Jump to content


Photo

Contact Form Help


  • Please log in to reply
1 reply to this topic

#1 X74SY

X74SY
  • New Members
  • Pip
  • Newbie
  • 6 posts

Posted 28 August 2006 - 11:34 AM

Hello,

I installed a php form script in my site a (contact form) It works but I get easily spammed because my visitors can submit the form without typing anything at all! can anyone here please edit the php code to not process the form if all the fields (username/email/subject) hasn't been filled yet?

Here's the script:

process.php
<?php

include "config.php";

$ip=$_SERVER['REMOTE_ADDR'];
$day=date(d);
$month=date(m);
$year=date(Y);
$hour=date(H);
$minute=date(i);
$date="".$month."-".$day."-".$year.", ".$hour.":".$minute."";

$query="INSERT INTO logged_ips_contact_form (ip_id, ip, date) VALUES ('','$ip','$date')"; //Replace logged_ips_table with the name of the table where you installed IP Logger
mysql_query($query);


include("global.inc.php");
$errors=0;
$error="The following errors occured while processing your form input.<ul>";
pt_register('POST','Subject');
pt_register('POST','Username');
pt_register('POST','EmailAddress');
pt_register('POST','Message');
$Message=preg_replace("/(\015\012)|(\015)|(\012)/","&nbsp;<br />", $Message);if($errors==1) echo $error;
else{
$where_form_is="http".($HTTP_SERVER_VARS["HTTPS"]=="on"?"s":"")."://".$SERVER_NAME.strrev(strstr(strrev($PHP_SELF),"/"));
$message="Subject: ".$Subject."
Username: ".$Username."
Email Address: ".$EmailAddress."
Message: ".$Message."
";
$message = stripslashes($message);
mail("EDITMYEMAIL@MYSITE.COM","Support Form",$message,"Support Page");

header("Refresh: 0;url=http://EDITMYSITE.COM");
?><?php 
}
?>

global.inc.php

<?php

function pt_register()
{
  $num_args = func_num_args();
   $vars = array();

   if ($num_args >= 2) {
       $method = strtoupper(func_get_arg(0));

       if (($method != 'SESSION') && ($method != 'GET') && ($method != 'POST') && ($method != 'SERVER') && ($method != 'COOKIE') && ($method != 'ENV')) {
           die('The first argument of pt_register must be one of the following: GET, POST, SESSION, SERVER, COOKIE, or ENV');
     }

       $varname = "HTTP_{$method}_VARS";
      global ${$varname};

       for ($i = 1; $i < $num_args; $i++) {
           $parameter = func_get_arg($i);

           if (isset(${$varname}[$parameter])) {
               global $$parameter;
               $$parameter = ${$varname}[$parameter];
          }

       }

   } else {
       die('You must specify at least two arguments');
   }

}

?>

Sorry, I'm a php newbie :(

Any help would be very much appreciated,
Thank you!

#2 micah1701

micah1701
  • Members
  • PipPipPip
  • Advanced Member
  • 613 posts
  • LocationEllington, CT USA

Posted 28 August 2006 - 02:25 PM

one example of something you could do is:
<?php
//in these lines:
$message = stripslashes($message);
mail("EDITMYEMAIL@MYSITE.COM","Support Form",$message,"Support Page");

//add:
$message = stripslashes($message);

if($message == ""){
 exit("ERROR, form not sent because there was no message");
}else{

mail("EDITMYEMAIL@MYSITE.COM","Support Form",$message,"Support Page");

}

// this way, if they leave the message field blank, the form wont be sent. its a start, but there's a lot more that you could (should) do.


?>

"Confidence in the face of risk."




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users