PHP - $_post Won't Work!! Form Validation Php/html

can someone visually just read through my code and let me know if this looks like it'll work? I'm not getting any errors in my IDE so now I want to double check the structure



<?php
require_once '/usr/local/cpanel/3rdparty/lib/php/Mail.php';

$db_server = 'localhost';
$db_user = '-----';
$db_pass = '-----';

$dbc = mysql_connect ($db_server, $db_user, $db_pass);
if (!$dbc) { 
    die(mysql_error());
    header ('Location: /contact');
    exit;
}

if ($_POST['contactsent'] != 'yes') {
    header ('Location: /contact');
    exit;
    
} else {
    
if (is_array($_POST)) {
        foreach ($_POST as $key => $value) {
            $_POST[$key] = mysql_real_escape_string(stripslashes($value));
        }
    }

    $RequestType      = $_POST["RequestType"];
    $ConsumerBusiness = $_POST["ConsumerBusiness"];
    $GlobalLocation   = $_POST["GlobalLocation"];
    $FirstName        = strtolower(str_replace("'","''",$_POST["FirstName"]));
    $FirstName        = strtoupper(substr($FirstName,0,1)).substr($FirstName,1);
    $LastName         = strtolower(str_replace("'","''",$_POST["LastName"]));
    $LastName         = strtoupper(substr($LastName,0,1)).substr($LastName,1);
    $Email            = strtolower(str_replace("'","''",$_POST["Email"]));
    $Title            = strtolower(str_replace("'","''",$_POST["Title"]));
    $Title            = strtoupper(substr($Title,0,1)).substr($Title,1);
    $Company          = strtolower(str_replace("'","''",$_POST["Company"]));
    $Company          = strtoupper(substr($Company,0,1)).substr($Company,1);
    $Address          = strtolower(str_replace("'","''",$_POST["Address"]));
    $Address          = strtoupper(substr($Address,0,1)).substr($Address,1);
    $City             = strtolower(str_replace("'","''",$_POST["City"]));
    $City             = strtoupper(substr($City,0,1)).substr($City,1);
    $State            = $_POST["State"];
    $Zip              = $_POST["Zip"];
    $Phone            = $_POST["Phone"];
    $F              = $_POST["F"];
    $ProductDesc      = $_POST["ProductDesc"];
    $Comment          = $_POST["Comment"];

    if ($GlobalLocation == "Canada"):
        $SendTo="canadainfo@------.com";
    elseif ($GlobalLocation == "Central America"): 
        $SendTo="customer.service@------.com.pa";
    elseif ($GlobalLocation == "Europe"):
        $SendTo="marketing@-----.uk";
    elseif ($GlobalLocation == "Mexico"):
        $SendTo="ventas@------.com.mx";
    else:
        $SendTo="info@------.com";
    endif;

function dbSet($fields, $source = array()) {
    $set='';
    if (!source) $source = &$_POST;
    foreach ($fields as $field) {
        if (isset($source[$field])) {
            $set.="`$field`='".mysql_real_escape_string($source[$field])."', ";
        }
    }
    return substr($set, 0, -2);
}

// INSERT INTO DATABASE
            mysql_select_db("new_contact",$dbc) or die("Could not select new_contact");
            
$fields =   explode(" ", "RequestType ConsumerBusiness GlobalLocation FirstName LastName Email Title Company Address City State Zip Phone F ProductDesc Comment");
            $query = "INSERT INTO new_contact SET ".dbSet($fields, $_POST);
            mysql_query($query);

