user input/image generation

[drewbie]

hey guys, im having a problem with backslashes on quotes. when a field contains an apostrophe, the image displays \\' and since the field's value is echoed back into the field, the field displays \'

here is my code that previews the image with data from the previous page, and also allows changes, and submits to itself-

<?
include "../common_db.inc";

?>
<img width="500" height="300" src="coupon_preview.php?title=<? echo $title; ?>&details=<? echo $details; ?>&details2=<? echo $details2; ?>&details3=<? echo $details3; ?>&details4=<? echo $details4; ?>&details5=<? echo $details5; ?>&details6=<? echo $details6; ?>&details7=<? echo $details7; ?>&value=<? echo $value; ?>&disclaimer=<? echo $disclaimer; ?>&disclaimer2=<? echo $disclaimer2; ?>&disclaimer3=<? echo $disclaimer3; ?>&disclaimer4=<? echo $disclaimer4; ?>" alt="" height="50" width="500" border="0">
<form method="post" action="<? echo $PHP_SELF; ?>">
<b>Title</b><br>
<input type="text" name="title" value="<? echo $title; ?>"><br>
<b>Details</b><br>
<input type="text" name="details" value="<? echo $details; ?>"><br>
<input type="text" name="details2" value="<? echo $details2; ?>"><br>
<input type="text" name="details3" value="<? echo $details3; ?>"><br>
<input type="text" name="details4" value="<? echo $details4; ?>"><br>
<input type="text" name="details5" value="<? echo $details5; ?>"><br>
<input type="text" name="details6" value="<? echo $details6; ?>"><br>
<input type="text" name="details7" value="<? echo $details7; ?>"><br>
<b>Value</b><br>
$<input type="text" name="value" value="<? echo $value; ?>" size="7"><br>
<b>Disclaimer</b><br>
<input type="text" name="disclaimer" value="<? echo $disclaimer; ?>"><br>
<input type="text" name="disclaimer2" value="<? echo $disclaimer2; ?>"><br>
<input type="text" name="disclaimer3" value="<? echo $disclaimer3; ?>"><br>
<input type="text" name="disclaimer4" value="<? echo $disclaimer4; ?>"><br>
<input type="submit" value="Preview Coupon">
</form>

and here's coupon_preview.php:

<?

            Header("Content-type:image/jpeg");
            $value = '$' . "$value";
            $im = imagecreatefromjpeg("./images/coupon.jpg");
            $black = imageColorAllocate ($im, 0, 0, 0);
            $white = ImageColorAllocate ($im, 255, 255, 255);
            imagestring ($im, 5, 170, 20, $title, $black);
            imagestring ($im, 4, 170, 50, $details, $black);
            imagestring ($im, 4, 170, 65, $details2, $black);
            imagestring ($im, 4, 170, 80, $details3, $black);
            imagestring ($im, 4, 170, 95, $details4, $black);
            imagestring ($im, 4, 165, 110, $details5, $black);
            imagestring ($im, 4, 140, 125, $details6, $black);
            imagestring ($im, 4, 100, 140, $details7, $black);
            imagestring ($im, 5, 420, 20, $value, $black);
            imagestring ($im, 2, 20, 200, $disclaimer, $black);
            imagestring ($im, 2, 20, 215, $disclaimer2, $black);
            imagestring ($im, 2, 20, 230, $disclaimer3, $black);
            imagestring ($im, 2, 20, 245, $disclaimer4, $black);
            imagejpeg($im);

?>

Thanks for any help, i much appreciate it...

[IceD]

[man]stripslahes[/man], [man]get_magic_quotes_gpc[/man]

[rohithmr]

My best guess would be you have ur magic quotes turned on in ur php.ini. Although there r quite a lot of ways to fix ur problem including editing ur php.ini i wudd suggest u do it thru code for compatibility wit other scripts so in ur coupon_preview.php add the following lines BEFORE what you have right now:

<?php
//Function provided by russ in PHP manual 
function stripslashes_array($arr = array()) {
       $rs = array();
while (list($key,$val) = each($arr)) {
$rs[$key] = stripslashes($val);
}
return $rs;
}

$new = stripslashes_array($_POST);

?>

and then replace rest of your file with:

