PHP - Submitting Form Data To A Php Script

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=333815.0

The top half of this code works great ( where the HR line across ) now I'm trying to get it to post the some of the same data to another process script. I keep getting errors. can some please tell me what I'm doing wrong or missing.

<?php
function dataPost($fieldValue){
   //extract data from the post
   extract($_POST);

   //set POST variables
    $url = 'http://www.domain.com/processform1.phpp';
   
   $fields = array(
      'how_you_heard_about_us'=>$how_you_heard_about_us,
        'how_you_heard_about_us_other'=>$how_you_heard_about_us_other,
        'chk_atm_machines'=>$chk_atm_machines,
      'custom1'=>$custom1,
      'txt_business_adrss'=>$txt_business_adrss,
      'txt_city'=>$txt_city,
      'txt_state'=>$txt_state,
      'txt_zip'=>$txt_zip,
      'txt_country'=>$txt_country,
      'txt_phone'=>$txt_phone,
      'txt_fax'=>$txt_fax,
      'txt_website'=>$txt_website,
      'firstname'=>$firstname,
         );

   //url-ify the data for the POST
   foreach($fields as $key=>$value) { $fields_string .= $key.'='.$value.'&'; }
   rtrim($fields_string,'&');

   //open connection
   $ch = curl_init();

   //set the url, number of POST vars, POST data
   curl_setopt($ch,CURLOPT_URL,$url);
   curl_setopt($ch,CURLOPT_POST,count($fields));
   curl_setopt($ch,CURLOPT_POSTFIELDS,$fields_string);

   //execute post
   $result = curl_exec($ch);

   //close connection
   curl_close($ch);
                                    from here down I'm not to sure with.....

//create array of data to be posted
$post_data['firstname'] = 'firstname';
$post_data['custom1'] = 'custom1';
$post_data['txt_state'] = 'txt_state';
 
//traverse array and prepare data for posting (key1=value1)
foreach ( $post_data as $key => $value) {
    $post_items[] = $key . '=' . $value;
}
 
//create the final string to be posted using implode()
$post_string = implode ('&', $post_items);
 
//create cURL connection
$curl_connection =
  curl_init('http://www.domain.com/processform2.php');
 
//set options
curl_setopt($curl_connection, CURLOPT_CONNECTTIMEOUT, 30);
curl_setopt($curl_connection, CURLOPT_USERAGENT,
  "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)");
curl_setopt($curl_connection, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl_connection, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl_connection, CURLOPT_FOLLOWLOCATION, 1);
 
//set data to be posted
curl_setopt($curl_connection, CURLOPT_POSTFIELDS, $post_string);
 
//perform our request
$result = curl_exec($curl_connection);
 
//show information regarding the request
print_r(curl_getinfo($curl_connection));
echo curl_errno($curl_connection) . '-' .
                curl_error($curl_connection);
 
//close the connection
curl_close($curl_connection);
}

dataPost('Some Data');
?>

Sometimes when I submit data to a table (example a blog), it does not get added to the table. I am thinking the reason it has something to do with " / , etc... those kind of symbols, do I need to escape them some how before adding the data to the table?

Hey folks,

I thought this would be simple but obviously not. I can get the data to display in the textarea from the text file. That's not an issue. The issue is, updating the text from the textarea and saving it in the file, while keeping the text in the textarea.
Basically, I want to create a personal notepad inside the site I am making.

Here is the code I am using:

<form action="?admintext.txt" method=post>
<textarea name="file_content" class="textarea1"><? include "admintext.txt"; ?></textarea><br/>
<input type=submit name=submit value=Update>
</form>

Can anyone help with this? I tried loads of tips I found from Google but none worked.

Hello, I'm new to this forum and I need some help. I'm creating a simple database that it submits data from a user input. Unfortunatly, it's not sending any data to mysql also the form is not validating each field.

Code: [Select]
<?php

if (isset($_POST['submitted'])){

$fields = array(
'email',
'state',
'district',
'gender',
'age',
'profession',
'survey',
);

foreach($fields as $fieldName) {
if(isset($_POST[$fieldName]) and trim($_POST[$fieldName]) !==''){
$fieldName = trim($_POST[$fieldName]);
}else {

$errors[] = "Please enter your". $fieldName .""; //code to validate fields
}
}
if(isset($errors)){

require_once('Connections/encourage.php');

$query = "INSERT INTO participants (email, state, district, gender, age, profession, survey) 
VALUES ('$email', '$state', '$district', '$gender', '$age', '$profession','$survey')"; //databasse connection
   
