you were born!';

  }

if (empty($this->birth_day)){
      $this->errors[] = 'Select which day you were born!';

  }

if (empty($this->birth_year)){
      $this->errors[] = 'Select which year you were born!';

  }

if (empty($this->iagree)){

  $this->errors[] = 'You must agree to the <a href="#">Privacy Policy</a> and <a href="#">Terms of Use</a> to sign up!';

  }

  return count($this->errors)? 0 : 1;
  }


  public function valid_token()
  {
   if(!isset($_SESSION['token']) || $this->token != $_SESSION['token'])
     $this->errors[] = "Invalid Submission";

   return count($this->errors)? 0 : 1;
  }
}

?>

And here the HTML form:
Code: [Select]
<?php
session_start();

if(isset($_POST['register']))
{
  include_once('classes/class.register.php');

  $register = new Register();

  if($register->process())
    echo "Successfully Signed Up!";
  else
    $register->show_errors();
}

$token = $_SESSION['token'] = md5(uniqid(mt_rand(),true));
?>



<!doctype html>
<html>
<head>

<link rel="stylesheet" type="text/css" href="css/main.css">
<link rel="stylesheet" type="text/css" href="css/register.css">
<script type="text/javascript" src="js/passwordmeter.js"></script>

</head>
<body>

<script src="jquery.js"></script>

<div class="center">

<!-- PHP -->
<?php require("html/menu.inc"); ?>
<?php require("html/layout.inc"); ?>
<?php require("html/login.inc"); ?>
<!-- PHP -->

<div class="register">
<header>Sign Up Now!</header>
<form method="POST" action="<?php echo $_SERVER['PHP_SELF'];?>">
<ul>
<li>
<label for="username">* Username: </label><br />
<input name="username" autofocus="on" class="rusernamefield" type="text"></input>
</li>
<li>
<label for="first_name">* First Name: </label><br />
<input name="first_name" class="rfirstnamefield" type="text"></input>
</li>
<li>
<label for="last_name">Last Name: </label><br />
<input name="last_name" class="rlastnamefield" type="text"></input>
</li>
<li>
<label for="password">* Password: </label><br />
<input name="password" class="rpasswordfield" onkeyup='password_strength(this.value)'></input>
</li>

<div id="password_strength_border">
<div id="password_strength" class="strength0"></div>
</div>

