[PHP/MySQL] Web Form

[Mike]

I don't know if this'd be in PHP or MySQL, or both.

I need a form to put on a web, where there are questions, and a empty box right under it, where they type their answer, and at the very bottom, there's a "Submit" button. Once you click the submit button, I want the form to be emailed to my email.

Here's the format of the form...

Tutorial Title:
[Blank Box Here]
 
Tutorial Difficulty:
[Blank Box Here]
 
Who Made Tutorial:
[Blank Box Here]
 
Tutorial Version (474 or 508):
[Blank Box Here]
 
Tutorial Itself:
[Big Blank Box Here]
 
[center]Submit Button[/center]

Can someone create that for me?

When clicked submit, I want it to be emailed to [email protected], in the correct format as the questions are.

 

[HotelUnderSeige]

<html><body>
<form  method="post"> 
From: <input name="from" type="text" /> 
Subject: <input name="subject" type="text" />
Body <input name="body" type="text" />  
<input type="Mail" />
</form>
</body></html>
<?php
$from =$_POST['from'];
$subject =$_POST['subject'];
$body =$_POST['body'];

mail(youremail,$subject,$body,$from) or die;
echo "email sent";
?>

 

[Mike]

So, what do I edit? Can you make it to my format?

 

[HotelUnderSeige]

<html><body>
<form  method="post"> 
From: <input name="from" type="text" /> 
Tutorial Title: <input name="subject" type="text" />
<textarea rows="50" cols="50" wrap="physical" name="BODY">

 
Tutorial Difficulty:

 
Who Made Tutorial:

 
Tutorial Version (474 or 508):

 
Tutorial Itself:
</text>
 

<input type="Mail" />
</form>
</body></html>
<?php
$from =$_POST['from'];
$subject =$_POST['subject'];
$body =$_POST['body'];
 
mail([email protected],$subject,$body,$from) or die;
echo "email sent";
?>

 

[Mike]

Thanks man.

 

[HotelUnderSeige]

Thanks man.

you are welcome telll me if it works though

 

[Mike]

http://runescapeproject.com/submit.php

Error?

There isn't even 29 lines... :S

 

[-fedexer-]

Here's what i threw together mate:

Tutorial.php
(this is the page people view)

<?php session_start(); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<?php echo $_SESSION['error']; ?>
<form id="Tutorial" name="Tutorial" method="post" action="./send.php">
<br/>
Tutorial Title:
<br />
<input name="Title" type="text" size="100" maxlength="200" />
<br />
Tutorial Difficulty:
<br/>

<input name="Difficult" type="text" size="30" maxlength="10" />
 <br />
Who Made Tutorial:
<br />
<input name="Author" type="text" size="100" maxlength="100" />
<br /> 
Tutorial Version (474 or 508):
<br/>
<input name="Version" type="text" size="30" maxlength="3" />
 <br />
Tutorial Itself:
<br />
<textarea style="height:300px;" name="Tutorialcont" cols="100"></textarea>
<br/>

<br />
<input name="submit" type="submit" value="Submit" />
</form>
</body>
</html>

send.php:

<?php
session_start();
$_SESSION['error'] = "";
if(isset($_POST['Title']) && isset($_POST['Difficult']) && isset($_POST['Author']) && isset($_POST['Version']) && isset($_POST['Tutorialcont'])){
if($_POST['Version'] != "474" || $_POST['Version'] != "508"){
$_SESSION['error'] = "The version number must be either 474 or 508";
header("Location: ./tutorial.php");
}


$_SESSION['Title'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Title'] : addslashes($_POST['Title'])))));
$_SESSION['Difficult'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Difficult'] : addslashes($_POST['Difficult'])))));
$_SESSION['Author'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Author'] : addslashes($_POST['Author'])))));
$_SESSION['Version'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Version'] : addslashes($_POST['Version'])))));
$_SESSION['Tutorialcont'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Tutorialcont'] : addslashes($_POST['Tutorialcont'])))));

$message = "Title: \n".$_SESSION['Title']."";
$message .= "\nDifficulty: ".$_SESSION['Difficult']."";
$message .= "\nAuthor: ".$_SESSION['Author']."";
$message .= "\nVersion: ".$_SESSION['Version']."";
$message .= "\nContent: ".$_SESSION['Tutorialcont']."";
@mail("[email protected]","Tutorial - ".$title, $message, "From: -fedexer-'s script lol");
$_SESSION['error'] = "Tutorial Sent, thank you for your submission";
header("Location: ./tutorial.php");
}else{
$_SESSION['error'] = "All of the fields MUST be filled in!";
header("Location: ./tutorial.php");
}

?>

Not tested it, but hopefully it works *shurgs*

 

[Mike]

omg, thanks man.

Works great.

 

[-fedexer-]

More than welcome, and suprised it worked first time round

Couldn't test it cause i have no mail server hehe.

 

[Mike]

nvm, found bug

msged you about it

 

[-fedexer-]

Yeah well you now have the working code, i don't suggest anyone uses the one above, it's faulty ^^

 

[hoopz026]

therez a book i was readin how to make ur forum and stuff, ill through screens and u can read it, ill post them l8ter cuz im going to bed.