$result = mysql_query ($query); 

if ($result){

echo '<h1 id="mainhead">Thanks for submitting</hl>
<p>You are now registered</p>';
exit();

}else{

echo '<h1 id="mainhead">System Error</hl>
<p>Your registration could not be completed due to a system error We apologize for any incovience</p>';//gives system error
echo 'p' . mysql_error(). '<br /><br />Query: ' . $query . '</p>';
exit();

}
mysql_close();

} else { 

echo '<h1 id="mainhead">Error!</h1>
<p class="error">The following error(s) occurred:<br />';
foreach($errors as $msg) {
echo " - $msg<br/>\n";
}
echo '</p><p>Please try again.</p><p><br/></p>';
}

}
?>
  <form id="form1" name="form1" method="post" action"registration.php">
  <fieldset class="first">
  <label class="lableone" for="email">Email:* </label>
  <input name="email" value="<?php if(isset($_POST['email'])) echo $_POST['name'];?>"/>
 
  <label for="state"/>State:* </label>
  <input name="state" value="<?php if(isset($_POST['state'])) echo $_POST['state'];?>"/>
 
  <label for="schooldistrict"/>School District:* </label>
  <input name="schooldistrict" value="<?php if(isset($_POST['district'])) echo $_POST['district'];?>" />
 
  <label for="gender">Gender:* </label>
 <select name="gender">
   <option>Choose Your Gender</option>
   <option value="male" <?php echo ($form['gender'] == 'male' ? ' selected' : ''); ?>>Male</option>
   <option value="female"<?php echo ($form['gender'] == 'female' ? ' selected' : ''); ?>>Female</option>
 </select>
 
    <label for="age"/>Your Age:* </label>
  <input name="age" type="text" class="age" maxlength="2" value="<?php if(isset($_POST['age'])) echo $_POST['age'];?>"  />
 
  <label for="profession"/>Profession:* </label>
  <input name="profession" value="<?php if(isset($_POST['age'])) echo $_POST['age'];?>" />
 
  <label for="surveys"/>Willingness to participate in future surveys: </label>
  <input name="surveys" type="checkbox" id="surveys" value="yes" <?php echo ($form['survey'] == 'yes' ? 'checked' : '');?>/>
 
  </fieldset>
<fieldset>
  <input class="btn" name="submit" type="submit" value="Submit" />
<input class="btn" name="reset" type="reset" value="Clear Form" />
<input type="hidden" name="submitted" value="TRUE" />
</fieldset>

  </form>


Can someone help me out? Thanks in advanced! 

so what i have going on is that i need help writing a basic script to upload original and copy with resize for thumbnail. then also need to rename both image files with content in the form.
My server supports GD Library and that imagemagik or whatever it is lol.

upload dirs
orig: ../media/photos/
thumb: ../media/photos/thumb/

mySQL DB:
name: m_photos
fields: id(INT)
           m_cat(varchar)
           m_sub_cat(varchar)
           pic(varchar)
           description(varchar)
           p_group(varchar)

I have the form written up for how it should look like:
Code: [Select]
<form action="upload.php" method="post" enctype="multipart/form-data">
  Upload an image for processing<br />
  <input type="file" name="Image"><br />
  <select name="sub_group">
    <option value="Photo Shoot">Photo Shoot</option>
    <option value="Live Performances">Live Performances</option>
    <option value="Randoms">Randoms</option>
    <option value="Fan Photos">Fan Photos</option>
  </select><br />
  Location:
  <input type="text" name="p_group" /><br />
  Date of Pic:
  <input type="text" name="date" /><br />
  Description:
  <input type="text" name="description" /><br />
  <input type="submit" value="Upload">
</form>

so what needs to happen is for the file upload name. it needs to grab a count from "p_group" database to give it a starting number in a "00" pattern and then the date of pic needs to go in there next then the p_group name. so when the files gets uploaded it would look something like this after upload. "03 - Oct 21, 2011 - The Mex.jpg"
NOTE: all pics must be converted to ".jpg" extension.

both the orig and thumb will use that same file name cuz they just go into different dirs

re-sizing for the thumbnail should be done by aspect ratio and needs to either be 300px width or 400px height.

so if anyone would like to help me out please do. im not the greatest at writing in php yet

ok..ive done this a million times..i have a working example here and i copied it and amended it for this new project but for some reason i cant get a form to post data to another page.

this is the error message i get

Notice: Undefined index: username in C:\wamp\www\uni\fyp\site\mobile\login.php on line 16

Notice: Undefined index: password in C:\wamp\www\uni\fyp\site\mobile\login.php on line 17

here is my form code:

