PHP - Tweak Php (regex) Comments Filtration/validation Script

What is the best RegEx to use for a Comments field?

I suppose I would like people to be able to enter any characters found on an English keyboard.  (Is that too lax?)   

Should I restrict any particular characters like quotes?

I am asking this question from two standpoints...

1.) It's a pain to create a Regex that has ever character on your keyboard typed out!

2.) From a security standpoint, I'm not sure what to allow?!

Thanks,


Debbie

I have this script that I am using to upload new video galleries to a website. The script allows the user to upload an image that will display when they click on the gallery. As of now the image gets uploaded and a thumbnail is created automatically and stored in the appropriate places. The original image however remains its original dimensions. How would I tweak this script to resize the original image to MAX_WIDHT = 400px and MAX_HEIGHT = 750px along with keeping the create thumbnail feature?

Code: [Select]
<?php require_once('Connections/DBConnect.php'); ?>
<?php

session_start();

if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
   $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

   $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

   switch ($theType) {
     case "text":
       $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
       break;    
     case "long":
     case "int":
       $theValue = ($theValue != "") ? intval($theValue) : "NULL";
       break;
     case "double":
       $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
       break;
     case "date":
       $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
       break;
     case "defined":
       $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
       break;
   }
   return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "uploadvideo")) {

// make the gallery name available for the result message
$video = $_POST['videocaption'];

// define a constant for the maximum upload size
define ('MAX_FILE_SIZE', 256000);

if (array_key_exists('upload', $_POST)) {
// define constant for upload folder
   define('UPLOAD_DIR', 'C:/wamp/www/test/videos/video_photos/');
   // replace any spaces in original filename with underscores
   // at the same time, assign to a simpler variable
   $file = str_replace(' ', '_', $_FILES['videophotoname']['name']);
   // convert the maximum size to KB
   $max = number_format(MAX_FILE_SIZE/1024, 1).'KB';
   // create an array of permitted MIME types
   $permitted = array('image/gif', 'image/jpeg', 'image/pjpeg', 'image/png');
   // begin by assuming the file is unacceptable
   $sizeOK = false;
   $typeOK = false;
  
   // check that file is within the permitted size
   if ($_FILES['videophotoname']['size'] > 0 && $_FILES['videophotoname']['size'] <= MAX_FILE_SIZE) {
     $sizeOK = true;
}

   // check that file is of an permitted MIME type
   foreach ($permitted as $type) {
    if ($type == $_FILES['videophotoname']['type']) {
     $typeOK = true;
  break;
   }
}
  
if ($sizeOK && $typeOK) {
switch($_FILES['videophotoname']['error']) {
case 0:
// define constants
   define('THUMBS_DIR', 'C:/wamp/www/test/videos/video_photos/thumbs/');
   define('MAX_WIDTH', 150);
   define('MAX_HEIGHT',225);

// process the uploaded image
   if (is_uploaded_file($_FILES['videophotoname']['tmp_name'])) {
     $original = $_FILES['videophotoname']['tmp_name'];
     // begin by getting the details of the original
     list($width, $height, $type) = getimagesize($original);
// calculate the scaling ratio
     if ($width <= MAX_WIDTH && $height <= MAX_HEIGHT) {
       $ratio = 1;
       }
     elseif ($width > $height) {
       $ratio = MAX_WIDTH/$width;
       }
     else {
       $ratio = MAX_HEIGHT/$height;
       }
// strip the extension off the image filename
$imagetypes = array('/\.gif$/', '/\.jpg$/', '/\.jpeg$/', '/\.png$/');
     $name = preg_replace($imagetypes, '', basename($_FILES['videophotoname']['name']));

     // move the temporary file to the upload folder
$moved = move_uploaded_file($original, UPLOAD_DIR.$_FILES['videophotoname']['name']);
if ($moved) {
   $result = $_FILES['videophotoname']['name'].' successfully uploaded; ';
   $original = UPLOAD_DIR.$_FILES['videophotoname']['name'];
   }
else {
   $result = 'Problem uploading '.$_FILES['videophotoname']['name'].'; ';
   }