<?php 
Header("Content-type:image/jpeg"); 
$value = '$' . "$value"; 
$im = imagecreatefromjpeg("./images/coupon.jpg"); 
$black = imageColorAllocate ($im, 0, 0, 0); 
$white = ImageColorAllocate ($im, 255, 255, 255); 
imagestring ($im, 5, 170, 20, $new['title'], $black); 
imagestring ($im, 4, 170, 50, $new['details'], $black); 
imagestring ($im, 4, 170, 65, $new['details2'], $black); 
imagestring ($im, 4, 170, 80, $new['details3'], $black); 
imagestring ($im, 4, 170, 95, $new['details4'], $black); 
imagestring ($im, 4, 165, 110, $new['details5'], $black); 
imagestring ($im, 4, 140, 125, $new['details6'], $black); 
imagestring ($im, 4, 100, 140, $new['details7'], $black); 
imagestring ($im, 5, 420, 20, $new['value'], $black); 
imagestring ($im, 2, 20, 200, $new['disclaimer'], $black); 
imagestring ($im, 2, 20, 215, $new['disclaimer2'], $black); 
imagestring ($im, 2, 20, 230, $new['disclaimer3'], $black); 
imagestring ($im, 2, 20, 245, $new['disclaimer4'], $black); 
imagejpeg($im);
imagedestroy($im); 

?>

I am guessing that you are using PHP ver >=4.1.0, on earlier versions just replace $_POST with $HTTP_POST_VARS

Lemme kno how it turned out

[drewbie]

the strings aren't getting written on top of the image, maybe the array $new[] is empty somehow? here's my code-

create_coupon.php:

<?
include "../common_db.inc";
?>
<form method="post" action="preview.php">
<b>Title</b><br>
<input type="text" name="title" value="<? echo $title; ?>"><br>
<b>Details</b><br>
<input type="text" name="details"><br>
<input type="text" name="details2"><br>
<input type="text" name="details3"><br>
<input type="text" name="details4"><br>
<input type="text" name="details5"><br>
<input type="text" name="details6"><br>
<input type="text" name="details7"><br>
<b>Value</b><br>
$<input type="text" name="value" value="<? echo $value; ?>" size="7"><br>
<b>Disclaimer</b><br>
<input type="text" name="disclaimer"><br>
<input type="text" name="disclaimer2"><br>
<input type="text" name="disclaimer3"><br>
<input type="text" name="disclaimer4"><br>
<input type="submit" value="Preview Coupon">
</form>

preview.php:

<?
include "../common_db.inc";

?>
<img width="500" height="300" src="coupon_preview.php?title=<? echo $POST['title']; ?>&details=<? echo $POST['details']; ?>&details2=<? echo $POST['details2']; ?>&details3=<? echo $POST['details3']; ?>&details4=<? echo $POST['details4']; ?>&details5=<? echo $POST['details5']; ?>&details6=<? echo $POST['details6']; ?>&details7=<? echo $POST['details7']; ?>&value=<? echo $POST['value']; ?>&disclaimer=<? echo $POST['disclaimer']; ?>&disclaimer2=<? echo $POST['disclaimer2']; ?>&disclaimer3=<? echo $POST['disclaimer3']; ?>&disclaimer4=<? echo $POST['disclaimer4']; ?>" alt="" height="50" width="500" border="0">
<form method="post" action="<? echo $PHP_SELF; ?>">
<b>Title</b><br>
<input type="text" name="title" value="<? echo $title; ?>"><br>
<b>Details</b><br>
<input type="text" name="details" value="<? echo $POST['details']; ?>"><br>
<input type="text" name="details2" value="<? echo $POST['details2']; ?>"><br>
<input type="text" name="details3" value="<? echo $POST['details3']; ?>"><br>
<input type="text" name="details4" value="<? echo $POST['details4']; ?>"><br>
<input type="text" name="details5" value="<? echo $POST['details5']; ?>"><br>
<input type="text" name="details6" value="<? echo $POST['details6']; ?>"><br>
<input type="text" name="details7" value="<? echo $POST['details7']; ?>"><br>
<b>Value</b><br>
$<input type="text" name="value" value="<? echo $POST['value']; ?>" size="7"><br>
<b>Disclaimer</b><br>
<input type="text" name="disclaimer" value="<? echo $POST['disclaimer']; ?>"><br>
<input type="text" name="disclaimer2" value="<? echo $POST['disclaimer2']; ?>"><br>
<input type="text" name="disclaimer3" value="<? echo $POST['disclaimer3']; ?>"><br>
<input type="text" name="disclaimer4" value="<? echo $_POST['disclaimer4']; ?>"><br>
<input type="submit" value="Preview Coupon">
</form>

coupon_preview.php:

