[Resolved] user confirmation > advice please

[owaring]

I'm after a suitable method to ask a user to confirm an action, depending on a if condition.

I figured i could approach this from a couple of angles.

Either have a java dialoge pop up to ask for confimation, or a new page to ask for confirmation. <or another method of better>

The choices given should either continue from after the if condition if the answer in "yes" or return to previous page if "no"

Not really sure where to start on this, so any knocks in the right direction would be cool.😃

Regards,

Ollie

[Roger_Ramjet]

use javascript. not going to look very clever to the user if they click delete and wait for a reload from the server just to be saked to confirm the delete then watch another call to the server. it would look extremely amateur to me.

[owaring]

Sorry, i'll be a bit more specific.....

The script will be proccessing data from an input form to add a person to the db.

The is an if statement that checks if the first and last names being entered match any already on the db.

I need to allow duplicate names, but i want this pop up to be a fail safe in case a dupe has been entered by mistake.

The pop would ask,
"Joe Bloggs already exists on the db, do you wish to continue?"

"Yes" will continue in script and add data to db.

"No" will return to form.

[Roger_Ramjet]

Well then you will have to send a page back to the client with the question. Include a text input for them to edit the name if they want to change it. If that applies in this case.

[owaring]

ok, so i create a page called dupe.php

the code to send them back to the form is easy enough, but how do i send them back to a mid point in the script??

also can i carry the variables form the first script with me to the second? how?

or

instead of having a seperate page for the dupe notice, could it not be displayed as part of the if statment?? and that makes continuing the script easier surely.

open to any other ideas too

[Roger_Ramjet]

Yep. A general purpose page is usually the way to go. Simple if (isset($_POST['submit'])) { blah }
does the trick. If they.ve pressed the submit button then process the form data, else display the form.

[owaring]

mmm, could do with this being spekt out im afraid :bemused:

i have this code to check if name matches an exsiting entry:

if($row == TRUE)	
{

/*
HERE IS WHERE I ASK USER YES OR NO
YES CONTINUES REST OF SCRIPT
NO RETURNS TO add_int.php
*/

}

//REST OF SCRIPT

sorry but i am a noob!! 😃

[Roger_Ramjet]

Post the whole script. If it is big then send it as an attachment. Be easier to do if I have the script, otherwise I'm just guessing.

[owaring]

include("../include/functions.php");

accessdb();

foreach ($_POST as $field => $value)

//TIDY INPUT TEXT
tidyname($firstname);
tidyname($lastname);
tidyname($nickname);

//CHECK FOR DUPE USING FIRST AND LAST NAMES
$dupequery = "SELECT * FROM crew WHERE firstname='$firstname' AND lastname='$lastname'";
		 $result = mysql_query($dupequery)
			or die ("Couldn't execute id query.");
		 $row = mysql_fetch_array($result);

if($row == TRUE)     

{ 

/***********************************
** HERE IS WHERE I ASK USER YES OR NO 
** YES CONTINUES REST OF SCRIPT           

** NO RETURNS TO add_int.php                 

**                         

***********************************/ 

} 
//CREATE UNIQUE USER ID
function checkid($var)
{$idquery = "SELECT * FROM crew WHERE id='$var'";
		 $result = mysql_query($idquery)
			or die ("Couldn't execute id query.");
		 $row = mysql_fetch_array($result);
		 return $row;}

$formid = substr($firstname,0,3).substr($lastname,0,3);

if(checkid($formid) == TRUE)//IF MATCH IN DB ADD 1 UNTIL NO MATCH
	{
	$n = substr($formid,0,6);
	$int = intVal(substr($formid,6));

	do	{
		$int ++;
		$newid = $n.$int;
		}
		while (checkid($newid) == TRUE);

$id = $newid;  
}
else
{$id = $formid;}//IF NO MATCH OF ID IN DB, ID = FORMID

$tel = preg_replace("/[a-z]+/si", "", $tel); $tel = str_replace("+","", $tel); $tel = ereg_replace(" ","", $tel);

$rate = ereg_replace("[ )(.-]","",$rate);





//INSERT FREELANCER INTO NEW ROW ON CREW TABLE THEN FIELD TABLE
$crewquery = "INSERT INTO crew 					
		  VALUES ('$id','$firstname','$lastname','$nickname','$tel','$drive','$rate','$score','$notes')";

mysql_query($crewquery)		 	
or die ("Writing to crew table failed");

// SELECT DATA FROM FIELDS AND PUT IN ARRAY $FIELDS
$fieldquery = "INSERT INTO field 					
				 VALUES ('$id','$sound','$video','$lighting','$data','$projection','$racks','$vision','$camera','$set','$rigger','$driver','$graphics')";

mysql_query($fieldquery)
or die ("Writing to field table failed");


$firstname = ucwords($firstname);
$lastname = ucwords($lastname);

echo $firstname." ".$lastname.
	 " was suceessfully added to Willow database.<br> 
	 You can review all details for ".
	 $firstname." ".$lastname.
	 " <a href = 'newpage.php'>here</a> or <a href = 'add.php'>add</a> another freelancer";

?>

[leatherback]

Hi,
As suggested before: You have the first form subitted to a processing script. The script notices that that person already exists in the database. So you want the person to confirm the inserted data.

