Here is the code I have thus far...
<?php session_start(); ?>
<?php require_once('../Connections/connRMA.php'); ?>
<?php
session_register("SESSION");
if ($SERVER['REQUEST_METHOD'] != 'POST'){
$me = $SERVER['PHP_SELF'];
?>
<form method="post" name="form1" action="<?php echo $editFormAction; ?>">
First Name: <input type="text" name="first_rma" value="" size="50">
<input type="submit" value="Submit RMA Request">
<<<a bunch more value requests>>>
<input type="hidden" name="date_rma" value="<?php echo date('Y-m-d H:i:s'); ?>">
<input type="hidden" name="MM_insert" value="form1">
</form>
<?php
} else {
error_reporting(0);
// initialize a array to
//hold any errors we encounter
$errors = array();
if (!session_is_registered("SESSION"))
$errors[] = "Invalid form submission";
// test to see if the form was actually
// posted from our form
$page = $SERVER['HTTP_HOST'].$SERVER['PHP_SELF'];
if (!ereg($page, $SERVER['HTTP_REFERER']))
$errors[] = "Invalid referer<br>\n";
// check to see if a name was entered
if (!$POST['Name'])
$errors[] = "Name is required";
// if there are any errors, display them
if (count($errors)>0) {
foreach($errors as $err)
echo "$err<br>\n";
echo "<br>Please use your browser's Back button to fix.";
}
} else {
// no errors, so we build our message
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
$theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
$editFormAction = $SERVER['PHP_SELF'];
if (isset($SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($POST["MM_insert"])) && ($POST["MM_insert"] == "form1")) {
$insertSQL = sprintf("INSERT INTO rma_rmaform_all (date_rma, first_rma, last_rma, phone_rma, mobile_rma, fax_rma, email_rma, web_rma, address1_rma, address2_rma, city_rma, state_rma, zip_rma, invoice_rma, part_rma, qty_rma, serial_rma, reason_rma, problem_rma, comment_rma) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($POST['date_rma'], "date"),
GetSQLValueString($POST['first_rma'], "text"),
GetSQLValueString($POST['last_rma'], "text"),
GetSQLValueString($POST['phone_rma'], "text"),
GetSQLValueString($POST['mobile_rma'], "text"),
GetSQLValueString($POST['fax_rma'], "text"),
GetSQLValueString($POST['email_rma'], "text"),
GetSQLValueString($POST['web_rma'], "text"),
GetSQLValueString($POST['address1_rma'], "text"),
GetSQLValueString($POST['address2_rma'], "text"),
GetSQLValueString($POST['city_rma'], "text"),
GetSQLValueString($POST['state_rma'], "text"),
GetSQLValueString($POST['zip_rma'], "text"),
GetSQLValueString($POST['invoice_rma'], "text"),
GetSQLValueString($POST['part_rma'], "text"),
GetSQLValueString($POST['qty_rma'], "int"),
GetSQLValueString($POST['serial_rma'], "text"),
GetSQLValueString($POST['reason_rma'], "text"),
GetSQLValueString($POST['problem_rma'], "text"),
GetSQLValueString($POST['comment_rma'], "text"));
mysql_select_db($database_connRMA, $connRMA);
$Result1 = mysql_query($insertSQL, $connRMA) or die(mysql_error());
}
}
}
if (mail($recipient,$subject,$msg)){
echo "<p>Your RMA has been submitted.</p>";
echo nl2br($msg);
} else
echo "An unknown error occurred.";
?>