// SETUP EMAIL
$Bodycopy = "This information was submitted via the ------.com website and sent to you because of the location 
        identified by the user. <br>If this has reached you in error, please forward this email to info@------.com";
$Bodycopy. "<br>----------------------------------------------------------------------------------------------<br><br>";

        if ($RequestType != "")      $Bodycopy. "What kind of information do you need? : " .$RequestType. "<br>";
if ($ConsumerBusiness != "") $Bodycopy. "What type of customer or vendor are you? : " .$ConsumerBusiness. "<br>";
if ($GlobalLocation != "")   $Bodycopy. "Global Location : " .$GlobalLocation. "<br>";
if ($Company != "")          $Bodycopy. "Company : " .$Company. "<br>";
if ($FirstName != "")        $Bodycopy. "First Name : " .$FirstName. "<br>";
if ($LastName != "")         $Bodycopy. "Last Name : " .$LastName. "<br>";
if ($Title != "")            $Bodycopy. "Title : " .$Title. "<br>";
if ($Email != "")            $Bodycopy. "Email : " .$Email. "<br>";
if ($Address != "")          $Bodycopy. "Address : " .$Address. "<br>";
if ($City != "")             $Bodycopy. "City : " .$City. "<br>";
if ($State != "")            $Bodycopy. "State : " .$State. "<br>";
if ($Zip != "")              $Bodycopy. "Zip/Postal Code : " .$Zip. "<br>";
if ($Phone != "")            $Bodycopy. "Phone : " .$Phone. "<br>";
if ($F != "")              $Bodycopy. "F : " .$F. "<br>";
if ($ProductDesc != "")      $Bodycopy. "UPC or product description : " .$ProductDesc. "<br>";

$Bodycopy. "<br>----------------------------------------------------------------------------------------------<br><br>";
        
if ($Comment != "")          $Bodycopy. "Comments : <br>" .$Comment. "<br>";

        $Bodycopy. "<br><br>";
        $Bodycopy. $IP = $_SERVER["remote_addr"];
        
// PROCESS EMAIL

// mail server info...

        $from = $SendTo;
        $to = "Do Not Reply <donotreply@------>";
        $subject = "Website Contact : " . $GlobalLocation;
        $body = $Bodycopy;
        $host = "mail.------";
        $port = "25";
        $username = "donotreply@-------";
        $password = "-------";
        
        $headers = array ('From' => $from,
        'To' => $to,
        'Subject' => $subject);
        $smtp = Mail::factory('smtp',
        array ('host' => $host,
         'auth' => true,
         'port' => $port,
         'username' => $username,
         'password' => $password));
        
        $mail = $smtp->send($to, $headers, $body);
        
        if (PEAR::isError($mail)) {
        echo("<p>" . $mail->getMessage() . "</p>");
        } else {
        echo("<p>Message successfully sent!</p>");
        }

// MAKE SURE DB CONN IS CLOSED
        mysql_close($dbc);

// REDIRECT TO THANK YOU PAGE
        header ('Location: /index.php?option');
        exit();

}

?>

My form values are not posting on my thankyou.php page.  I'm sure it's a simple fix.

Here's some code from reservation.php .
form action="CGI/gdform.php" method="post" enctype="application/x-www-form-urlencoded" name="formres" id="formres">
    <input type="hidden" name=" redirect" value="ThankYou.php">
   <label><span class="style12">Your Name:
   <input type="text" name="txtName" id="Name" />
   </span></label>
  ...
 <p class="style12"><span id="sprytextfield10">
   <label>Date of Special Event:
   <input type="text" name="DateReq" id="DateReq" />
   </label>
 <?php 
$txtName = $_GET[txtName];
...
$DateReq = $_GET[DateReq];
?>
 </form>

On my thankyou.php:
<body>

<?php
$txtName = $_POST[txtName];
...
$DateReq = $_POST[DateReq];

?>

and a little lower down...
<?php echo $txtName ?>
...
<?php echo $DateReq ?>


Any reason why the thank you page isn't calling the values?  I exhaustively checked it against a working form I have on another site, and the code seems to be, well, identical.

Not getting an error, just get empty space where the values should be.

This is just a snippet of my code. The php script itself is called test.php and so it calls itself once the form is submitted. I keep having problems retrieving the data back correctly; I am testing in retrieving the data on the same script from the same page before retrieving the POST data from another webpage.