<li>
<label for="email">* Email Address: </label><br />
<input name="email" class="remail" type="email" placeholder="email@address.com"></input>
</li>
<li>
<label for="confemail">* Confirm Email Address: </label><br />
<input name="confemail" class="rconfirmemail" type="email" placeholder="email@address.com"></input>
</li>
<li>
<label for="gender">* Gender: </label><br />
<select name="gender">
<option value="Man" selected="selected">Man</option>
<option value="Woman">Woman</option>
</select>
</li>
<li>
<label for="birth_month">* Birth Day: </label><br />
<select name="birth_month">
<option disabled="disabled" selected="selected">Month</option>
<option value="01">January</option>
<option value="02">February</option>
<option value="03">March</option>
<option value="04">April</option>
<option value="05">May</option>
<option value="06">June</option>
<option value="07">July</option>
<option value="08">August</option>
<option value="09">September</option>
<option value="10">October</option>
<option value="11">November</option>
<option value="12">December</option>
</select>
<select name="birth_day">
<option disabled="disabled" selected="selected">Day</option>
<option value="01">1</option>
<option value="02">2</option>
<option value="03">3</option>
<option value="04">4</option>
<option value="05">5</option>
<option value="06">6</option>
<option value="07">7</option>
<option value="08">8</option>
<option value="09">9</option>
<option value="10">10</option>
<option value="11">11</option>
<option value="12">12</option>
<option value="13">13</option>
<option value="14">14</option>
<option value="15">15</option>
<option value="16">16</option>
<option value="17">17</option>
<option value="18">18</option>
<option value="19">19</option>
<option value="20">20</option>
<option value="21">21</option>
<option value="22">22</option>
<option value="23">23</option>
<option value="24">24</option>
<option value="25">25</option>
<option value="26">26</option>
<option value="27">27</option>
<option value="28">28</option>
<option value="29">29</option>
<option value="30">30</option>
<option value="31">31</option>
</select>
<select name="birth_year">
<option disabled="disabled" selected="selected">Year</option>
<option value="2011">2011</option>
<option value="2010">2010</option>
<option value="2009">2009</option>
<option value="2008">2008</option>
<option value="2007">2007</option>
<option value="2006">2006</option>
<option value="2005">2005</option>
<option value="2004">2004</option>
<option value="2003">2003</option>
<option value="2002">2002</option>
<option value="2001">2001</option>
<option value="2000">2000</option>
<option value="1999">1999</option>
<option value="1998">1998</option>
<option value="1997">1997</option>
<option value="1996">1996</option>
<option value="1995">1995</option>
<option value="1994">1994</option>
<option value="1993">1993</option>
<option value="1992">1992</option>
<option value="1991">1991</option>
<option value="1990">1990</option>
<option value="1989">1989</option>
<option value="1988">1988</option>
<option value="1987">1987</option>
<option value="1986">1986</option>
<option value="1985">1985</option>
<option value="1984">1984</option>
<option value="1983">1983</option>
<option value="1982">1982</option>
<option value="1981">1981</option>
<option value="1980">1980</option>
<option value="1979">1979</option>
<option value="1978">1978</option>
<option value="1977">1977</option>
<option value="1976">1976</option>
<option value="1975">1975</option>
<option value="1974">1974</option>
<option value="1973">1973</option>
<option value="1972">1972</option>
<option value="1971">1971</option>
<option value="1970">1970</option>
<option value="1969">1969</option>
<option value="1968">1968</option>
<option value="1967">1967</option>
<option value="1966">1966</option>
<option value="1965">1965</option>
<option value="1964">1964</option>
<option value="1963">1963</option>
<option value="1962">1962</option>
<option value="1961">1961</option>
<option value="1960">1960</option>
<option value="1959">1959</option>
<option value="1958">1958</option>
<option value="1957">1957</option>
<option value="1956">1956</option>
<option value="1955">1955</option>
<option value="1954">1954</option>
<option value="1953">1953</option>
<option value="1952">1952</option>
<option value="1951">1951</option>
<option value="1950">1950</option>
<option value="1949">1949</option>
<option value="1948">1948</option>
<option value="1947">1947</option>
<option value="1946">1946</option>
<option value="1945">1945</option>
<option value="1944">1944</option>
<option value="1943">1943</option>
<option value="1942">1942</option>
<option value="1941">1941</option>
<option value="1940">1940</option>
<option value="1939">1939</option>
<option value="1938">1938</option>
<option value="1937">1937</option>
<option value="1936">1936</option>
<option value="1935">1935</option>
<option value="1934">1934</option>
<option value="1933">1933</option>
<option value="1932">1932</option>
<option value="1931">1931</option>
<option value="1930">1930</option>
<option value="1929">1929</option>
<option value="1928">1928</option>
<option value="1927">1927</option>
<option value="1926">1926</option>
<option value="1925">1925</option>
<option value="1924">1924</option>
<option value="1923">1923</option>
<option value="1922">1922</option>
<option value="1921">1921</option>
<option value="1920">1920</option>
<option value="1919">1919</option>
<option value="1918">1918</option>
<option value="1917">1917</option>
<option value="1916">1916</option>
<option value="1915">1915</option>
<option value="1914">1914</option>
<option value="1913">1913</option>
<option value="1912">1912</option>
<option value="1911">1911</option>
<option value="1910">1910</option>
<option value="1909">1909</option>
<option value="1908">1908</option>
<option value="1907">1907</option>
<option value="1906">1906</option>
<option value="1905">1905</option>
<option value="1904">1904</option>
<option value="1903">1903</option>
<option value="1902">1902</option>
<option value="1901">1901</option>
<option value="1900">1900</option>
</select>
</li>
<li>
<label for="iagree" class="iagreetext">*  I Agree to the <a href="#">Privacy Policy</a> and <a href="#">Terms of Use</a></label>
<input name="iagree" type="checkbox" class="iagreebox"></input>
</li>
<input name="register" class="registerbutton" type="submit" value="Sign Up"></input>
<p class="fieldsmarked">Fields marked with an (*) is required</p>
<input type="hidden" name="token" value="<?php echo $token;?>"/>
</ul>
</form>
</div>

