Any hints or examples for me?
Code: Select all
// if POST submitted ===================
$comments= stripslashes("$_POST[comments]");
$comments= htmlspecialchars($comments);
if(empty($comments)) problem("Please enter comments!");
addEntry ( $comments );
//======================================
function addEntry ( $comments ){
$delimiter= " ";
$newline= "
"; //Linux="
"; Windows="
"; Mac="
";
$datemsg= date ("Y-m-d");
$comments= str_replace("
","
",$comments);
$comments= str_replace("
","
",$comments);
$comments= str_replace("
","
",$comments);
if($settings['filter']) $comments= filter_bad_words($comments);
$addline= "$name$delimiter$email$delimiter$url$delimiter$comments$delimiter$datemsg$newline";
$fp= @fopen("messages.txt","rb") or problem("Can't read file! CHMOD file to 666 (rw-rw-rw)!");
$data= @fread($fp,filesize("messages.txt"));
fclose($fp);
$addline .= $data;
$fp= fopen("messages.txt","wb") or problem("Can't write to file! CHMOD file to 666 (rw-rw-rw)!");
fputs($fp,$addline);
fclose($fp);
}[code]
This model was used in a flat file guestbook I downloaded.
:joker: [b]Is this okay, or do I need to add anything to this model?[/b]
[color=#888888][size=85]Archived topic from Iceteks, old topic ID:3395, old post ID:27386[/size][/color]
Code: Select all
if(isset($_POST['submit'])){
$name=htmlspecialchars(stripslashes($_POST['name']));
if(empty($name))problem('Please enter your name!','1');
$from=htmlspecialchars(stripslashes($_POST['from']));
$a=check_mail_url();$email=$a['email'];$url=$a['url'];
$comments= htmlspecialchars(stripslashes($_POST['comments']));
if(empty($comments)) problem('Please enter comments!','1');
$remote=$_SERVER['REMOTE_ADDR'];
addEntry($name,$from,$email,$url,$comments,$remote);
exit();
/////////////////////////////////////////////////////////////
function addEntry($name,$from,$email,$url,$comments,$remote){
/* This part will help prevent multiple submissions */
session_start();if (isset($_SESSION['add']))problem('You may only submit once per session!
Thank you');
global $settings;
$delimiter=" ";
$added=date("Y-m-d @ H:i");
$comments=str_replace("
","
",$comments);
$comments=str_replace("
","
",$comments);
$comments=str_replace("
","
",$comments);
$addline="$name$delimiter$from$delimiter$email$delimiter$url$delimiter$comments$delimiter$added$delimiter$remote$settings[newline]";
$fp = @fopen($settings['logfile'],'rb') or problem('Cant read log file! CHMOD file to 666 (rw-rw-rw)');
$links = @fread($fp,filesize($settings['logfile']));
fclose($fp);
$addline .= $links;
$fp = fopen($settings['logfile'],'wb') or problem('Cant write to log file! CHMOD file to 666 (rw-rw-rw)');
fputs($fp,$addline);
fclose($fp);
$_SESSION['add']=1;
?>
<p> </p>
<p><b>Your message was successfully added!</b></p>
<p>Thank you</p>
<p> </p>
<?php
printDownHTML();
exit();
}[code]
[b]1.[/b] stripslashes();
[b]2.[/b] htmlspecialchars();
[b]3a.[/b] str_replace("
","
",$str); [b]3b.[/b] str_replace("
","
",$str); [b]3c.[/b] str_replace("
","
",$str);
One nice feature with this script is, using a SESSION variable [b]to avoid submitting same stuff twice[/b].
This is not unusually to happen. Every time you refresh, you submit a new post.
It also adds latest contact post on top.
halojoy
[color=#888888][size=85]Archived topic from Iceteks, old topic ID:3395, old post ID:27391[/size][/color]Code: Select all
// set magic_quotes_runtime off
set_magic_quotes_runtime(0);
// if magic_quotes_gpc strip slashes from GET POST COOKIE
if (get_magic_quotes_gpc()){
function stripslashes_array($array){
return is_array($array) ? array_map('stripslashes_array',$array) : stripslashes($array);
}
$_GET= stripslashes_array($_GET);
$_POST= stripslashes_array($_POST);
$_COOKIE= stripslashes_array($_COOKIE);
}[code]
This other very similiar code and info was found in a forum topic discussing [b]magic_quotes_gpc[/b][code]// This will make code independent of php/server setting
// To use magic quote or not is up to you
// If you use magic quotes, echo $text; should be echo stripslashes($text);
///////////////////////////
// If you don't need magic quote:
function stripslashes_array(&$arr) {
foreach (array_keys($arr) as $k) {
$arr[$k] = stripslashes($arr[$k]);}
}
if (magic_quote_gpc()) {
stripslashes_array($_GET);
stripslashes_array($_POST);
stripslashes_array($_REQUEST);
stripslashes_array($_COOKIE);
}
set_magic_quote_runtime(0);
//////////////////
// For those need magic quote:
function addslashes_array(&$arr) {
foreach (array_keys($arr) as $k) {
$arr[$k] = stripslashes($arr[$k]);}
}
if (!magic_quote_gpc()) {
addslashes_array($_GET);
addslashes_array($_POST);
addslashes_array($_REQUEST);
addslashes_array($_COOKIE);
}
set_magic_quote_runtime(0);[code]
[color=#006060][b][b]Bottomline:[/b]
This magic quotes thing is dependent of php/server setting.
Is also so important, that most any submitted data
should be fixed to have correct format. With or without slashes.
Such a function could be run in a general include common script,
before any data from GET POST COOKIE is processed and used.
halojoy [/b][/color]
[color=#888888][size=85]Archived topic from Iceteks, old topic ID:3395, old post ID:27398[/size][/color]
I think I finally have understood how to deal with GET POST COOKIE inputs.Example of use:
$string = htmlentities ( $string, ENT_COMPAT , "UTF-8" );
All characters which have HTML character entity equivalents are translated into these entities.
The optional second "quote_style" parameter lets you define
what will be done with 'single' and "double" quotes. Default being ENT_COMPAT.
ENT_COMPAT Will convert double-quotes and leave single-quotes alone.
ENT_QUOTES Will convert both double and single quotes.
ENT_NOQUOTES Will leave both double and single quotes unconverted.
Optional third argument "charset" define swhich character set used in conversion.
Presently, the ISO-8859-1 character set is used as the default.