If $decimalSum is a variable that assigns a value that is hard-coded then I would be able to retrieve the same value. However, if the value is computed I can not retrieve it unless I click on the "Find" button twice. This is such a strange behavior and I don't know why.

Does anyone have any suggested solutions to this?



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  <title></title>
</head>
<body>

<?php
echo '<form enctype="multipart/form-data" method="post" action="test.php">';

echo '   <label for="_firstName">First name :     </label>';
echo '   <input type="text" id="_firstName" name ="_firstName">';
echo '   <input type="checkbox" value="1" name="_firstNameChecked"/>';  

echo '   <label for="_middleName">Middle name :     </label>';
echo '   <input type="text" id="_middleName" name ="_middleName">';
echo '   <input type="checkbox" value="1" name="_middleNameChecked" />';
   
echo '   <label for="_lastName">Last name :     </label>';
echo '   <input type="text" id="_lastName" name ="_lastName">';
echo '   <input type="checkbox" value="1" name="_lastNameChecked" />';

echo '<br />';

echo '<input type="submit" name="Find" value="Find" />';

$firstNameChecked        = intval(($_POST['_firstNameChecked']));
$middleNameChecked    = intval(($_POST['_middleNameChecked']));
$lastNameChecked         = intval(($_POST['_lastNameChecked']));

$decimalSum = (int)((2*2*2)*$firstNameChecked + (2*2)*$middleNameChecked + (2*1)*$lastNameChecked);

//$decimalSum = 28;

echo '<br />';
echo '$decimalSum = ' . $decimalSum . '<br />';

echo '<input type="hidden" name="_decimalSum" value = "' . $decimalSum . '" />';

$decimalSum2      =     ($_POST['_decimalSum']);

echo '$decimalSum2  = ' . $decimalSum2 . '<br />';
   
echo '</form>';
echo '</body>';
echo '</html>';
?>

Hi guys, first of all, sorry for my bad english

I have a question,

As title, how can i avoid html tags in a text passed by $_POST method?

htmlentities() is one way, i think, but... there's another way to avoid me to use that? I don't like to decode again every text!

Edit:
is strip_tags(); good for this purpose?

preg_replace() asks that "Delimiter must not be alphanumeric or backslash" in the pattern.  So I changed

 $new_text = preg_replace($_POST['withthis'] ,$_POST['withthis'],$_POST['text']);
to this
$replacethis = $_POST['replacethis'];
$new_text = preg_replace("/$replacethis/",$_POST['withthis'],$_POST['text']);
It works fine, but out of curiosity, is there any way to have the POST variable as a parameter directly, and why does it not work? 

Just to try it, I attempted: "/$_POST['withthis']/"  and $_POST["/'withthis'/"] and both do not work.  str_replace is a better option I think, but I am just trying to get a better understanding of this delimiter rule.  Thanks for your time!

I have a form that is populating fields based on a database query.  I am then trying to update the database based on any changes made in the form and passed through a POST action.

The problem I am having is with the block where I declare short variable names for the $_POST variables that will be passed when the user hits the submit button.  For each variable declaration I get an error message like this:
Quote

Encountered error: 8 in mbr_profile_updt_form.php, line 130: Undefined index: email


I have tried testing the $_POST variable using the isset function but it apparently is set but empty. 

What would be a good way to test to see if the user has pressed the submit button before I go into the processing block that is intended to handle those values from the form?

Here is where my code is at right now:
Code: [Select]
if (!isset($_POST))
{
throw new Exception('You have not filled the form out completely - please go back'
.' and try again.');   
}
else
{
//filled in so create short variable names
$email=$_POST['email'];
$first_name=$_POST['first_name'];
$last_name=$_POST['last_name'];

So, i need this.

I usually hate to post something like this as a first post...I'd like to at least do an into but I"m stumped and I think it's a totally stupid thing I"m not noticing. Anyway, this is the final step in a three step user verification; this is for a staff user to be verified. Anyway, by now they have already verified their email and entered a random code so I"m only worried about actually setting them to verified status in my database so they can start working on blogs etc.