</div>

</body>
</html>

As title says i need to block user for 30 minutes after he enter invalid data 3 times in a row. I know i need to enter ip and time in database, but how to stop form to be submited.   i have this code for count failed attempts, he increment value in session every time submit is pressed

// postavi ili povecaj broj u sessiji ako je Login button aktiviran
if (empty($_SESSION['failed_login'])) 
{
    $_SESSION['failed_login'] = 1;
} 
elseif (isset($_POST['login'])) 
{
    $_SESSION['failed_login']++;
}

// if login fail 3 times
if ($_SESSION['failed_login'] > 3) {
	$error[] = 'U failed to login 3 times ' . $_SESSION['failed_login'];
} 

This is whole login.php

<?php

// protect page from direct access
if (!defined('AUTH')) { die('You are not authorized to see this page !'); }

if ($general->is_logged() === true)
{
	header('Location: index.php');
	exit();
}

$last_login_date = time();
$ip = $general->get_ip();

// postavi ili povecaj broj u sessiji ako je Login button aktiviran
if (empty($_SESSION['failed_login'])) 
{
    $_SESSION['failed_login'] = 1;
} 
elseif (isset($_POST['login'])) 
{
    $_SESSION['failed_login']++;
}

// if login fail 3 times
if ($_SESSION['failed_login'] > 3) {
	$error[] = 'U failed to login 3 times ' . $_SESSION['failed_login'];
}

// login form
if (isset($_POST['login']))
{
	$username = trim($_POST['username']);
	$password = trim($general->safepass($_POST['password']));

	// if user entered username and password
	if (empty($username) || empty($password))
	{
		$error[] = 'Please enter username and password';
	}
	else
	{
		// login query
		$login = $users->login($username, $password);

		// cookie login
		if (isset($_POST['stay_logged']))
		{
			// check if username and password is valid 
			if ($login) 
			{
				$user_id = $login['id'];

				// expire time for cookie 1 month
				$expire = time()+60*60*24*30;

				// make random code for token
				$rand = hash('sha512', mt_rand());

				// set cookies
				setcookie('token', $rand, $expire);
				setcookie('username', $login['username'], $expire);
				setcookie('id', $login['id'], $expire);

				// update user last_login, ip, token code
				$update_login_data = $users->update_cookie_login($last_login_date, $ip, $rand, $user_id);

				// redirect user to index.php and exit script
				header('Location: index.php');
				exit();
			}
			else
			{
				// if username or password is not valid
				$error[] = 'Invalid username or password';
			}
		}

		// session login
		else
		{
			// check if username and password is valid
			if ($login) 
			{
				// make sessions with user_id and username
				$_SESSION['id'] = $login['id'];
				$_SESSION['username'] = $login['username'];
				$user_id = (int)$_SESSION['id'];

				// update user last_login, ip
				$update_login = $users->update_user_ip_login($last_login_date, $ip, $user_id);

				// redirect user to index.php and exit script
				header('Location: index.php');
				exit();
			}
			else
			{
				// if username or password is not valid
				$error[] = 'Invalid username or password';
			}
		}
	}
}

?>

<h3>Log in</h3>

<?php
if (!empty($error)) {
	echo '<div class="big-error-msg"><ul style="margin:0 0 0 20px;">';
	foreach ($error as $error) {
		echo '<li>'.$error. '</li>';
	}
	echo '</ul></div>';
}
?>

