mat420

im trying to block metacharacters due to XSS

a vulnerbility scanner i used said to filter metacharacters in my submission form is this enough? thank u <?php $string = "This is some text and numbers 12345 and symbols !£$%^&"; $new_string = ereg_replace("[^A-Za-z0-9]", "", $string); echo $new_string ?>

no problem . thanks so much for ur help. anyone else please? ehh admins are gonna get > if i repost this but idk if ima get answers now with how many pages we've went into this.

are u trying to do like an iframe type thing but use php overflow instead? if so private msg me i can help you. i just did this.

-sigh so not only did that not work but somehow in this process ive managed to break my once request call back form. haha fml. i put it back to the messy code btw because for some reason ur code always seems to be missing my PHP error ..label...thing. was afraid something else might be missing too. just fyi whatever ur browsing source codes with is leaving out code...idk if its cuz its php or what.

i think i got rid of all the white space right after posting that lst msg here im not using an editor btw, notepad ++ and notepad/wordpad i can, make, no, sense, of this. i think the key factor here is that when i get rid of the "table" that the space goes away, that doesnt answer the question for u? ugh i really dont feel like learning how else i can align everything right just because of a stupid space. everything i try to do with this site has already become an hour long process per stupid feature/fix :/ src="reqcallback.swf" bgcolor="#FFFFFF" quality="high" seamlesstabbing="false" allowscriptaccess="samedomain" wmode="transparent" > <noembed> </noembed> </embed> </object></h2> <div class="box_image_wrapper"> </div> <table style="width:250px"> <form method="POST" action="<?php echo $SERVER['SCRIPT_URL']?>#form"> <tbody><tr><td valign="top" style="width:115px;"> <label for="name">Phone #:</label> </td> <td valign="top" style="width: 115px;"> <input type="text" name="email1" id="email1" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email1'])) { echo $_POST['email1']; } ?>" />

lol!! i seen those 3 brs in firebug, i dont see them in my code though haha. im going to look again, i dont think those three br's are there though.

nah i said thanks cuz u tried and didnt realize the actual problem. looking at the picture u posted, im not sure u understand my problem, probably my fault for not putting a picture. the rectangle (aka empty space) is what im trying to get rid of. see picture attached pelase. [attachment deleted by admin]

anyone else please? dont know if im gonna get replied now that were on the 2nd page. trying firebug now, will post back if i succeed but i dbt it.

thx

space isnt going anywhere. thats a whole table underneith where the space is that im talking about, u know i mean the space bteween request call back (flash) and phone# (textfield) right? thanks x999 <table style="width:250px"> <tbody><tr><td valign="top" style="width:145px;"> <label for="Message">Enter letters below:</label> </td> <td valign="top"><input name="captcha2" size="8"/> </td> </tr><br> <tr> <td valign="top"><span class="class2"> <label for="Message"><a href="<?php echo captchaWavUrl()?>">Listen To This</a> / <a href="javascript:location.reload(true);">Refresh</a></label></span> </td> </tr> <tr> <td colspan="2" style="text-align:center"> <img style="vertical-align: middle" src="<?php echo captchaImgUrl()?>"> <input type="submit" name="send2" value="Submit"/> <font color="red"><b><?php if (isset($errors2)) { foreach ($errors2 as $error) { echo("<p>$error<p>\n"); } } ?></font></b></p> </td> </tr> </tbody> </table> </form>

apologize if that sounded rude, i didnt mean it to. i just have no idea what im not doing correctly.

can you tell me what im missing please because i dont see it. i added width px 115 to every td. how is adjusting the tables td's width going to eliminate that gap btw please? <p><table width="250px" border="0"> <form method="POST" action="<?php echo $SERVER['SCRIPT_URL']?>#form"> </tr> <tr> <td valign="top" style="width: 115px;"> <label for="name">Phone #:</label> </td> <td valign="top" style="width: 115px;"> <input type="text" name="email1" id="email1" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email1'])) { echo $_POST['email1']; } ?>" /> </td> </tr><br> <tr> <td valign="top" style="width: 115px;"> <label for="phone">Verify Phone #:</label> </td> <td valign="top" style="width: 115px;"> <input type="text" name="email2" id="email2" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email2'])) { echo $_POST['email2']; } ?>" /> </td> </tr><br><br></table>

ya i got u. idc what its called as long as it works thanks again.

<td valign="top" style="width: 115px;"> wait isnt that wrong? style in a td < > ? hm idk crap about code ;/

<p><table width="250px" border="0"> <form method="POST" action="<?php echo $SERVER['SCRIPT_URL']?>#form"> </tr> <tr> <td valign="top" style="width: 115px;"> <label for="name">Phone #:</label> </td> <td valign="top"> <input type="text" name="email1" id="email1" MAXLENGTH=12 size=16 value="<?php if (!empty($_POST['email1'])) { echo $_POST['email1']; } ?>" /> </td> </tr><br> <tr> <td valign="top" style="width: 115px;"> <label for="phone">Verify Phone #:</label> </td> <td valign="top">

as soon as i add <table width="250px" border="0"> the big space starts again.

i did do only what u said, reuploaded and it wasnt any different. i then continued to mess around with it tho, which may be what u saw.

does appear to be the table thats the problem though, i got rid of <table width="250px" border="0"> and the gap is gone. hm. not the text boxes arent aligned though

what else would i use? i added widths, theres still a big gap.

I cant manage to get rid of this empty space between Request Call Back and the stupid request call back form! http://www.doctorpcrepair.com/contact.php Anyone have any idea? I was going to put this in html but I figure its probably the CSS/externally stored CSS calling messing things up. thanks a million

i love you. worked perfect. correct me if im wrong but all i did was add #form to the end of the form action (but within the quotes like u did) and then put <a id="form"></a> at the very end/bottom of the page.

sorry i know nothing about php you lost me at #form

Is there a code I can put with each of these errors so that, on error, the page reloads back to the bottom of the page? When you enter the wrong info, the page already reloads but it reloads to the top of the page. People who didnt correctly information into the webpage may not see that they're receiving an error if it doesnt scroll back down. I attempted to put the error at the to of the page but I couldnt find a good spot. I thought about doing an error message box but I'm not sure thats the best method Anyway heres the code, thanks a lot. <?php if ($_POST['send']) { $errors = array(); if ($_POST['captcha'] != $_SESSION['captchacode']) { $errors[] = "You didn't enter the correct letters!"; <-------------ID LIKE TO PUT A CODE HERE AND } if (empty($_POST['email'])) { $errors[] = "Please enter an e-mail address"; <-----------------HERE TO MAKE THE PAGE GO TO THE BOTTOM WHEN IT REFRESHED (IT REFRESHES UPON EVERY IMPROPERLY FILLED OUT FORM } else if (!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $_POST['email'])) { $errors[] = 'Please enter a VALID e-mail address'; } if (!count($errors)) { // IMPORTANT: If you don't call this the // user will keep getting the SAME code! captchaDone();

problem completely solved. thanks all.