Anyway, this form is supposed to find all unverified staff members, and allow an admin to easily just click down the list (one at a time currently) and verify the user (ie. setting their database status to verified_staffUser). The username that is supposed to be verified (or declined and therefore their entry deleted) is supposed to be passed through as  $_POST[vnsupUsername]. This is set each time it loops through and prints a new user.

The problem is that it's only sending the final username when I click verify/decline on any user :\. I"m not sure why it's doing this. In firebug on firefox it's showing that the user name is set for each one to be properly in the form...but when I click on it (I am having on my machine) the username being worked with echoed..and it's always the last one that was entered into the database. I have no idea why this is happening ..any thoughts?

Code: [Select]
<?php 
if(isset($_GET[vnsufac]) || isset($_POST[svnsu]) || isset($_POST[dvnsu])){ 
// simply prints the back home button
echo "<form action=\"http://localhost/~atharp1122/OGirly_Site/ogirly_staff_homepage.php\" method=\"post\">"
        ."<input type=\"submit\" value=\"Back to Staff Homepage\" style=\"margin-top:10px;\">";



// this will print out the form to verify/deny all new staff user requests that have been email verified
$programCheckUVStaff = mysql_query("SELECT username, email, firstname, lastname FROM staffUNAP where verified_staff = '0'");
while($UVStaff = mysql_fetch_assoc($programCheckUVStaff)){
      print "<div class=\"newVerifyUserContain\" >";
    print "<div class=\"newVerifyUser\" >";
  echo "<h3 style=\"text-align: center;\">Would you like to verify this Staff request?</h3>";
    echo "<table><tr><td>"
      ."<img src=\"images/default_icons/di_bunny_rabbit.png\" width=\"56\" height=\"59\" />"
  ."<ul style=\"padding-left: 100px; padding-bottom: 20px; margin-top: -42px; list-style-type: none;\"><li>"
  ."{$UVStaff[username]} aka {$UVStaff[firstname]}&nbsp;{$UVStaff[lastname]}</li><li>"
  ."{$UVStaff[email]}</li></ul></td></tr><tr><td>"
    ."<form action=\"{$_SERVER[PHP_SELF]}\" method=\"post\">"
      ."<input type=\"checkbox\" name=\"isadmin\" value=\"1\" style=\"margin-left: 10px;\">Is Admin?"
."<input type=\"hidden\" name=\"vnsupUsername\" value=\"{$UVStaff['username']}\">"
  ."<input type=\"submit\" name=\"svnsu\" value=\"Verify Staff\" style=\"margin-left: 200px;\">"
  ."<input type=\"submit\" name=\"dvnsu\" value=\"Decline Request\">";
    print "</table>";
  print "</div></div>";
}
}
// verify a staff member
if(isset($_POST[svnsu])){
echo "verifying a new user";
echo $_POST[vnsupUsername];
}
?>

I want to post some form identifyer when I hit submit, so that I can use this in an SQL query.

Previously I used the below code and would retrieve either page1.php or page2.php etc from $_POST['subject']);

Code: [Select]
<td>
<select name="subject" id="subject" onchange="gotourl(this.value)">
<option value="" >Please Select</option>
<option value="page1.php" >page1</option>
<option value="page2.php">page2</option>
<option value="page3.php">page3</option>
</select>
</td>

will this work?

Code: [Select]
<form id="form1" name="form1" value="tableName" method="post" action="">

$_POST['form1']) returns tableName......

Thanks

Hello!

I was wondering if I could  have some help with some form validation.  In my insert script, I have:

<label for="text"><br />
          <br />
         Question Text:</label>
        <textarea name="text" id="text" cols="45" rows="5">
     </textarea>

Then in a separate script, I input the data into a database:

$data = array('text' => $_POST['text']

  'question_type' => $_POST['question_type'],

  'solution' => $_POST['solution'],

  'author_id' => $_POST['author'],

  'public_access' => $_POST['public_access']);

In this database script, I'd like to check if the text field was "posted":  if it's empty I'd then like to print "Required field" on my original script.

