Omitting certain $key / $Val from being sent thru form

**ronverdonk** · Nov 26 '06, 03:33 PM

You can replace the code after text "start pieced in: " with the following code. It (a) excludes entries in the $exclude array (now contains secure and submit) and (b) it replaces any keys you'd like to replace, as described in your post, with the values from array $replace. Have a look and see if it is what you were looking for:
[php]
//start pieced in: this may be a major trouble spot, since it is preceeded by another "if" statement

// this array contains the keys to be replaced by better texts
$replace = array("send_ema il_to" => "Send Email To",
"event_descript ion" => "Event Description",
"whatever else" => "Whatever You want"
);
// this array holds the key names to exclude from print/email
$exclude = array ("secure", "submit");

if (!is_array($_PO ST))
return;
foreach($_POST as $key => $val) {
// exclude certain key names
if (!in_array($key , $exclude)) {
// if $key in translate table, replace
if (array_key_exis ts($replace, $key))
$Message .= $replace[$key];
// key not in table, use $key
else
$Message .= $key;
$val=stripslash es($val);
$Message .= "= $val\n";

} // end if (array_key

} // end IF (!in_array

} // end FOREACH[/php]
Ronald :cool:

**Spycat** · Nov 26 '06, 04:20 PM

Hi Ronald,

Thanks for your fast reply - I appreciate it :)
I hope you have infinite patience, cuz I think I did something wrong.
When I load the form I get 9 instances of this:
Warning: array_key_exist s() [function.array-key-exists]: The second argument should be either an array or an object in /home/chocolat/public_html/test/clubs/test4.php on line 114
(NOTE: Line 114= "if (array_key_exis ts($replace, $key))")

And 1 instance of this:
Warning: Cannot modify header information - headers already sent by (output started at /home/chocolat/public_html/test/clubs/test4.php:114) in /home/chocolat/public_html/test/clubs/test4.php on line 144
(NOTE: Line 144=" header("Locatio n: http://www.metroactive .com/contact/thanks.html"); ")

Here's what I put:
[php]
<?php
session_start() ;

//PAGE VARS
$err = '';
$Message = '';

//FORM PROCESSING
if (isset($_POST['submit'])) {
// clean and check form inputs including the secure image code
$name = trim(strip_tags ($_POST['name']));
$email = trim(strip_tags ($_POST['email']));
$phone = trim(strip_tags ($_POST['phone']));
$event_title = trim(strip_tags ($_POST['event_title']));
$event_date_and _time = trim(strip_tags ($_POST['event_date_and _time']));
$event_location = trim(strip_tags ($_POST['event_location ']));
$event_phone_nu mber = trim(strip_tags ($_POST['event_phone_nu mber']));
$event_price = trim(strip_tags ($_POST['event_price']));
$event_descript ion = trim(strip_tags ($_POST['event_descript ion']));

$secure = strtoupper(trim (strip_tags($_P OST['secure'])));
$match = $_SESSION['captcha']; // the code on the image

// input error checking
if ($name=="") {
$err.= "Please provide your name ";
}
if (!$email) {
$err.= "Please provide your email address ";
}
if ($email) {
if (!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $email)) {
$err.= $email. " is not a valid email address. ";
}
}
if ($phone=="") {
$err.= "Please provide your phone number ";
}
if ($event_title== "") {
$err.= "Please provide the title of the event ";
}
if ($event_date_an d_time=="") {
$err.= "Please provide the date and time of the event ";
}
if ($event_locatio n=="") {
$err.= "Please provide the location of the event ";
}
if ($event_phone_n umber=="") {
$err.= "Please provide a phone number for the venue ";
}
if ($event_price== "") {
$err.= "Please provide the price to attend the event ";
}
if ($event_descrip tion=="") {
$err.= "Please provide a description for the event ";
}
if (!$secure) {
$err.= "No security code entered ";
}
if (($secure!=$mat ch) && ($secure!="")) {
$err.= "Security code mismatch ";
}
//if error free
if ($err=="") {
//Start Pieced in

$MailToAddress = "rik408@yahoo.c om";
$MailSubject = "Club Event Submission";
$MailFromAddres s = ( isset($email) && $email != '') ? $email : 'noReply@myDoma in.com';
//end pieced in

//start pieced in: this may be a major trouble spot, since it is preceeded by another "if" statement
// this array contains the keys to be replaced by better texts

$replace = array ("name" => "Name",
"email" => "Sender's e-mail",
"phone" => "Phone Number",
"event_titl e" => "Event Title",
"event_date_and _time" => "Event Date & Time",
"event_location " => "Event Location",
"event_phone_nu mber" => "Venue Phone Number",
"event_pric e" => "Price to Attend",
"event_descript ion" => "Event Description",
);

// this array holds the key names to exclude from print/email
$exclude = array ("secure", "submit");

if (!is_array($_PO ST))
return;
foreach($_POST as $key => $val) {
// exclude certain key names
if (!in_array($key , $exclude)) {
// if $key in translate table, replace
if (array_key_exis ts($replace, $key))
$Message .= $replace[$key];
// key not in table, use $key
else
$Message .= $key;
$val=stripslash es($val);
$Message .= "= $val\n";
} // end if (array_key

} // end IF (!in_array

} // end FOREACH

mail( "$MailToAddress ", "$MailSubje ct", "$Message", "From: $MailFromAddres s");

header("Locatio n: http://www.metroactive .com/contact/thanks.html");
//end pieced in
exit();
}//end if error free

// end if submit

//PAGE PROCESSING
?>
[/php]

See anything glaringly obvious I might have done?

**ronverdonk** · Nov 26 '06, 05:37 PM

The first message is due to my fault, I switched the 2 parms. Statement must be:
[php] // if $key in translate table, replace
if (array_key_exis ts($key, $replace))[/php]

The second one is because you have already outputted something to the screen. To start, take that header("Locatio n: http://www.metroactive .com/contact/thanks.html"); statement out and see first if the message parm replace and the email send works.
If so, we can look at the header() statement.

Ronald :cool:

**Spycat** · Nov 26 '06, 05:38 PM

PS The form is no longer validating anything :(

**Spycat** · Nov 26 '06, 05:49 PM

Hi Ron,

It sends the results perfectly now both with and without header("Locatio n: included..
The problem is, even if no data is entered (regular or verification number) the data is still processed and sent to me.

**ronverdonk** · Nov 26 '06, 06:35 PM

There are some problems in your code/form:

when an error is found, the code should drop to the form, redisplaying everything that is already keyed in. In your lates code I cannot see that happening. Where is the code going when an error is encountered?

the captcha verification statement yields 'valid' when the text not equal captcha text AND the text not equal empty, so: if I enter nothing the captcha yields VALID.

your form is soon to be the target of (at least) spammers. You have no field cleansing, no content checking and no validity checking.

In short: as long as you fill in your form and make no real errors, it will pass fine (except for its vulnerabilty for spammers and hackers!!). But as soon as you deviate you'll run into problems.

Ronald :cool:

Omitting certain $key / $Val from being sent thru form

Omitting certain $key / $Val from being sent thru form

Comment

Comment

Comment

Comment

Comment

Comment