<form action="" method="POST" class="login-form">
	<input type="text" name="username" placeholder="Username" required>&nbsp;&nbsp;&nbsp;
	<input type="password" name="password" placeholder="Password" required><br><br>
	<input type="checkbox" name="stay_logged"><label style="padding:0 0 0 10px;">Remember me ?</label><br>
	<input type="submit" name="login" value="Log in" class="small-button">
	<label>
		<p><a href="index.php?page=forgotten_pass" title="Forgotten password ?">Forgotten password ?</a></p>
		<p>Don't have an account ? <a href="index.php?page=register" title="Register">Register</a></p>
	</label>
</form>

Hi-
the code below lets me upload a CSV file to my database if I have 1 field in my database and 1 column in my CSV.
I need to add to my db "player_id" from the CVS file and "event_name" and "event_type" from the form... any ideas???

here's the code:
Code: [Select]
<?php
$hoststring =""; 
$database = "";
$username = "";
$password = "";
$makeconnection = mysql_pconnect($hoststring, $username, $password);
?>
<?php
ob_start();
mysql_select_db($database, $makeconnection);
$sql_get_players="
SELECT * 
FROM tabel 
ORDER BY player_id ASC";
//
$get_players = mysql_query($sql_get_players, $makeconnection) or die(mysql_error());
$row_get_players = mysql_fetch_assoc($get_players);
//
$message = null;
$allowed_extensions = array('csv');
$upload_path = '.'; //same directory

if (!empty($_FILES['file'])) {

if ($_FILES['file']['error'] == 0) {
// check extension
$file = explode(".", $_FILES['file']['name']);
$extension = array_pop($file);

if (in_array($extension, $allowed_extensions)) {

if (move_uploaded_file($_FILES['file']['tmp_name'], $upload_path.'/'.$_FILES['file']['name'])) {

if (($handle = fopen($upload_path.'/'.$_FILES['file']['name'], "r")) !== false) {
$keys = array();
$out = array();
$insert = array();
$line = 1;

while (($row = fgetcsv($handle, 0, ',', '"')) !== FALSE) {

foreach($row as $key => $value) {    

if ($line === 1) {
$keys[$key] = $value;       
} else {       
$out[$line][$key] = $value;              
}       
}                
$line++;          
}        

fclose($handle);            

if (!empty($keys) && !empty($out)) {        
$db = new PDO(
'mysql:host=host;dbname=db', 
'user', 
'pw');   

$db->exec("SET CHARACTER SET utf8");        

foreach($out as $key => $value) {        
$sql  = "INSERT INTO `table` (`";
$sql .= implode("`player_id`", $keys);    
$sql .= "`) VALUES (";    
$sql .= implode(", ", array_fill(0, count($keys), "?"));    
$sql .= ")";    
$statement = $db->prepare($sql);    
$statement->execute($value);       
}      

$message = '<span>File has been uploaded successfully</span>';      
}
}
}
} else {
$message = '<span>Only .csv file format is allowed</span>';
}
} else {
$message = '<span>There was a problem with your file</span>';
}
}
ob_flush();?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>CSV File Upload</title>
</head>
<body>

<form class="form" action="" method="post" enctype="multipart/form-data">
<h3>Select Your File</h3>
<p><?php echo $message; ?></p>
<input type="file" name="file" id="file" size="30" />
<br/>
<label>Event Name:</label><input name="event_name" type="text" value="" />
<br/>
<label>Event Type:</label><input name="event_type" type="text" value="" />
<br/>
<input type="submit" id="btn" class="button" value="Submit" />
</form>

<br/>
<h3>Results:</h3>
<?php do { ?>
<p><?php echo $row_get_players['player_id'];?></p>
<?php } while ($row_get_players = mysql_fetch_assoc($get_players)); ?>
</body>
</html>