First, if there's nothing to be posted from the text field, I want to stop the database script and return before entering a blank field into my database.  Then, it would be great if I could print a "Required field" message in the original script. Thanks in advance for your help!

Hi all!

Im trying to modify a script so that when a user submits data on a form if there are any errors it flags all errors and not just the first one the script comes to and 'dies'.

Heres the form code

<?php
session_start();
?>
<!--//-----------------------------------------------------------------------------------------------+             |
//  Sample AJAX web form By: Codex-m                                                                               |
// http://www.php-developer.org                                                                                   |
//  You are free to use and improve this script provided you link to author web site: http://www.php-developer.org |
//-------------------------------------------------------------------------------------------------------------->
<html>
<head>
<title>Sample AJAX Web Form</title>
<script type="text/javascript" src="prototype.js"></script>
<script type="text/javascript">
function sendRequest() {
new Ajax.Request("ajaxvalidate.php",
{
method: 'post',
parameters: 'name='+$F('name')+'&phonenumber='+$F('phonenumber')+'&age='+$F('age')+'&captcha='+$F('captcha'),
onComplete: showResponse
});
}
function showResponse(req){
$('show').innerHTML= req.responseText;
}
</script>
<style type="text/css">
P.yellow {background-color: #ffff00;}
</style>
</head>
<body>
<h3>This is a sample PHP web form with AJAX validation</h3>
Please complete the form below and then press "Submit button".<br />
<br /><br />
<form action="/ajaxwebform/ajaxvalidate.php" method="post" onsubmit="return false;">
Enter your Full Name, First name and Last name ONLY (Example: John Doe)<br />
<input style="background-color: #FFFFC0" type="text" name="name" id="name" size="50">
<br /><br />
Enter your Phone number (numbers only, no dashes and spaces)<br />
<input style="background-color: #FFFFC0" type="text" name="phonenumber" id="phonenumber" size="35">
<br /><br />
Enter your Age (Numbers only)<br />
<input style="background-color: #FFFFC0" type="text" name="age" id="age" size="50">
<br /><br />
<img src="/ajaxwebform/captcha.php" />
<br />
Enter the Captcha as shown above:
<br /> <br />
<input style="background-color: #FFFFC0" type="text" name="captcha" id="captcha" size="10">
<br /> <br />
<input type="submit" value="Submit" onClick="sendRequest()">
</form>
<br />
This form will validate your data entry using AJAX. If you are correct with your data entry, the entire information entered will be shown in this page without reloading.
<br />
<br /><br />
<p class="yellow" id="show"></p>
</body>
</html>