                    <form method="post" action="login.php">
                        <table align="center" cellpadding="0" cellspacing="0">
                        <tr>
                            <td style="vertical-align:top;">Username:&nbsp; </td><td><input type="text" name="username" value="" /></td>
                        </tr>
                        <tr>
                            <td style="vertical-align:top;">Password:&nbsp; </td><td><input type="password" name="password" value="" /><br /><input type="submit" id="submit" value="Login" /></td>
                        </tr>
                        </table>
                    </form>


and here is the code within the login.php where the form should post to

$username = $_POST['username'];

$password = $_POST['password'];

// Help protect against MySQL injection

$username = stripslashes($username);

$password = stripslashes($password);

$username = mysql_real_escape_string($username);

$password = mysql_real_escape_string($password);

// Selecting data from database where correct username and password are found

$sql="SELECT * FROM customer WHERE username='$username' and password='$password'";

$result=mysql_query($sql) or die(mysql_error());



i cant see anything wrong..been looking for hours...please please help me

I have this HTML form that isn't doing anything when the submit button pressed, I am using PHP to validate it. I know I am missing something, can you help me? :/ Thanks in advance!
Code: [Select]
<?php require("styles/top.php");?>
<div id="head_reg">
 <div id="head_cen_reg">
  <div id="head_sup_reg" class="head_height_reg">
   <p class="search">
    <label>SEARCH</label>
    <input name="search" type="text" class="txt" />
    <input name="search-btn" type="submit" class="btn" value="SEARCH" />
   </p>
    <h1 class="logo"></h1>
   <?php require("scripts/links.php"); ?>
    </div>
    </div>
    </div>
<div id="content">
<br />
<div id="register_form">
<form action="register.php" method="post" enctype="multipart/form-data">
<center>
<table>
   <tr>
     <td>Desired Username&nbsp;</td>
     <td><input type="text" name="username" class="textbox" /></td>
   </tr>
   <tr>
     <td>E-Mail&nbsp;</td>
     <td><input type="text" name="email" class="textbox" /></td>
   </tr>
   <tr>
     <td>Password&nbsp;</td>
     <td><input type="text" name="pass" class="textbox" /></td>
   </tr>
   <tr>
     <td>Confirm Password&nbsp;</td>
     <td><input type="text" name="repass" class="textbox" /></td>
   </tr>
   <tr>
     <td><p class="register">
    <input name="reg-btn" type="submit" class="btn" value="REGISTER" />
   </p></td>
   </tr>
</table>
</center>
</form>
</div>
<center><a href="#" id="showreg">Why register? Click here</a></center>
 <div id="content_cen">
  <div id="content_sup">
   <div id="welcom_pan">
   <h3><span>Why</span> Register?</h3>
   <p>Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Nulla vitae diam magna, eget fringilla tellus. Curabitur est velit, suscipit eu faucibus eget, aliquam ac enim. per inceptos himenaeos. Nulla vitae diam magna, eget fringilla tellus.</p>
   </div>
  </div>
 </div>
</div>
<div id="foot">
 <div id="foot_cen">
 <ul>
   
   </ul>
    <p></p>
 </div>
</div>
<?php
if(isset($_POST['reg_btn'])){
$username = $_POST['username'];
$email = $_POST['email'];
$password = $_POST['pass'];
$repassword = $_POST['repass'];
if ($username && $password && $repassword && $email){

  if ($password == $repassword){

if (strstr($email, "@") && strstr($email, ".") && (strlen($email) >= 6)){


$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$numrows = mysql_num_rows($query);
if ($numrows == 0){

$query = mysql_query("SELECT * FROM users WHERE email='$email'");
$numrows = mysql_num_rows($query);
if ($numrows == 0){



    

$pass = md5(md5($password));
$ip = $_SERVER['REMOTE_ADDR'];
$date = date("F,d,Y:g:i:s A");

mysql_query("INSERT INTO users VALUES ('', '$username', '$pass', '$email','Member', '$date', '', '$ip', '0')");


          
   }
    else
   echo"That email is already in use!";
   }
     else 
    echo"That username is already taken!";
                    }
                      else
                          echo"That email is too short!";
                        
                           }
                             else
                                 echo"Those passwords do not match!";
                                 }
 else
    echo"<script type='text/javascript'>alert('You did not fill out the entire form!')</script>";
                                    }
       
                                
                                         
                             
                                                
?>

I have a firm that post to my database. When I tested it always posted my information correctly. I require the user to be logged in before they can access the page with the form. I do I ensure that each php variable has a value in it before the data is posted? Any help would be appreciated. I can post my code if needed.

i have a php script and i want it to submit to itself having the php script on the same page, the problem is when i do it it tries to upload the file without waiting for the form resaulting in format you tried to upload was not allowed" (its an image uploader)

heres my code Code: [Select]
<?php
   // Configuration - Your Options
      $allowed_filetypes = array('.jpg','.gif','.bmp','.png'); // These will be the types of file that will pass the validation.
      $max_filesize = 1524288; // Maximum filesize in BYTES (currently 1.5MB).
      $upload_path = './files/'; // The place the files will be uploaded to (currently a 'files' directory).
 