 

[foxx]

Here's what i threw together mate:

Tutorial.php
(this is the page people view)

<?php session_start(); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<?php echo $_SESSION['error']; ?>
<form id="Tutorial" name="Tutorial" method="post" action="./send.php">
<br/>
Tutorial Title:
<br />
<input name="Title" type="text" size="100" maxlength="200" />
<br />
Tutorial Difficulty:
<br/>

<input name="Difficult" type="text" size="30" maxlength="10" />
 <br />
Who Made Tutorial:
<br />
<input name="Author" type="text" size="100" maxlength="100" />
<br /> 
Tutorial Version (474 or 508):
<br/>
<input name="Version" type="text" size="30" maxlength="3" />
 <br />
Tutorial Itself:
<br />
<textarea style="height:300px;" name="Tutorialcont" cols="100"></textarea>
<br/>

<br />
<input name="submit" type="submit" value="Submit" />
</form>
</body>
</html>

send.php:

<?php
session_start();
$_SESSION['error'] = "";
if(isset($_POST['Title']) && isset($_POST['Difficult']) && isset($_POST['Author']) && isset($_POST['Version']) && isset($_POST['Tutorialcont'])){
if($_POST['Version'] != "474" || $_POST['Version'] != "508"){
$_SESSION['error'] = "The version number must be either 474 or 508";
header("Location: ./tutorial.php");
}


$_SESSION['Title'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Title'] : addslashes($_POST['Title'])))));
$_SESSION['Difficult'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Difficult'] : addslashes($_POST['Difficult'])))));
$_SESSION['Author'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Author'] : addslashes($_POST['Author'])))));
$_SESSION['Version'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Version'] : addslashes($_POST['Version'])))));
$_SESSION['Tutorialcont'] = trim(strip_tags(mysql_real_escape_string(htmlspecialchars((get_magic_quotes_gpc()) ? $_POST['Tutorialcont'] : addslashes($_POST['Tutorialcont'])))));

$message = "Title: \n".$_SESSION['Title']."";
$message .= "\nDifficulty: ".$_SESSION['Difficult']."";
$message .= "\nAuthor: ".$_SESSION['Author']."";
$message .= "\nVersion: ".$_SESSION['Version']."";
$message .= "\nContent: ".$_SESSION['Tutorialcont']."";
@mail("[email protected]","Tutorial - ".$title, $message, "From: -fedexer-'s script lol");
$_SESSION['error'] = "Tutorial Sent, thank you for your submission";
header("Location: ./tutorial.php");
}else{
$_SESSION['error'] = "All of the fields MUST be filled in!";
header("Location: ./tutorial.php");
}

?>

Not tested it, but hopefully it works *shurgs*

Why would you want to strip tags etc?

 

[EliteGM]

Safety, Security.. etc.
So nobody can do like:

<script>alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');alert('spam');</script>

And wreck your website.

 

[foxx]

It's just sending emails, it wouldn't wreck nothing, and for the script above htmlspecialchars would be just enough.

 

[-fedexer-]

Well thats what ended up being the problem with the script Foxx, was the security, but then i recalled that it was only for email and so it didn't matter ^^

Strangely though, with it, the variables would not have anything in them :S

 

[Mike]

Okay... Now I have another question

Tutorial.php code:

<?php session_start(); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<?php echo $_SESSION['error']; ?>
<form id="Tutorial" name="Tutorial" method="post" action="./send.php">
<br/>
Tutorial Title:
<br />
<input name="Title" type="text" size="100" maxlength="200" />
<br />
Tutorial Difficulty:
<br/>

<input name="Difficult" type="text" size="30" maxlength="10" />
 <br />
Who Made Tutorial:
<br />
<input name="Author" type="text" size="100" maxlength="100" />
<br /> 
Tutorial Version (474 or 508):
<br/>
<input name="Version" type="text" size="30" maxlength="3" />
 <br />
Tutorial Itself:
<br />
<textarea style="height:300px;" name="Tutorialcont" cols="100"></textarea>
<br/>

<br />
<input name="submit" type="submit" value="Submit" />
</form>
</body>
</html>

I need to change the box sizes, so the width is 500, how do I do that?

Also, could you edit the background colour to #f4f4f4 while you're at it?

 

[Mike]

Never mind, got it

<?php session_start(); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
<?php echo $_SESSION['error']; ?>
<form id="Tutorial" name="Tutorial" method="post" action="./send.php">
<br/>
Tutorial Title:
<br />
<input name="Title" type="text" size="50" maxlength="200" />
<br />
Tutorial Difficulty:
<br/>

<input name="Difficult" type="text" size="50" maxlength="10" />
 <br />
Who Made Tutorial:
<br />
<input name="Author" type="text" size="50" maxlength="100" />
<br /> 
Tutorial Version (474 or 508):
<br/>
<input name="Version" type="text" size="50" maxlength="3" />
 <br />
Tutorial Itself:
<br />
<textarea style="height:300px;" name="Tutorialcont" cols="50"></textarea>
<br/>

<br />
<input name="submit" type="submit" value="Submit" />
</form>
</body>
</html>

 

[andrew951]

you should put a simple captcha on. i could like mail this to you like a billion times. haha.