[Resolved] PHP file in a <textarea>

csousley

I'm trying to make a little script that will let me edit my other php scripts through a browser in a <textarea>. Here is the important stuff I have so far:

if (file_exists($filepath)) {
	$fp2 = fopen($filepath, "r");
	$ABody = fgets($fp2, 100000);
	fclose($fp2);
	//$ABody = addslashes($ABody);
}

... and then ...

<textarea name="body" cols="70" rows="25"><?=$ABody?></textarea>

I tried adding slashes but that didn't seem to do anything. My result is simply:

And that's it, even though I'm trying to open a 20 line php script.

Any thoughts? Thanks

ralphuk100

view the html source.

however - at a guess. You are opening a php file inside php tags, thus you would have 2 x <? . might not be that though, its too late to think now :S will be something simple though as I have no probs opening php files into textareas.

Hoangsta

let me see your sql statement to retrieve the information...

once you get the sql working...

ex.

SELECT fields FROM table
WHERE field like ="field";

then after that...

$about = $_POST['about']

the $about is the <textarea>'s value..in your case it was something like $about

that should do it.

Weedpacket

Wouldn't it be simpler just to use [man]htmlspecialchars[/man] on the stuff being echoed in the textarea?

pjleonhardt

<textarea><? echo $ABody; ?></textarea>

Hoangsta

<textarea name="body" cols="70" rows="25"><?=$ABody?></textarea>

into


<textarea name="body" cols="70" rows="25">$ABody</textarea>

csousley

Still not quite getting it. Maybe there's something wrong in the code I didn't post. I'll give some more detail. Here is the file, martini.conf, I'm trying to get into the textarea:

<?
$var1 = 'apple';
$var2 = 'sauce';
$var3 = 'is good';
?>

Then the file trying to load it into the textarea:

<?
include("includes/standard_functions.php");

if ($file == 'martini.conf') {
	$filepath = "config/".$file;
}else{
	$filepath = "../common/".$file;
}

if (isset($submit)) {
	unlink ($filepath);
	$fp2 = fopen($filepath, "w");
	fwrite($fp2, $body);
	fclose($fp2);
}

if (file_exists($filepath)) {
	$fp2 = fopen($filepath, "r");
	$ABody = fgets($fp2, 100000);
	fclose($fp2);
}
?>
<html>
<head>
<title>Martini3 Version <?=$mversion?> (PHP/MySQL)</title>
<link rel="stylesheet" type="text/css" href="includes/style.css">
</head>

<body bgcolor="#FFFFFF" class="body">
<textarea name="body" cols="70" rows="25"><?=$ABody?></textarea>

Sorry this is dragging on so long guys, thanks for the help.

Shrike

Originally posted by csousley
Still not quite getting it. Maybe there's something wrong in the code I didn't post. I'll give some more detail. Here is the file, martini.conf, I'm trying to get into the textarea:

<?
$var1 = 'apple';
$var2 = 'sauce';
$var3 = 'is good';
?>

Then the file trying to load it into the textarea:

<?
include("includes/standard_functions.php");

if ($file == 'martini.conf') {
	$filepath = "config/".$file;
}else{
	$filepath = "../common/".$file;
}

if (isset($submit)) {
                $_POST['body'] = urldecode($_POST['body']); // Try to retreive _something_ valid
	//unlink ($filepath); // No, next line truncates or creates anyway
	$fp2 = fopen($filepath, "w+");
	fputs($fp2, $body); // dunno why, i always use fputs
	@fclose($fp2); // supress errors
                exit;// Only if you dont wanna display the form again
}

if (file_exists($filepath)) {
	$fp2 = fopen($filepath, "r");
	//$ABody = fgets($fp2, 100000); // Nooo!
	$ABody = fgets($fp2, filesize($filepath)); // Yes
	@fclose($fp2); // suppress errors
}
?>
<html>
<head>
<title>Martini3 Version <?php echo $mversion ?> (PHP/MySQL)</title>
<link rel="stylesheet" type="text/css" href="includes/style.css">
</head>

<body bgcolor="#FFFFFF" class="body">
<textarea name="body" cols="70" rows="25"><?php echo  $ABody ?></textarea>

Sorry this is dragging on so long guys, thanks for the help. [/B]

Some code critique 😉

csousley

Thanks for the code critique Shrike. It always helps to see your code through someone else. I really like this line:
$ABody = fgets($fp2, filesize($filepath));
I was never happy with it before. Pretty nice now though!

Still not able to load the file into the textarea, anyone have any thoughts.

Weedpacket

Originally posted by csousley
Still not able to load the file into the textarea, anyone have any thoughts.

How about this one?

Minots

as "Weedpacket" said before:
use the php-function htmlspecialchars and your current problem was resolved.

you can also try a look at w3c also an learn to understand
why | wich-->character { doesn´t work};
http://www.w3.org/TR/html401/struct/text.html

hmmm, sounds good or not...?
in case of not: i´ve done a sample script for you.
show | grab it, if you like. 😉

Demonstration of my Kannibal-Script:
http://www.d0x.de/2/file-in-textbox.php

csousley

Well, we got it. Thank you all. A combination of my old script, Minots sample script, and everyones input and it works. Not sure exactly what the problem was, I had tried all the suggestions, just not with the right combination I guess. Here is the page in working order if anyone cares.

<?
include("includes/standard_functions.php");

if ($file == 'martini.conf') {
	$filepath = "config/martini.conf";
}else{
	$filepath = "../common/".$file;
}

if (isset($submit)) {
	$fp2 = fopen($filepath, "w+");
	fwrite($fp2, $body);
	@fclose($fp2);
}
?>
<html>
<head>
<title>Martini3 Version <?=$mversion?> (PHP/MySQL)</title>
<link rel="stylesheet" type="text/css" href="includes/style.css">
</head>

<body bgcolor="#FFFFFF" class="body">
<? include("includes/pop_320h_400w.php"); ?>
<p>
<center>
<? include("includes/menu.php"); ?>
<p>
<form action="common_files.php" method="post">
<table border="1" width="550" cellspacing="0" cellpadding="2" bordercolor="#000000">
<tr><td bgcolor="#6699CC" class="body_big" colspan="2"><b>Common File Edit</b></td></tr>
<tr>
<td bgcolor="#DDDDDD" class="body_big" width="130" nowrap>File Path: </td>
<td><?=$filepath?></td>
</tr><tr>
<td bgcolor="#DDDDDD" class="body_big" valign="top">Body: </td>

<?
$textarea_content = show_file_content($filepath);

function show_file_content($gimme_file){
	if (file_exists($gimme_file)){
		$file_to_leech = fopen ($gimme_file, "rb");
		$size_of_file = filesize ($gimme_file);
		$unsafe_filedata = fread ($file_to_leech, $size_of_file);
		fclose($file_to_leech);
		$file_content = htmlspecialchars($unsafe_filedata);
		return ($file_content);
		exit;
	} else {
		$file_content = "Could not find file!!!";
		return ($file_content);
	}
}

echo "<td><textarea name=\"body\" cols=\"80\" rows=\"30\">";
echo "$textarea_content"
	."</textarea></td>";
?>
</tr>
</table>
<p>
<input type="hidden" name="file" value="<?=$file?>">
<input type="submit" name="submit" value="Update Common File"><p>
</form>

Thanks again everyone!