// create an image resource for the original
switch($type) {
       case 1:
         $source = @ imagecreatefromgif($original);
     if (!$source) {
       $result = 'Cannot process GIF files. Please use JPEG or PNG.';
       }
     break;
       case 2:
         $source = imagecreatefromjpeg($original);
     break;
       case 3:
         $source = imagecreatefrompng($original);
     break;
       default:
         $source = NULL;
     $result = 'Cannot identify file type.';
       }
// make sure the image resource is OK
if (!$source) {
   $result = 'Problem copying original';
   }
else {
   // calculate the dimensions of the thumbnail
       $thumb_width = round($width * $ratio);
       $thumb_height = round($height * $ratio);
   // create an image resource for the thumbnail
       $thumb = imagecreatetruecolor($thumb_width, $thumb_height);
   // create the resized copy
   imagecopyresampled($thumb, $source, 0, 0, 0, 0, $thumb_width, $thumb_height, $width, $height);
   // save the resized copy
   switch($type) {
         case 1:
       if (function_exists('imagegif')) {
         $success = imagegif($thumb, THUMBS_DIR.$name.'_thb.gif');
         $thumb_name = $name.'_thb.gif';
     }
       else {
         $success = imagejpeg($thumb, THUMBS_DIR.$name.'_thb.jpg', 50);
     $thumb_name = $name.'_thb.jpg';
     }
       break;
     case 2:
       $success = imagejpeg($thumb, THUMBS_DIR.$name.'_thb.jpg', 100);
       $thumb_name = $name.'_thb.jpg';
       break;
     case 3:
       $success = imagepng($thumb, THUMBS_DIR.$name.'_thb.png');
       $thumb_name = $name.'_thb.png';
     }
if ($success) {

$insertSQL = sprintf("INSERT INTO tblmembervideo 
(videophotoname, videothumbname, videodescription, videocaption, modelid, `date`) 
VALUES (%s, %s, %s, %s, %s, %s)",
                        GetSQLValueString($_FILES['videophotoname']['name'], "text"),
GetSQLValueString($thumb_name, "text"),
                        GetSQLValueString($_POST['videodescription'], "text"),
                        GetSQLValueString($_POST['videocaption'], "text"),
                        GetSQLValueString($_POST['modelid'], "int"),
                        GetSQLValueString($_POST['date'], "date"));

   mysql_select_db($database_DBConnect, $DBConnect);
   $Result1 = mysql_query($insertSQL, $DBConnect) or die(mysql_error());

$videoid = mysql_insert_id();
$_SESSION['videoid'] = $videoid;

   $result .= "$thumb_name created and $video uploaded. Click <a href='addclip.php'>here</a> to add clips.";
   }
else {
   $result .= 'Problem creating thumbnail';
   }
   // remove the image resources from memory
   imagedestroy($source);
       imagedestroy($thumb);
   }
}
break;
case 3:
$result = "Error uploading $file. Please try again.";
   default:
         $result = "System error uploading $file. Contact webmaster.";
   }
     }
   elseif ($_FILES['videophotoname']['error'] == 4) {
     $result = 'No file selected';
}
   else {
     $result = "$file cannot be uploaded. Maximum size: $max. Acceptable file types: gif, jpg, png.";
}
}
}

