[Resolved] Newbie at larger here. . . (Have patience with me)

Rodney_H_

Is it possible to do both of these things:

1) strip HTML tags

2) add slashes to the same string?


$text = $_POST['text'];

strip_tags($text); // 1

addslashes ($text);  // 2

I am trying to figure this out, but am having trouble...

Thanks for any help out there!

-Rodney H.

m_tt

what about

$text = strip_tags(addslashes($_POST['text']));

$text = $_POST['text'];
$text = strip_tags($text);
$text = addslashes($text);

bradgrafelman

$text = $_POST['text']; 

strip_tags($text); // 1 

addslashes ($text);  // 2

The [man]strip_tags/man and [man]addslashes/man functions return the modified strings - they don't alter $text at all. That's why you need to tell PHP to assign $text to the string they output (as in m@tt's post).

halojoy

Originally posted by m@tt
$text = strip_tags(addslashes($POST['text']));

To do the same as your other alterenative,
Shouldnt the above be

$text = addslashes(strip_tags($_POST['text']));

Godday, Rodney H. How do you do, Sir?
Still havent given up PHP Scripting..... Have you? :p

m_tt

Originally posted by halojoy
To do the same as your other alterenative,
Shouldnt the above be
$text = addslashes(strip_tags($_POST['text']));
Godday, Rodney H. How do you do, Sir?
Still havent given up PHP Scripting..... Have you? :p [/B]

edit: oops, I see, you are correct 😉

Rodney_H_

That works, but now I have another problem (he types while laughing to himself) and I hope you all can help.

I am making online e-cards an an FYI...


<?php
//  grab info from the form . . . 

$image = $_POST['image'];
$code = $_POST['code'];
$from_name = trim($_POST['from_name']);
$from_email = trim($_POST['from_email']);
$to_name = trim($_POST['to_name']);
$to_email = trim($_POST['to_email']);
$title = trim($_POST['title']);
$date = date("Y-m-d");
$message = addslashes(strip_tags($_POST['message']));  // Message for DB
$message_2_display = strip_tags(($_POST['message'])); // Message for User (no slashes)

// Show Preview
echo "<h1>$title</h1>";

echo "<div id='image'><img src='$image.jpg' border='0' alt='Image'></div>
<p>$date</p>
<p>$message_2_display</p>
<p><a href='mailto:$from_email'>$from_name</a></p>

<br>
<hr size='1' noshade>

<form method='post' action='create.php'>
<input name='image' type='hidden'  value='$image'>	
<input name='from_name' type='hidden' value='$from_name'>
<input name='from_email' type='hidden' value='$from_email'>
<input name='to_name' type='hidden' value='$to_name'>
<input name='to_email' type='hidden' value='$to_email'>
<input name='title' type='hidden' value='$title'>
<input name='message' type='text' value=\"$message\">
<input name='code' type='hidden' value='$code'>
<input type='button' name='edit' value='&lt; edit' onClick='javascript:history.go(-1)'> |
<input type='submit' name='submit' value='Send &gt;'>
</form>";
?>

This ALL works except my message field,

<input name='message' type='text' value=\"$message\">

It gets truncated. If a user enters three lines of information, it ONLY displays and inputs ONE line into the database??

I am confused, but I think it has something to do with the

nl2br

settings (or lack there of)

Can you guys help?

Thanks!

(Halojoy, I haven't given up PHP THAT easily!!)

bradgrafelman

Er, huh? How do you enter multiple lines of text in a single-line textbox?

Rodney_H_

You cannot, can you. In fact, nobody can.

(LOL)

What was I thinking.

Do you have any suggstions what I should do in this case then? I want to keep the FORM information hidden from the user and just display the send or edit buttons....

Hmmm.

bradgrafelman

You mean you don't want those hidden INPUT values on the page at all? Try one of these two methods:

Put them in a cookie.
Store them in a database, along with a unique ID number. Send the ID number in a cookie (you could even include the user's IP in the database, and make sure the same IP is requesting to 'send' the information as the IP that stored it).

EDIT: (Re: m@tt's post below this one) Glad to see I'm not the only one confused! 😃

m_tt

I'm confused on what you are trying to do...

You want to hide these fields from the user? Everything but the submit button?

Rodney_H_

M@TT,

I am trying to ceate an e-card PREVIEW page so the user can see all that they have entered and how the final thing will look.

I didn't want to clutter up the page with the whole form again that they just saw and entered on the COMPOSE page.

Does that make sense?

bradgrafelman,

you may have an idea here. Cookies. hmmm. I have SO MUCH to learn LOL!!

bradgrafelman

Besides being a tasty treat, they can hold this data for you temporarily, hiding it from the page entirely.

[man]setcookie[/man] is what you'll be wanting. Retrieve the data again by using the $_COOKIE superglobal.

m_tt

Ok, but what is wrong with using hidden input fields? You don't want them to see it in the source code either?

I suppose you could also use session variables to store the data temporarily just like cookies

m_tt

Actually now that I think about it, you would still need those hidden fields for the final submission (insert to database) after the preview so using cookies is just an unnecessary step.

Rodney_H_

m@tt said:

"Actually now that I think about it, you would still need those hidden fields for the final submission (insert to database) after the preview so using cookies is just an unnecessary step."

Then if cookies are unneccessary,

how can I store the data from multiple lines in a hidden field on a form ??

m_tt

Originally posted by Rodney H.
m@tt said:

"Actually now that I think about it, you would still need those hidden fields for the final submission (insert to database) after the preview so using cookies is just an unnecessary step."

Then if cookies are unneccessary,

how can I store the data from multiple lines in a hidden field on a form ??

So for example, you want to have something like:

"This is my message
it goes to the next line
and then to the next line
and on and on..."

You want it to maintain that structure instead of making it like this:

"This is my message it goes to the next line and then to the next line and on and on..."

And you want it to be hidden, correct?

bradgrafelman

you would still need those hidden fields for the final submission

No you wouldn't. Instead of using $POST['image'], you would use $COOKIE['image'] in your INSERT query. Or $_SESSION['image'], whichever you use.

Rodney_H_

m@tt:

either way would be fine. I don't even care if it saves the line structure or not (although it would be preferable)

Any suggestions, or is cookies the way to go here???

-Totally confused

m_tt

Originally posted by bradgrafelman
No you wouldn't. Instead of using $POST['image'], you would use $COOKIE['image'] in your INSERT query. Or $_SESSION['image'], whichever you use.

You are right, I have been staring at this screen too long..

Rodney, I think your confusion may be coming from this:

It should be:

There is no reason for it to truncate the message other than if you used a TEXTAREA box to input the message, it jumped to the next line and you tried using a TEXT field to output which will only display the first line.

Rodney_H_

m@tt:

That is the whole stupid problem:

I am using a <textarea< on the 'compose' page and an <input type='text'> on the preview page.

Totally stupid of me! Sorry.

Maybe I just have to put the whole form back on the preview page with a <textarea> for the user's message.

That or I could put the textarea in a div and position it off the screen or make the div hidden, display none??

Not sure, May try cookies with this one field....

Thanks for your help.

Get some rest. Don't look at your computer any more!!

: - )