   $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).
   $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.
 
   // Check if the filetype is allowed, if not DIE and inform the user.
   if(!in_array($ext,$allowed_filetypes))
      die('<font size="4"><font color="red">The file you attempted to upload is not allowed.</font></font>');
 
   // Now check the filesize, if it is too large then DIE and inform the user.
   if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize)
      die('The file you attempted to upload is too large.');
 
   // Check if we can upload to the specified path, if not DIE and inform the user.
   if(!is_writable($upload_path))
      die('You cannot upload to the specified directory, please CHMOD it to 777.');
 
   // Upload the file to your specified path.
   if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $filename))
         echo '<font size="4"><span style="color: white; text-shadow: lime 0px 0px 3px;"><h2>Upload Successful!</h2><br>  
<img src="' . $upload_path . $filename . '"><br>
<p id="codes"><label for="codedirect">Direct Link:</label><br />

            <input type="text" id="codebb" value="http://imageplanet.site90.net/' . $upload_path . $filename . '" onclick="javascript:this.focus();this.select();" readonly="true" /><br />
            <label for="codehtml">HTML code:</label><br />
            <input type="text" id="codehtml" value="&lt;img src=&quot;http://imageplanet.site90.net/' . $upload_path . $filename . '&quot;&gt;" onclick="javascript:this.focus();this.select();" readonly="true" /><br />
            <label for="codebb">IMG code:</label><br />
            <input type="text" id="codebb" value="[IMG]http://imageplanet.site90.net.info/' . $upload_path . $filename . '[/IMG]" onclick="javascript:this.focus();this.select();" readonly="true" /></p></div>




</span></font>'; // It worked.
      else
         echo '<font size="4"><font color="red">There was an error during the file upload.  Please try again.</font</font>'; // It failed :(.
 
?>

<form action="upload.php" method="post" enctype="multipart/form-data">
   <p>
      <label for="file"><font color="white">Select a image:</font></label>
<br><br> <input type="file" name="userfile" id="file"> <br />
      <button>Click Here To Upload</button>
   <p>
<br>
<br>
<font color="#006FFF"><span style="font-family: Criovision; font-weight: normal; font-style: normal; text-decoration: none; font-size: 15pt;">Max File Upload Size: 1.5MB<br></span></font>

</div>
</span>


i just want it so it doesn't display that error

I am trying to learn how to program in PHP. For a long time i was using WAMP and my localhost. When i ran into trouble i searched the web, watched videos and eventually find a solution.   Trying to upload my scripts into a shared hosting web server i had some difficulties in basic things, like using $_SESSION superglobal variable.   What i want to do is to use a hidden field with a value inside a form, and after submitting the form, to compare the $_SESSION variable to the $_POST variable in order to check for CSRF.

<?php

	//call all custom functions
	require_once('Custom_Functions/functions.php');

	//session must be send before HTML headers

	secure_session_start();

?>
<!DOCTYPE html>
<html lang="en">
<body>
<?php 

	if(isset($_POST['submit']))
	{
		$postvalue = $_POST['input1'];
		$sessionvalue = $_SESSION['hashed_token'];

		echo '<br />==========================<br />';
		echo '<br />AFTER PRESSING SUBMIT<br />';

		echo '<br />==========================<br />';

		echo 'Value of  $_POST["hashed_token"] = '.$postvalue.'<br />';
		echo 'Value of $_SESSION["hashed_token"] = '.$sessionvalue.'<br />';
		

	}


$hashed_token = hash('sha256', uniqid(mt_rand(), TRUE));

$_SESSION['hashed_token'] = $hashed_token;


echo '<br />==========================<br />';
echo '<br />BEFORE PRESSING SUBMIT<br />';

echo '<br />==========================<br />';


echo '<br />Value of $_SESSION["hashed_token"] = '.$hashed_token.'<br />';


?>

<form action="" method="POST">
	<input type="hidden" name="input1" value="<?php echo $hashed_token; ?>" />
	<p><input type="submit" name="submit" /></p>
</form>


