hi, I just wanted to check if a comment a user posts contains HTML, and if it does, to not allow it to be posted.
this is my current php, any help would be very much appreciated! thanks.
Code:
<?php
$comment=$_POST['comment'];
$name=$_POST['name'];
$email=$_POST['email'];
$website=$_POST['website'];
$date=date("y/m/d h:i:s");
if($name && $email && $comment){
$sql="INSERT INTO `comments` (`name`, `email`, `website`, `articleid`, `comment`, `datetime`) VALUES ('$name', '$email', '$website', '$id', '$comment', '$date')";
$result=mysql_query($sql) or die(mysql_error());
if($result){
echo "Your comment was posted succesfully on the article n";
echo $rows['title'];
echo '<p><a href="view_article.php?id=';
echo $id;
echo '">Click here to go back to the article.</a></p>';
}else {
echo "Sorry, your comment could not be posted. Please make sure you fill in all the fields marked with *.n";
}
}else {
echo "Sorry, your comment could not be posted. Please make sure you fill in all the fields marked with *.n";
}
?>
$variable $variables type question
I need to be able to designate an array element dynamically, so I thought to use a variable variable, but it doesn't work:Code: $test = array(1,2);$num = "[0]";echo $test{"$num"};
Database 'Validation'
Hi everyone,I'm trying to validate the password entered by the user with the password in the database. I've worked out that it checks the username fine (if the username doesn't exist it displays an
HTML form problem
Ive made a form to that i want to send to my email via PHP. but when it send only the name's etc send and then the table belpw only Job location sends and the other columns do not send. is this a html
Displaying data from MySql a different way
Hi all,I'm pretty new to php and MySql and have hit a problem.I am able to display data in a table using the following code:<?php $database="MYDATABASE"; mysql_connect
Saving PHP output as a file
I wondered if anyone knows how to save the rendered output of a PHP script as a file?I have a script that creates dynamic PDF documents, but want to save it as a file, rather than render it to the
Include with Parameters
In a particular page I would like to include a file that requires $_GET parameters.when I go to this sort of url I get what I want.http://www.example.com/test.php?id=1234567890I want the url to be
Module pool selction screen parameters combination logic
Hi floks,
Need help: how to catch acess of undefined class properties
Hello. I am learning OO with PHP and have hit a problem.Some code runs as perfectly valid code, where i would like PHP to issue a warning / error.I guess this is because of the loose typing of PHP,
Removing Title From database problem
Hi again ! i am having an issue with updating database. When i update any price of a title it remove the title from database please can somebody help me what i am missing in my code. here it is:Code:
Please Help my PHP Dating Function.
Hi everyone!Well here is my code that displays this: It works wonderful.The code is:Code: function time_elapsed_string($ptime) { $etime = time() - $ptime; if ($etime < 1) {
