HTML Form Server Side Validation

Posted on 16th Feb 2014 07:03 pm by admin

Hi, Im new here, im currently doing a website for a friend, and I have designed using snippets from different pages a contact form. The contact form performs all my needs at the moment and it has client side validation through the use of jquery. However I need to account for when javascript is turned off so that no bogus entries are put through. So I am trying to do the validation thing however I just keep getting a blank page and I dont see where I am going wrong here.

Here is the code that works however has no server side validation:
Code: [Select]<?php
if(isset($_POST['submit']) || isset( $_POST["submit_x"])) {

$to = ""; //has email address that is getting sent to but im not putting in for obvious reasons lol
$subject = "Art Epona Reply From: " . trim($_POST['name']) . " - " . trim($_POST['enqtype']);
$name = $_POST['name'];
$email = $_POST['email'];
$message = $_POST['message'];
$dropdown = $_POST['enqtype'];
$emailfrom = ""; //ditto above

$headers = "From: --rn"; //^^
$headers .= "MIME-Version: 1.0rn";
$headers .= "Content-Type: text/html; charset=ISO-8859-1rn";

$Body = '<body><center>';
$Body .= '<table width="450" border="1" rules="all" cellpadding="10">';
$Body .= '<center>';
$Body .= '<tr><td bgcolor="#666666"><h1>New ' . trim($_POST['enqtype']) . ' from Art Epona Website!</h1></td></tr>';
$Body .= '<tr><td bgcolor="#cccccc">' . trim($_POST['name']) . ' will like to make a ' . trim($_POST['enqtype']) . '. Here are the contents of the Enquiry: ';
$Body .= '<table width="430" border="1" cellpadding="10" rules="all">';
$Body .= '<tr><td width="60" bgcolor="#666666">Name:</td>';
$Body .= '<td width="288" bgcolor="#ffffff">' . trim($_POST['name']) .'</td></tr>';
$Body .= '<tr><td width="60" bgcolor="#666666">Email:</td>';
$Body .= '<td bgcolor="#ffffff">' . trim($_POST['email']) .'</td></tr>';
$Body .= '<tr><td width="60" bgcolor="#666666">Message:</td>';
$Body .= '<td bgcolor="#ffffff">' . trim($_POST['message']) .'</td></tr>';
$Body .= '<tr><td colspan="2" align="center"><a href="mailto:' . trim($_POST['email']) . '">Click here to reply to the sender</a></td></tr>';
$Body .= "</table></td></tr></center></table></center></body></html>";

mail($to, $subject, $Body, $headers);

header('Location: contactthanks.html');

} else {

header('Location: contacterror.html');

}

?>
Here is the code that I want to implement, however it is not working:

Code: [Select]<?php

if(isset($_POST['submit'])) || isset( $_POST["submit_x"])) {

//Check to make sure that the name field is not empty
if(strip_tags($_POST['name']) == '') {
$hasError = true;
} else {
$name = strip_tags($_POST['name']);
}

//Check to make sure sure that a valid email address is submitted
if(strip_tags($_POST['email']) == '') {
$hasError = true;
} elseif (!eregi("^[A-Z0-9._%-]+@[A-Z0-9._%-]+.[A-Z]{2,4}$", strip_tags($_POST['email']))) {
$hasError = true;
} else {
$email = strip_tags($_POST['email']);
}

//Check to make sure message was entered
if(strip_tags($_POST['message']) == '') {
$hasError = true;
} else {
$message = strip_tags($_POST['message']);
}

if(isset($hasError)) {

header('Location: contacterror.html');}

else {
$to = ""; //^^
$headers = "From: rn"; //^^
$headers .= "MIME-Version: 1.0rn";
$headers .= "Content-Type: text/html; charset=ISO-8859-1rn";
$emailfrom = ""; //^^
$dropdown = $_POST['enqtype'];
$subject = "Art Epona Reply From: " . $name . " - " . $dropdown;

$Body = '<body><center>';
$Body .= '<table width="450" border="1" rules="all" cellpadding="10">';
$Body .= '<center>';
$Body .= '<tr><td bgcolor="#666666"><h1>New ' . $dropdown . ' from Art Epona Website!</h1></td></tr>';
$Body .= '<tr><td bgcolor="#cccccc">' . $name . ' will like to make a ' . $dropdown . '. Here are the contents of the Enquiry: ';
$Body .= '<table width="430" border="1" cellpadding="10" rules="all">';
$Body .= '<tr><td width="60" bgcolor="#666666">Name:</td>';
$Body .= '<td width="288" bgcolor="#ffffff">' . $name .'</td></tr>';
$Body .= '<tr><td width="60" bgcolor="#666666">Email:</td>';
$Body .= '<td bgcolor="#ffffff">' . $email .'</td></tr>';
$Body .= '<tr><td width="60" bgcolor="#666666">Message:</td>';
$Body .= '<td bgcolor="#ffffff">' . $message .'</td></tr>';
$Body .= '<tr><td colspan="2" align="center"><a href="mailto:' . $email . '">Click here to reply to the sender</a></td></tr>';
$Body .= "</table></td></tr></center></table></center></body></html>";

mail($to, $subject, $Body, $headers);

header('Location: contactthanks.html');
}

} else {
header('Location: contacterror.html');
}

?>
I dont see where I am going wrong (well obviously since i am nooby lol ) but yeah if anyone has a solution, ill gladly accept it pleeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeease and also if an explanation could be given too because i am still in the learning process lol

Thanks in advance

No comments posted yet

Your Answer:

120

Other forums

Send inserts to mysql thru port 80
Hi!

I have an application that must do some inserts in a mysql db. This db is behind a firewa

re calling a function without including file
Hi,
i am new to programming in php, i was just checking the wordpress code and found out in the w

Need help urgant
why down my code ony return one item instead of all the items selected.

$arr = array($date,$

Detail Expenses Report by Cost Center
I would like to obtain a report out of SAP that shows a list of expenses by cost center that shows t

paginate search result
Hi, I have a paginations script to display data from my database but i would like to paginate someon

SQL Injection
In my attempts to protect my database from mySQL injection I have created another problem for myself

Warning message
I've put a website that I was doing live and I'm getting this warning message when I try to add a ne

Getting Subdomain Name With PHP?
I want to grab the subdomain name with PHP so I can generate database queries.

for example my

PHP Login
Hey!
I got this shopcart code online, am trying to modify it but am getting an error when i try a

Help with explandable category tree
I have the below query:

SELECT l1.id as lev1_id,l2.id as lev2_id,l3.id as lev3_id,l1.categ

Indyaspeak

HTML Form Server Side Validation

Your Answer:

Other forums

Follow Us