</body>


</html>

In this script i have 1 custom function:   a) secure_session_start()

function secure_session_start(){

	//Set a custom session name
	$session_name = 'TESTSESSID';

	ini_set('session.use_only_cookies', 1);

	ini_set('session.entropy_file', '/dev/urandom');

	
	if (in_array('sha512', hash_algos())) {
	  
	    ini_set('session.hash_function', 'sha256');
	 }

	ini_set('session.use_trans_sid', 0);

	ini_set('session.hash_bits_per_character', 5);

	ini_set('session.cookie_secure', 1);

	$secure = TRUE;

	$httponly = TRUE;


	$cookieParams = session_get_cookie_params();
	
	session_set_cookie_params($cookieParams['lifetime'], $cookieParams['path'], $cookieParams['domain'], $secure, $httponly);

	session_name($session_name);

	
	ini_set("session.save_path", "/home/SESSIONS");

	session_start();

}

The procedure goes as follows:   FIRST COMMUNICATION WITH THE SERVER: The superglobal variable $_SESSION['hashed_token'] is assigned the random hash value, which is then passed to the hidden input field. I then echo it.   RESULT:   ==========================

BEFORE PRESSING SUBMIT

==========================

Value of $_SESSION["hashed_token"] = 93438a1b9b72085ce9430291acebdc4cfdee9d001b91a26207aebc22e04689fc   SECOND COMMUNICATION WITH THE SERVER: The user press the submit button, the script then checks if the submit button is pressed, and gets in the if statement(because is TRUE). Then i collect the $_POST and $_SESSION values and echo them. New random hash is assigned to the $_SESSION superglobal variable.   RESULT:   ==========================

AFTER PRESSING SUBMIT

==========================
Value of $_POST["hashed_token"] = 93438a1b9b72085ce9430291acebdc4cfdee9d001b91a26207aebc22e04689fc
Value of $_SESSION["hashed_token"] = 8f176aeb3a09a1b30e0ea862c78625d7c11743da933d366cface3fa238388e57

==========================

BEFORE PRESSING SUBMIT

==========================

Value of $_SESSION["hashed_token"] = c3442382b146f03394ad86911018247c57fa19d4a653d0bf6bb9bc7506e88ca0   For me this is very weird. The random hash is assigned to the $_SESSION variable, but when i try to call it after the submit is pressed its giving me a complete different value. If i remove the function secure_session_start() and just use session_start() it works:   RESULT (using session_start() ) ==========================

AFTER PRESSING SUBMIT

==========================
Value of $_POST["hashed_token"] = a5eaaaa38c428af623a599e664ea9c64a2ff0674e18e9250c54e52bbc586b614
Value of $_SESSION["hashed_token"] = a5eaaaa38c428af623a599e664ea9c64a2ff0674e18e9250c54e52bbc586b614

==========================

BEFORE PRESSING SUBMIT

==========================

Value of $_SESSION["hashed_token"] = e2d4acc239a747217860d71a80553abd41142dbeb8f6fafab511caff8a081fc4   Any ideas why this is happening? The problem is inside the secure_session_start() function but i cant find out why.   Also, when i use the secure_session_start() function and more specifically the ini_set("session.save_path", "/home/SESSIONS"); i am forcing the session to be stored inside the /home/SESSIONS folder. But when i only use the session_start() the session i still gets stored inside that path. I checked my .htaccess and there is nothing storing the sessions in that folder. Why is that?   One last thing: When using FIREBUG-->Cookies is see 2 names: the custom one (TESTSESSID) and PHPSESSID(which is the default). Shouldnt i only see the custom session name only?   Thanks in advance.

This topic has been moved to JavaScript Help.

http://www.phpfreaks.com/forums/index.php?topic=316807.0

Got this page, a player clicks the "accept challenge" button, then it is recorded in the database that the challenge as been started and once the form has been self submitted, the button is disabled. It does what I expect, but I have to refresh the page again for the button to be displayed as disabled. How can I do it so the page is changed once the form has been submitted?
Code: [Select]
<?php
session_start();what  but after clicking a button I have to refresh the page again, before the button is displayed as disabled
include('functions.php');
connect();
?>
<!DOCTYPE html>
<html>
<head>
<title>University Crusade</title>
<link rel="stylesheet" href="css/style.css" type="text/css" media="screen">
<meta name="viewport" content="width=device-width, minimum-scale=1,maximum-scale=1, user-scalable=no">
</head>
<body>
<?php
if (isset($_SESSION['userid'])) {
include('safe.php');