Grab the variables which were submitten for each form element. I suggest to do some basic testing for malicious code which people might want to insert:
a script tu use:

function checkvar($var, $default, $type)  // Test wether a variable meets requirements
  {
  switch($type)
   {
    case 1:  // Variable should be an integer code
      if($var == '')
       {
       $var = $default;
       }
    else 
       {
       if(is_numeric($var))
         {
          $var = $var;
         }
       else
         {
          $var = $default;
         }
       }
    break;

case 2: // text user input : prevent malicious code from running
  if($var == '')
   {
   $var = $default;
   }
else 
   {
   $var = htmlspecialchars($var, ENT_NOQUOTES);
   }
break;

   }

  return $var;

  }

 $yourvar = getvar($_POST['yourvar'], -1, 2);

Then you take the original form, where you then place the value which was entered for each submitted element.

<textarea>$yourvar</textarea>
<input type=text value=$yourvar>
etcetc

On top of hte page you place the errorcode, and ask them to change or resubmit. Of course, you would want to test whether the person has resubmitted. So you add a hidden variable to the form:
<input type=hidden value="1" name="resubmitted">

Hope this helps,

J.

[owaring]

thanks for the code, leatherback, how would i apply this??

im not sure how this relates to the original query??

ie

if($row == TRUE)     

{ 

/* 
HERE IS WHERE I ASK USER YES OR NO 
YES CONTINUES REST OF SCRIPT 
NO RETURNS TO add_int.php 
*/ 

} 

//REST OF SCRIPT

thanks anyway

[leatherback]

Hi,

I would make the process script and the form seperate include files.

  if( $_POST['resubmitted'] <> 1 )  //  First time submitted
  {
   if($row == TRUE)     // Records exists
     {
      // For each submitted variable
      $variable = getvar('variablename', $default, $type);

  include('includefolder/form.php');
  }
else
  {
  include('includefolder/processformscript.php');

  }
   }
  else // Confirmed submitted
    {
include('includefolder/processformscript.php');

}

or, similar:

  if( $_POST['resubmitted'] <> 1 )  //  First time submitted
  {
   if($row == TRUE)     // Records exists
     {
      $action = 2;
      }
    else
      {
      $action=1;
      }
   }
  else // Confirmed submitted
    {
     $action = 1;
    }

if($action = 1)
  {
//processform
  }
else
  {
   //place form here
   }

I just thought: this leave the opening of a person changing his name into another-existing- name in the database. So you should include the names as hidden fields in the form, and cross-check wether they changed the name?

[owaring]

ok, I better hold my hand up and admit to getting lost here!!!

In the mean time i have been fiddling on my own and have found a rather crude way of getting around this.

I've used 3 forms, Add>carry on after warning, Edit>go to edit.php, Cancel>return to form

I'm sorted except one thing, how can i code the action of the add button to carry on were i have marked REST OF SCRIPT.

if($row == TRUE)      

{  

$name = "$firstname $lastname";

echo
"A user with the name "."$name".
" already exists on on the Willow database.</br></br>
You can either add another "."$name".
" or Edit the existing "."$name".
" or cancel </br></br> Cancelling will return you to the Add Crew Member Page";

echo '
<form name="add" method="post" action=WHAT GOES HERE???>
  <div align="center">
    <input name="add" type="submit" id="add" value="Add New">
  </div>
</form>
<form name="edit" method="post" action="edit.php">
  <div align="center">
    <input name="edit" type="submit" id="edit" value="Edit">
  </div>
</form> 
<form name="cancel" method="post" action="add_int.php">
  <div align="center">
    <input name="cancel" type="submit" id="cancel" value="Cancel">
  </div>';

}  

//REST OF SCRIPT

I'm not happy with this but its working at a level i can keep my head at, please bear with me on that!!!

Also how can i get these 3 buttons in one form? The only way i could figure to get 3 individual actions was to have 3 individual forms.

I have another question but i guess that one can wait!!!

Cheers for the continued support guys.

[owaring]

for those interested.....

following posts and advice in this thread and this thread

i have rewritten my code in order to give users 3 choices.
button run a function
A snippet of code and a further problem is
here.......

thanks to everyone at phpbuilder.com community for their help so far!!!

ps, i hope i dont upset any rules by linking to threads😕