Heres the php validating code

<?php
session_start();
?>
<!--//-----------------------------------------------------------------------------------------------+             |
//  Sample AJAX web form By: Codex-m                                                                               |
// http://www.php-developer.org                                                                                   |
//  You are free to use and improve this script provided you link to author web site: http://www.php-developer.org |
//-------------------------------------------------------------------------------------------------------------->
<?php
//start session to recover captcha answers
//connect to database
$username = "root";
$password = "";
$hostname = "localhost";
$database = "newdb";
$dbhandle = mysql_connect($hostname, $username, $password)
 or die("Unable to connect to MySQL");
$selected = mysql_select_db($database,$dbhandle)
or die("Could not select $database");
//extract form inputs
$name =$_POST['name'];
$phonenumber =$_POST['phonenumber'];
$age =$_POST['age'];
$usercaptchaanswer =$_POST['captcha'];
$correctcaptcha = $_SESSION['answer'];
//sanitize early for any possible MySQL entry
$name = mysql_real_escape_string(stripslashes(trim($name)));
$phonenumber = mysql_real_escape_string(stripslashes(trim($phonenumber)));
$age = mysql_real_escape_string(stripslashes(trim($age)));
$usercaptchaanswer = mysql_real_escape_string(stripslashes(trim($usercaptchaanswer)));
$correctcaptcha = mysql_real_escape_string(stripslashes(trim($correctcaptcha)));
Validate captcha entry
if ($correctcaptcha != $usercaptchaanswer) {
echo 'ERROR: You have entered wrong captcha code';
die ();
}
//Step 2 of data validation: check for blank entries
if (empty($name)) {
//name field is blank
echo 'ERROR: The name field is empty.';
die ();
}
if (empty($phonenumber)) {
//phone field is blank
echo 'ERROR: The phone field is empty.';
die ();
}
if (empty($age)) {
//age field is blank
echo 'ERROR: The age field is empty.';
die ();
}
if (empty($usercaptchaanswer)) {
captcha field is blank
echo 'ERROR: The captcha field is empty.';
die ();
}
//Step 3 of data validation: Ensuring correct format
//Step 3.1 validate full name, presence of first name and last name
$mystring = $name;
$findme   = ' ';
$pos = strpos($mystring, $findme);
$actualposition =$pos + 1;
//count strings
$count =strlen($mystring);
//count the number of characters for the first name
$countfirstname = $actualposition - 1;
//count the number of characters for the last name
$countlastname = $count - $actualposition;
//detect if full name has middle name
$posmid= strpos($mystring,$findme,$actualposition) + 1;
$middleadjust = $posmid - $actualposition;
$purealpha = str_replace(" ", "x", $mystring);
if ($actualposition==1) {
echo 'ERROR: You either forgot your first name or your last name.';
die ();
}
if ($countfirstname <2) {
echo 'ERROR: You are using an invalid first name, it should contain more than one character.';
die ();
}
if ($countlastname <2) {
echo 'ERROR: You are using an invalid last name, it should contain more than one character.';
die ();
}
if ($middleadjust >= 2) {
echo 'ERROR: You should not be using a middle name, please use only first name and last name.';
die ();
}
if (!(ctype_alpha($purealpha))) {
echo 'ERROR: Full name can only consist of alphabetic characters.';
die ();
}
//Step 3.2 Validate phone number
if (!(ctype_digit($phonenumber))) {
echo 'ERROR: A phone number should consist of numerical digits only and no spaces between numbers';
die ();
}
//Step 3.3 Validate age
if (!(ctype_digit($age))) {
echo 'ERROR: Your age should consist of numerical digits only and no spaces between numbers';
die ();
}
//Step 4. If all data entry is correct, show results in another page, assigned all values to sessions
echo 'Thank you for the correct data entry, below are the information entered:';
echo '<br />';
echo 'Your full name is: '.$name;
echo '<br />';
echo 'Your phone number is: '.$phonenumber;
echo '<br />';
echo 'Your age is: '.$age;
echo '<br />';
echo '<a href="/ajaxwebform/ajaxwebformtest.php">Click here to enter another data.</a>';
$_SESSION = array ();
session_destroy ();
mysql_close($dbhandle);
?>

Hi,

I currently have the following code in my form processing script:

Code: [Select]
    $string_exp = "/^[A-Za-z .'-]+$/";
$error_missing = 'This field is required';
 
    if(!preg_match($string_exp,$Name)) {
    $errors[] = $error_missing;
  }
   
  if(!preg_match($string_exp_number,$Phone)) {
    $errors[] = $error_missing;
  }
   
    if(is_array($errors))
{
echo 'Your message could not be sent due to the following errors:';
while (list($key,$value) = each($errors))
{

echo '<span class="error">'.$value.'</span><br />';
}
If the user enters no data into the required fields, the script prevents the form from being submitted and displays an error.

At present the errors for all the required fields are displayed in a long list at the top of my HTML form e.g.

This field is required
This field is required

What I want to do, is place the error message under each required field e.g. this http://coreyworrell.com/assets/uploads/images/ajax_contact_form.png instead of this http://cdn1.1stwebdesigner.com/wp-content/uploads/2010/02/validation-ajax-css-form.jpg

What do I need to do?