if (isset($_POST['start1'])) {
mysql_query("UPDATE chal1 SET start1=1 WHERE userid='".$_SESSION['userid']."'") or die ("Could not update start1");
}
if (isset($_POST['start2'])) {
mysql_query("UPDATE chal1 SET start2=1 WHERE userid='".$_SESSION['userid']."'") or die ("Could not update start2");
}
if (isset($_POST['start3'])) {
mysql_query("UPDATE chal1 SET start3=1 WHERE userid='".$_SESSION['userid']."'") or die ("Could not update start3");
}
?>
<ul id="tab-nav">
<li><a href="stats.php" id="tab-character">Character</a></li>
<li><a href="games.php" class="active" id="tab-games">Games</a></li>
<li><a href="account.php" id="tab-account">Account</a></li>
</ul>
<div id="wrapper">
<h2 id="name">Select a Challenge</h2>
<ul id="table-view">
<li>
<fieldset>
<legend>"Easter Egg" Challenge</legend>
<div id="rewards">
<p class="instructions">
Find each of the 4 "Easter Egg" barcodes around
the university campus.
</p>
<p>
Rewards: Every egg is worth
<span class="stat">50</span> XP and
<span class="stat">35</span> gold coins.
</p>
</div>
<form action="games.php" method="POST">
<?php 
if ($start1 == 1) {
echo "<br />The value is 1";
echo "<button class=\"buttons\" type=\"submit\" name=\"start1\" disabled=\"disabled\">Accept challenge</button>";
} elseif ($start1 == 0) {
echo "<br />The value is 0";
echo "<button class=\"buttons\" type=\"submit\" name=\"start1\">Accept challenge</button>";
}
?>
</form>
</fieldset>
</li>
<li class="even">
<fieldset>
<legend>Increase Strength</legend>
<div id="rewards">
<p class="instructions">
You'll find the barcode in the Sports Centre.
</p>
<p>
Rewards: Every time you visit the Sports Centre
you'll receive <span class="stat">2</span> Str. points.
</p>
</div>
<form action="games.php" method="POST">
<?php 
if ($start2 == 1) {
echo "<br />The value is 1";
echo "<button class=\"buttons\" type=\"submit\" name=\"start2\" disabled=\"disabled\">Accept challenge</button>";
} elseif ($start2 == 0) {
echo "<br />The value is 0";
echo "<button class=\"buttons\" type=\"submit\" name=\"start2\">Accept challenge</button>";
}
?>
</form>
</fieldset>
</li>
<li>
<fieldset>
<legend>Increase Intelligence</legend>
<div id="rewards">
<p class="instructions">
You'll find the barcode in the university Library.
</p>
<p>
Rewards: Every time you visit the Library
you'll receive <span class="stat">2</span> Int. points.
</p>
</div>
<form action="games.php" method="POST">
<?php 
if ($start3 == 1) {
echo "<br />The value is 1";
echo "<button class=\"buttons\" type=\"submit\" name=\"start3\" disabled=\"disabled\">Accept challenge</button>";
} elseif ($start3 == 0) {
echo "<br />The value is 0";
echo "<button class=\"buttons\" type=\"submit\" name=\"start3\">Accept challenge</button>";
}
?>
</form>
</fieldset>
</li>
</ul>
</div>
<div id="footer">
<a class="buttons" href="logout.php">log me out</a>
</div>
<?php
} else {
die ("
<div id=\"wrapper\">
<p>Opps! You don't seem to be logged in...</p>
<a class=\"buttons\" href=\"index.php\">login now</a><br />
<p>Don't have an account? No worries, just <a class=\"buttons\" href=\"register.php\">register for one.</a></p>
</div>
");
}
?>
Thanks

Hello, I have a problem with my login form, when i press the submit button, it returns a valitation error that I made.

The error message is triggered when the submit button isn't pressed, but the form still tries to submit.

session_start();

include "sources/php/class.php";

$e = $_POST['loginname'];
$p = $_POST['loginpass'];
$s = $_POST['submit'];

if(!isset($s)) {
    header('location: '.$_SESSION['psite'].'.php?p=error&ploca=login&pid=0');
    exit();
}

Heres a piece of my code, first i define the variables, then check if the button was pressed, but something is wrong there? - But what?

Hope you can help me.
Thanks in advance.

I have  PHP forms that are not submitting to my database. I think it is something minor but I just can't see it! Can anyone help?