mysql_select_db($database_DBConnect, $DBConnect);
$query_rsgetmodel = "SELECT modelid, modelname FROM tblmembermodel";
$rsgetmodel = mysql_query($query_rsgetmodel, $DBConnect) or die(mysql_error());
$row_rsgetmodel = mysql_fetch_assoc($rsgetmodel);
$totalRows_rsgetmodel = mysql_num_rows($rsgetmodel);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>
<body>
<div align="center">
<?php
// if the form has been submitted, display result
if (isset($result)) {
echo "<p>$result</p>";
}
?>
</div>
<form action="<?php echo $editFormAction; ?>" method="POST" enctype="multipart/form-data" name="uploadvideo" id="uploadvideo">
Select a Photo (thumbnail will automatically be created) for Video:<br />
<input name="MAX_FILE_SIZE" type="hidden" id="MAX_FILE_SIZE" value="<?php echo MAX_FILE_SIZE; ?>" />
<input type="file" name="videophotoname" id="videophotoname" />
  <br />
  <br />
Video Caption:<br />
<input type="text" name="videocaption" id="videocaption" />
<br />
<br />
Video Description:<br />
<textarea name="videodescription" id="videodescription" cols="35" rows="3"></textarea>
<br />
<br />
Model:<br />
<select name="modelid" id="modelid">
  <?php
do {  
?>
  <option value="<?php echo $row_rsgetmodel['modelid']?>"><?php echo $row_rsgetmodel['modelname']?></option>
  <?php
} while ($row_rsgetmodel = mysql_fetch_assoc($rsgetmodel));
   $rows = mysql_num_rows($rsgetmodel);
   if($rows > 0) {
       mysql_data_seek($rsgetmodel, 0);
   $row_rsgetmodel = mysql_fetch_assoc($rsgetmodel);
   }
?>
</select>
<br />
<br />
<input type="submit" name="upload" id="upload" value="Add Video" />
<input name="date" type="hidden" id="date" value="<?php echo date ("Y-m-d H:m:s"); ?>" />
<input type="hidden" name="MM_insert" value="uploadvideo" />
<br />
</form>
</body>
</html>
<?php
mysql_free_result($rsgetmodel);
?>

[CODE/]

Hey guys i have been making a comment and reply script. When the user makes a post and others reply they appear below. However when another person makes a post and a reply is made to that they mess up it has the comments at the top and the replys at the bottom. DOes anyone know how i could order these? Or is there a tutorial online. Hope someone can help.

Thanks

I have a problem with the "comments count" in the toggle link in my blog: www.albertosotophotography.com I have this script for show/hide comments in main page:

<script type= "text/javascript">
// Show/Hide Comments
jQuery(document).ready(function() {

// Get #comments div
var uniqueAppend = 1;
var tempName = 'comments';
while(jQuery("#comments").length > 0 ){
jQuery("#comments").attr('id',tempName + uniqueAppend++).addClass('commentContainer')
}
var commentsDiv = jQuery('.commentContainer');

// Only do this work if that div isn't empty
if (commentsDiv.length) {

// Hide #comments div by default
jQuery(commentsDiv).hide();

// Append a link to show/hide
jQuery('<a/>')
.attr('class', 'toggle-comments')
.attr('href', '#')
.html('Notes')
.insertAfter(commentsDiv);

// Encase button in .toggle-comments-container div
jQuery('.toggle-comments').wrap(jQuery('<div/>', {
class: 'toggle-comments-container'
}))

// When show/hide is clicked
jQuery('.toggle-comments').on('click', function(e) {
e.preventDefault();


// Show/hide the div using jQuery's toggle()

var commentContainer = jQuery(this).parent('.toggle-comments-container').prev('.commentContainer');

jQuery(commentContainer).slideToggle('slow', function() {

// change the text of the anchor
var anchor = jQuery(commentContainer).siblings('.toggle-comments-container').children('.toggle-comments');
var anchorText = anchor.text() == 'Notes' ? 'Hide' : 'Notes';
jQuery(anchor).html(anchorText);

});
});

} // End of commentsDiv.length

}); // End of Show/Hide Comments
</script>

I use:

.html('<?php comments_number( '0 notes', '1 note', '% notes' ); ?>')

for name the "comments toggle link" with the count of comments for each single post. The problem is that all posts shows the same count: the comments presents in the first post. Someone can help me? Alberto