<?php
//Function provided by russ in PHP manual
function stripslashes_array($arr = array()) {
$rs = array();
while (list($key,$val) = each($arr)) {
$rs[$key] = stripslashes($val);
}
return $rs;
}

$new = stripslashes_array($_POST);

Header("Content-type:image/jpeg");
$value = '$' . "$value";
$im = imagecreatefromjpeg("./images/coupon.jpg");
$black = imageColorallocate ($im, 0, 0, 0);
$white = ImageColorAllocate ($im, 255, 255, 255);
imagestring ($im, 5, 170, 20, $new['title'], $black);
imagestring ($im, 4, 170, 50, $new['details'], $black);
imagestring ($im, 4, 170, 65, $new['details2'], $black);
imagestring ($im, 4, 170, 80, $new['details3'], $black);
imagestring ($im, 4, 170, 95, $new['details4'], $black);
imagestring ($im, 4, 165, 110, $new['details5'], $black);
imagestring ($im, 4, 140, 125, $new['details6'], $black);
imagestring ($im, 4, 100, 140, $new['details7'], $black);
imagestring ($im, 5, 420, 20, $new['value'], $black);
imagestring ($im, 2, 20, 200, $new['disclaimer'], $black);
imagestring ($im, 2, 20, 215, $new['disclaimer2'], $black);
imagestring ($im, 2, 20, 230, $new['disclaimer3'], $black);
imagestring ($im, 2, 20, 245, $new['disclaimer4'], $black);
imagejpeg($im);
imagedestroy($im);

?>

Thanks for the help guys

[rohithmr]

haha since I am bored beyond ur WILDEST imagination, i decieded to write this script. Im attaching all 3 files. TEll me if u dun understand y i did sumtin OR if the script is not working. As of now it is FULLY functional on a Apache2 PHP 4.3.0 win32 server.

[drewbie]

you fuckin rock man! I got it to the point where i could enter any characters except & # and +, but ur code is much neater, i will learn from it. thanks! hey i notice when u put a + it shows up as a blank space, no big deal, anyone who wants a plus sign can fuck off, hehe, but any way to fix it? thanks again!

[rohithmr]

aii thas pretty simple to achieve. Its not letting u enter #,&and + cuz they have special meaning in URLs ans since I am using urlencode to pass the variables its causing problems. TO fix these fist open up preview.php and change the function format_array to look like this:

function format_array($arr = array()) {
$rs = array(); 
while (list($key,$val) = each($arr)) { 
$rs[0][$key] = str_replace("&",'&',stripslashes($val));
$rs[0][$key] = str_replace("#","#",$rs[0][$key]);
$rs[0][$key] = str_replace("\"",""",$rs[0][$key]);
$rs[0][$key] = str_replace("+","+",$rs[0][$key]);
$rs[$key] = str_replace("+","[[:plus:]]",stripslashes($val));
$rs[$key] = urlencode($rs[$key]);
}
return $rs; 
} 

now open up coupon_preview.php and change the function stripslashes_array to look like this:

function stripslashes_array($arr = array()) {
$rs = array();
while (list($key,$val) = each($arr)) { 
$rs[$key] = urldecode($val);
$rs[$key] = stripslashes($rs[$key]);
$rs[$key] = str_replace("[[:plus:]]",'+',$rs[$key]);
}
return $rs; 
} 

Now everything hsudd work as expected. Now to explain what exactly i did, I changed & and # to their rexpective HTML code(&amp;amp; and &amp;#35; respectively). Since this approach does not work with the '+' sign I jus made up a new string that represents the +([[:plus:]]). Then on the coupon_preview.php, i just replaced my made-up symbol with an actual '+'. And there u have it.

I jus woke up, so there mite b a better way to do this, but i jus cant think rite now...lol

[drewbie]

damn dude, i need to clone you and look over my shoulder all day while i code.😃 can you help me with my next problem? i wanted to get rid of all the extra text fields, and just use one <textarea> field. so i need to have gd detect a line break, and start a new imagestring ya know? is there an easy way to do this, or do i need to code it? thanks man!

[drewbie]

AWESOME! anyone that's having the same problem take a look at
they have added some nice feature's to their word wrap function. 🙂http://www.php.net/manual/en/function.imagestring.php