At the beginning of index.php, the page holding the forms,  I have this:

Code: [Select]
[b]<?php include("functions/globals.php"); ?>
<?php include("functions/userfunctions.php"); ?>[/b]

[b]Here are these pages:[/b]

[b]globals.php[/b]

<?php ob_start();//Required for the redirect to work?>
<?php include("loginstatus.php");?>
<?php session_start(); ?>

[b]((Here's loginstatus.php for good measu [/b]

<?php
  class cUser
  {
     public $username = "";//The User Name
     public $userid = "";//The User ID
     public $type = "";//The Type Of User 
  }
?> [b]))[/b]

[b]And here is userfunctions.php[/b]

<?php 
include_once("databasefunctions.php"); (this holds the connection)

$userdbtable = "users";

function GetHeaders()
{
        $headers  = 'MIME-Version: 1.0' . "\r\n";
        $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
        // Additional headers
        $headers .= "To: {$username} <{$email}>" . "\r\n";
        $headers .= 'From: My Website <[email]noreply@myswebsite.com[/email]>' . "\r\n";
        return $headers;
}
function CreateAccount($firstname, $lastname, $username, $password, $email, $type)
{
    global $userdbtable;
    openDatabase();
   $firstname = mysql_real_escape_string($firstname);
    $lastname = mysql_real_escape_string($lastname);
    $username = mysql_real_escape_string($username);
    $password = mysql_real_escape_string($password);
    $email = mysql_real_escape_string($email);
    $type = mysql_real_escape_string($type);
    
    $nonencrypted = $password;
    $password = sha1($password);
    $result = QuickQuery("INSERT INTO {$userdbtable}(firstname, lastname, username, password, email, type) 
                          VALUES('{$firstname}','{$lastname}','{$username}','{$password}','{$email}',{$type}')");
    if($result)
    {
        $headers = GetHeaders();
        $message = "\"Welcome to my website!\"<br />
        <br />
        Your username is: {$username}<br />
        Your password is: {$nonencrypted}<br />
        <br />
        Signed,<br />
        <br />
       Me
        ";
        mail($email, "Account Creation", $message, $headers);
        mail("[email]myemailaddress@me.com[/email]", "Account Created", "{$username} has created a new account", $headers);
    }
}

function ValidateUser($username, $password)
{
    global $userdbtable;
    openDatabase();
    $username = mysql_real_escape_string($username);
    $password = mysql_real_escape_string($password);
    $result = QuickQuery("SELECT * FROM {$userdbtable} WHERE username = '{$username}'");
    
    closeDatabase();

    if(!mysql_result($result,0,"username"))//Make sure the user exists
        return "User Does Not Exist";
    
    $temppwd=mysql_result($result,0,"password");//Make sure the passwords match
    if(sha1($password) != $temppwd)
        return "Password Does Not Match";
    
    return 1;
}

function GetUserID($username)
{
    global $userdbtable;
    openDatabase();
    $username = mysql_real_escape_string($username);
    $result = QuickQuery("SELECT id FROM {$userdbtable} WHERE username = '{$username}'");
    closeDatabase();
   
   if($result)
    return(mysql_result($result,0,"id"));//Get the user id
else
    return 0;

    return(mysql_result($result,0,"id"));//Get the UserID
}

function GetUserType($username)
{
    global $userdbtable;
    openDatabase();
    $username = mysql_real_escape_string($username);
    $result = QuickQuery("SELECT type FROM {$userdbtable} where username = '{$username}'");
    closeDatabase();
    
    return(mysql_result($result,0,"type"));//Get the user type
}

function GetUserEmail($username)
{
    global $userdbtable;
    openDatabase();
    $username = mysql_real_escape_string($username);
    $result = QuickQuery("SELECT email FROM {$userdbtable} WHERE username = '{$username}'");
    closeDatabase();
    
    return(mysql_result($result,0,"email"));//Get the user email
}

function ConfirmPassword($id, $password)
{
    global $userdbtable;
    openDatabase();
    $password = mysql_real_escape_string($password);
    $password = sha1($password);
    $result = QuickQuery("SELECT * FROM {$userdbtable} WHERE id = '{$id}' AND password = '{$password}'");
    closeDatabase();

    if(!$result)
        return 0;
    else
        return 1;
}

function ChangePassword($id, $password)
{
    global $userdbtable;
    openDatabase();
    $password = mysql_real_escape_string($password);
    $password = sha1($password);
   return QuickQuery("UPDATE {$userdbtable} SET password='{$password}' WHERE id={$id}");
}

function ResetPassword($email)
{
    global $userdbtable;
    openDatabase();
    $email = mysql_real_escape_string($email);
    $result = QuickQuery("SELECT * FROM {$userdbtable} WHERE email = '{$email}'");
    
