Jsp, Tomcat, J2Ee, Hibernate Programming, Http Web Server Blog » Blog Archive » PHP SOLUTIONS: DYNAMIC (Business web hosting) WEB DESIGN MADE EASY 3.

PHP SOLUTIONS: DYNAMIC (Business web hosting) WEB DESIGN MADE EASY 3.

PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY 3. The comments text area needs to be handled slightly differently because tags don t have a value attribute. You place the PHP block between the opening and closing tags of the text area like this (new code is shown in bold): <textarea name="comments" id="comments" cols="60" rows="8"><?php if (isset($missing)) { echo htmlentities($_POST['comments']); } ?> It s important to position the opening and closing PHP tags right up against the tags. If you don t, you ll get unwanted whitespace inside the text area. 4. Save contact.php and test the page in a browser. If any required fields are omitted, the form displays the original content along with any error messages. However, if the form is correctly filled in, the email is sent, an acknowledgment is displayed, and the input fields are cleared. You can check your code with contact07.php. Using this technique prevents a form reset button from clearing any fields that have been changed by the PHP script. This is a minor inconvenience in comparison with the greater usability offered by preserving existing content when an incomplete form is submitted. Filtering out potential attacks A particularly nasty exploit known as email header injection emerged in mid-2005. It seeks to turn online forms into spam relays. A simple way of preventing this is to look for the strings Content-Type: , Cc: , and Bcc: , as these are email headers that the attacker injects into your script in an attempt to trick it into sending HTML email with copies to many people. If you detect any of these strings in user input, it s a pretty safe bet that you re the target of an attack, so you should block the message. An innocent message may also be blocked, but the advantages of stopping an attack outweigh that small risk. PHP Solution 5-5: Blocking emails that contain specific phrases Continue working with the same page. Alternatively, use contact07.php from the download files. 1. As you know, PHP conditional statements rely on a true/false test to determine whether to execute a section of code. So the way to filter out suspect phrases is to create a Boolean variable that is switched to true as soon as one of those phrases is detected. The detection is done using a search pattern or regular expression. Insert the code for both of these just above the section that processes the $_POST variables: // create empty array for any missing fields $missing = array(); <br />Go visit our <a href="http://tomcat.jspwebsitehosting.com">java server pages</a> services for a reliable, lowcost webhost to satisfy all your needs. </p> <p class="postmetadata alt"> <small> This entry was posted on Monday, December 17th, 2007 at 9:22 pm and is filed under <a href="http://mysql5.armadillowebhosting.com/category/mysql5/" title="View all posts in MYSQL5" rel="category tag">MYSQL5</a>. You can follow any responses to this entry through the <a href='http://mysql5.armadillowebhosting.com/mysql5/php-solutions-dynamic-business-web-hosting-web-design-made-easy-3/feed/'>RSS 2.0</a> feed. You can <a href="#respond">leave a response</a>, or <a href="http://mysql5.armadillowebhosting.com/mysql5/php-solutions-dynamic-business-web-hosting-web-design-made-easy-3/trackback/" rel="trackback">trackback</a> from your own site. </small> </p> </div> </div>   <h3 id="respond">Leave a Reply</h3> <form action="http://mysql5.armadillowebhosting.com/wp-comments-post.php" method="post" id="commentform"> <p><input type="text" name="author" id="author" value="" size="22" tabindex="1" /> <label for="author"><small>Name (required)</small></label></p> <p><input type="text" name="email" id="email" value="" size="22" tabindex="2" /> <label for="email"><small>Mail (will not be published) (required)</small></label></p> <p><input type="text" name="url" id="url" value="" size="22" tabindex="3" /> <label for="url"><small>Website</small></label></p>  <p><textarea name="comment" id="comment" cols="100%" rows="10" tabindex="4">