My form looks similar to this at the moment:

Code: [Select]
<div id="log">
<div id="log_res">
</div>
</div>
<form id="contact" name="contact" method="post" action="process.php">
  <label>Name</label>
    <input type="text" name="Name" id="Name" tabindex="1" />
 
  <label>Email</label>
    <input type="text" name="Phone" id="Phone" tabindex="2" />
</form>
The error messages are placed in the <div> section at the top of the form (using ajax)

Hi. I'm new to PHP and have a problem with some form validation.

The code below is my contact form. It was working until I added a dropdown list and checkbox. For all the other fields I created an input variable using the 'name' attribute to reference the data entered into the input fields and the validation appeared to work and an email was sent to the appropriate email address.

For the checkbox field I have also created a 'name' attribute but don't know whether this is right way to confirm whether the box has been checked?

For the field with a dropdown selection I have used the option 'selected', but again, don't know whether this is right or not.

Now when I enter valid data into all the fields, select a value from the dropdown and check the checkbox, I get an error message stating that I need to fill in all the form fields. I am pretty sure it is to do with the way I have tried to pick up the data from dropdown list and the checkbox, but can't figure out what it is. 

Any help would be much appreciated.

Thanks in advance.

 

<?php echo file_get_contents('header.php'); ?>

<?php
    // Message Vars
    $msg = '';
    $msgClass = '';

  // Check to see if the form has been submitted
  if(filter_has_var(INPUT_POST, 'submit')) {
    //Input Data Variables
    $firstname = htmlspecialchars($_POST['firstname']);
    $lastname = htmlspecialchars($_POST['lastname']);
    $phonenumber = htmlspecialchars($_POST['phonenumber']);
    $email = htmlspecialchars($_POST['email']);
    $selected = htmlspecialchars($_POST['selected']);
    $message = htmlspecialchars($_POST['message']);
    $checkbox = htmlspecialchars($_POST['checkbox']);


    //Check required fields
    if(!empty($firstname) && !empty($lastname) && !empty($phonenumber) && !empty($email) && !empty($selected) && !empty($message) && !empty($checkbox)) {
      // If passed, check email address
      if(filter_var($email, FILTER_VALIDATE_EMAIL) === false) { 
        //If failed, Email address is not valid
        $msg = 'Please use a valid email address';
        $msgClass = 'alert-danger';
      } else {
        //Recipient email address and information to be sent to them
        $toEmail = 'hello@example.co.uk';
        $subject = 'Contact Request from  Website';
        $body = '<h2>Contact Request</h2>
                <h4>Name</h4><p>'.$firstname. ''.$lastname.'</p>
                <h4>Phone Number</h4><p>'.$phonenumber.'</p>
                <h4>Email Address</h4><p>'.$email.'</p>
                <h4>Subject</h4><p>'.$selected.'</p>
        ';

        // Email Headers
        $headers = "MIME-VERSION: 1.0" ."\r\n";
        $headers .="Content-Type:text/html;charset=UTF-8" ."\r\n";

        // Additional Headers
        $headers .= "From: " .$firstname. " ".$lastname." <".$email.">" ."\r\n"; 

        if(mail($toEmail, $subject, $body, $headers)) {
          // Message Sent
          $msg = 'Your message has been sent';
          $msgClass = 'alert-success';
        } else {
          // Message failed
          $msg = 'Your message has NOT been sent';
          $msgClass = 'alert-danger';
        }
      }  
    } else {
      //Failed
      $msg = 'Please fill in all fields';
      $msgClass = 'alert-danger';
    }
  }


?>



      <div class="container clearfix content-container">
        <h1 class="section-title">Contact Us</h1>
        <p>If you have any questions about the services we provide or would like to chat about a new website project, please get in touch using any of the options below. We would love to hear from you!</p>