    $num = mysql_numrows($result);
    if(!$num)
        return 0;
    $user = mysql_result($result, 0, "username");
    $email = mysql_result($result, 0, "email");
    $randompwd = RandomPwd();
    $temp = sha1($randompwd);
    $headers = GetHeaders();
    mail($email, "Blah blah blah.  Your newusername is: {$user}, and your new password is: {$randompwd}. ", $headers);
    if(QuickQuery("UPDATE {$userdbtable} SET password='{$temp}' WHERE email='{$email}'"))
        return 1;
}

function RandomPwd()
{
    $length = 10;
    $characters = '0123456789abcdefghijklmnopqrstuvwxyz';
    $string = "";    

    for ($p = 0; $p < $length; $p++) {
        $string .= $characters[mt_rand(0, strlen($characters))];
    }

    return $string;
}
?>


[b]Here is the info on index.php for login and registration[/b]

[b]Login:[/b]

    <?php
        if($_GET['logout'] == 'logout')
        {
        session_destroy();
        Redirect("index.php");
        }
        if($_POST['submitted'] == "login")
        {
//      echo ValidateUser("Jimmy", "password");
        //CreateAccount($name, $password, $email, $type);
        if(ValidateUser($_POST['username'], $_POST['password']) == 1)
        {
        $_SESSION['user'] = new cUser;
        $_SESSION['user']->username = $_POST['username'];
        $_SESSION['user']->usertype = GetUserType($_POST['username']);
        $_SESSION['user']->userid = GetUserID($_POST['username']);
        Redirect("index.php");
        }
//      CreateAccount("test", "test", "[email]me@website.com[/email]", "user");
        }
        ?>

[b]Registration[/b]

   <?php
        if($_POST['submitted'] == "register")
        {
      $firstname = $_POST['firstname'];
        $lastname = $_POST['lastname'];   
        $username = $_POST['username'];
        $email = $_POST['email'];
        $password = $_POST['password'];
        $confirmpwd = $_POST['confirmpwd'];
        if(!$firstname)
        $error = "Invalid First Name";
        else
        if(!$lastname)
        $error = "Invalid Last Name";
        else      
      if(!$username)
        $error = "Invalid User Name";
        else
        if(!$email)
        $error = "Invalid Email";
        else
        if(!$password)
        $error = "Invalid Password";
        }
        ?>

    <?php
        if($_POST['submitted'] && !$error)
        {
        $result = QuickQuery("SELECT username FROM users WHERE username='{$username}'");
        if(mysql_numrows($result) > 0)
        $error = "Be More Creative. Someone Already is Using That Username.";
        else
        {
        $result = QuickQuery("SELECT email FROM users WHERE email='{$email}'");
        if(mysql_numrows($result) > 0)
        $error = "Email Already Being Used.  Maybe you already registered.";
        else
        if($confirmpwd != $password)
        $error = "Matching passwords means the second password must be exactly like this first.";
        else
        {
        CreateAccount($firstname, $lastname, $username, $password, $email, "user");
        }
        }
        }
        ?>

[b]Both forms are here[/b]

<div class="btn-show">
<p>Login</p>
</div>

<div class="pushup-form">
<div class="btn-close">
Close
</div>
<div class="clear">
</div>
               
               
                     <form action="index.php" method="post">
                    <p style="font-size:14px">Login</p>
                    <p>Username:<input type="text" name="username" style="font-size:12px;"/></p>
                    <p>Password:<input type="password" name="password" style="font-size:12px;"/></p>
                    <p><input class="login" type="submit" name="submitted" value="login" /></p>
                    <p><a href="pwd.php?pwd=lostpwd" style="font-size:10px">Forgot Username or Password?</a></p>
                    </form>
                   
                    <div class="panel">
                    <form action="index.php" method="post">
                    <p>First Name:<input type="text" name="firstname" value="<?php echo $firstname;?>" /></p>
                    <p>Last Name:<input type="text" name="lastname" value="<?php echo $lastname;?>" /></p>
                    <p>Username:<input type="text" name="username" value="<?php echo $username;?>" /></p>
                    <p>Email:<input type="text" name="email" class="clear" value="<?php echo $email;?>" /></p>
                    <p>Password:<input type="password" name="password" value="<?php echo $password;?>" /></p>
                    <p>Confirm Password:<input type="password" name="confirmpwd" value="<?php echo $confirmpwd;?>" /></p>
                    <p class="clear">
                    <p><input class="register" type="submit" name="submitted" value="register"/></p>
                    </p>
                    </form>
                    </div>
                    <p style="text-align:center;" class="flip">Need to Register?</p>
                    </div>
[code]

These forms open from the right side of my website by clicking "Register." The top of the form has an option for login and by clicking "Need to Register?" The rest of the form expands.

Any ideas? My database is set up correctly.


MOD EDIT: code tags added.