        <!--Contact Page Row-->
        <div class="row">
          <div class="col-lg-6 contact-details">
            <div class="row">
              <div class="col-lg-12">
                <img src="assets/img/contact-us.jpg" class="img-responsive d-block contact-image" alt="Contact Us Image">
              </div>
            </div>
            <div class="row">
              <div class="col-lg-12 contact-name">
                <span class="d-inline-block contact-inline-block"><i class="fas fa-user fa-2x">
                </i></span>
                <span class="d-inline-block"><p class="contact-details">sn0wman23</p></span>   
              </div>
            </div>
            <div class="row">
              <div class="col-lg-12 contact-phone">
                <span class="d-inline-block contact-inline-block"><a href="tel:+447740484798"><i class="fas fa-mobile-alt fa-2x"></i></a></span>
                <span class="d-inline-block"><a href="tel:+441234567890"><p class="contact-details">01234 567890</a></p></span>  
              </div>
            </div>
            <div class="row">
              <div class="col-lg-12 contact-email">
                <span class="d-inline-block contact-inline-block"><a href="mailto:hello@example.co.uk"><i class="fas fa-envelope-square fa-2x"></i></a></span>
                <span class="d-inline-block"><a href="mailto:hello@example.co.uk"><p class="contact-details">hello@example.co.uk</a></p></span>  
              </div>
            </div>
            <div class="row">
              <div class="col-lg-12 contact-fb">
                <span class="d-inline-block contact-inline-block"><a href="https://www.facebook.com/" target="_blank"><i class="fab fa-facebook-square fa-2x"></a></i></span>
                <span class="d-inline-block"><a href="https://www.facebook.com/example/" target="_blank"><p class="contact-details">@example</a></p></span> 
              </div>
            </div>
          </div>

          <!--Contact Form-->
          <div class="col-lg-6 contact-form d-block">
            <?php if($msg != ''): ?>
              <div class="alert <?php echo $msgClass; ?>"><?php echo $msg; ?></div>
            <?php endif;?>
            <form method="post" action="contact.php" role="form">
              <div class=" row form-group">
                <div class="col-lg-6">
                  <label for="firstnameid">First name:</label>
                  <input type="text" name="firstname" class="form-control mb-3" id="firstnameid">
                </div>
                <div class="col-lg-6">
                  <label for="lastnameid">Last name:</label>
                  <input type="text" name="lastname" class="form-control mb-3" id="lastnameid">
                </div>
              </div>
              <div class="row form-group">
                <div class="col-lg-6">
                  <label for="phonenumber">Phone number:</label>
                  <input type="tel" name="phonenumber" class="form-control mb-3" id="phonenumberid">
                </div>
                <div class="col-lg-6">
                  <label for="emailid">Email address:</label>
                  <input type="email" name="email" class="form-control mb-3" id="emailid">
                </div>
              </div>
              <div class="row form-group">
                <div class="col-lg-12">
                  <label for="subjectid">How can I help?:</label>
                  <select class="form-control mb-3" id="subjectid">
                    <option selected>Select one from this list</option>
                    <option value="1">Value 1</option>
                    <option value="2">Value 2</option>
                    <option value="3">Value 3</option>
                  </select>
                </div>
              </div>
              <div class="row form-group">
                <div class="col-lg-12">
                  <label for="messageid">Tell me a little bit mo </label>
                  <textarea name="message" class="form-control mb-3" id="messageid" rows="6"></textarea>
                </div>
              </div>
              <div class="row form-group">
                <div class="col-lg-12 form-check">
                  <input type="checkbox" name="checkbox" class="form-check-input" id="formcheckid">
                  <label for="formcheckid" class=form-check-label mb-3>By checking this tickbox you have confirmed that we can collect the information in this form for the purposes outlined in our <a href="privacy-policy.html">privacy policy.</a></label>
                </div>
              </div>
              <div class="row form-group">
                <div class="col-lg-12">
                  <button type="submit" name="submit" class="btn btn-primary mt-4">Send Message
                  </button>
                </div>
              </div>
            </form>
          </div>
          <!--Contact Form End-->
        </div>
        <!--Contact Page Row End-->
      </div>
      <!--Container end-->

<?php echo file_get_contents('footer.php'); ?>