Form validation, Blank Page on submit

[Enlightened]

Hello, Ive been working on this for hours, Ive looked at other threads, but just cant find the solution, If you can see something obvious please let me know 🙂

Also i am going to be adding the rest of the regex to my other vars, this is just more of an immediate thing 😛, the code is so long ill have to do in two parts. Thanks

<?php
###################################
# pay_form.php By: me
###################################
	error_reporting(E_ALL);


if(isset($_POST['payment_type']))
{

	$errors = array(); // Initilize error array.
	$page = $_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];

require_once('db_inc.php');

// Create a function for escaping the data.
function escape_data($data)
 {
	global $dbc; 
	if (ini_get('magic_quotes_gpc')) {
		$data = stripslashes($data);
 }
	return mysql_real_escape_string(trim($data), $dbc);
 }



function validate_email($email)
{

$exp = "^[a-z\'0-9]+([._-][a-z\'0-9]+)*@([a-z0-9]+([._-][a-z0-9]+))+$";

if(eregi($exp, $email)){

if(checkdnsrr(array_pop(explode("@",$email)),"MX")){
	return true;
}else{
	return false;
}

}else{
	return false;
}    
}  


if (!ereg($page, $_SERVER['HTTP_REFERER']))
{
	$errors[] = "Invalid referer<br />";
} 

	// Check for a first name.
if(isset($_POST['first_name']) === false || strlen($_POST['first_name']) == 0 || strlen($_POST['first_name']) > 20)
{
	$errors[] = "Your first name is required and may not exceed 30 characters.<br />";
	}else{
	$fn = escape_data($_POST['first_name']);
}

// Check for a last name.
if(isset($_POST['last_name']) === false || strlen($_POST['last_name']) == 0 || strlen($_POST['last_name']) > 20)
{
	$errors[] = "Your last name is required and may not exceed 20 characters.<br />";
	}else{
	$ln = escape_data($_POST['last_name']);
}

// Check for a properly formatted email address.
	if (!ereg($exp, $_POST['email']))
  {
		$errors[] = "Invalid email address.<br />";
	}else{

if(isset($_POST['email']) === false || strlen($_POST['email']) == 0 || strlen($_POST['email']) > 45)
{
	$errors[] = "Your email address is required and may not exceed 45 characters.<br />";
	}else{
	$e = escape_data($_POST['email']);
}
 }

// Check for an account number.
if(isset($_POST['accnt']) === false || is_numeric($_POST['accnt']) === false || strlen($_POST['accnt']) == 0 ||
 strlen($_POST['accnt']) > 8)
{
	$errors[] = "Either your hps account number or your ssn is required.<br />";
	}else{
	$a = escape_data($_POST['accnt']);
}

// Check for ssn.
if(isset($_POST['ssn']) === false || isset($_POST['ssn2']) === false || isset($_POST['ssn3']) === false ||
is_numeric($_POST['ssn']) === false || is_numeric($_POST['ssn2']) === false || is_numeric($_POST['ssn3']) === false ||
strlen($_POST['ssn']) == 0 || strlen($_POST['ssn2']) == 0 || strlen($_POST['ssn3']) == 0 ||
strlen($_POST['ssn']) > 3 || strlen($_POST['ssn2']) > 2 || strlen($_POST['ssn3']) > 4)
{
	$errors[] = "Either your hps account number or your ssn is required.<br />";
	}else{
	$s = escape_data($_POST['ssn']) . escape_data($_POST['ssn2']) . escape_data($_POST['ssn3']);
}

// Check for a creditor.
if(isset($_POST['creditor']) === false || strlen($_POST['creditor']) == 0 ||
 strlen($_POST['creditor']) > 30)
{
	$errors[] = "Please enter the name of the original creditor your paying. Creditor name may not exceed 30 characters.<br />";
	}else{
	$c = escape_data($_POST['creditor']);
}

// Check for an address.
if(isset($_POST['address']) === false || strlen($_POST['address']) == 0 ||
 strlen($_POST['address']) > 45)
{
	$errors[] = "Your address is required and may not exceed 45 characters.<br />";
	}else{
	$addy = escape_data($_POST['address']);
}

// Check for a city.
if(isset($_POST['city']) === false || strlen($_POST['city']) == 0 ||
 strlen($_POST['city']) > 45)

{
	$errors[] = "Your city is required<br />";
	}else{
	$cty = escape_data($_POST['city']);
}

// Check for a state.
if(isset($_POST['state']) === false || strlen($_POST['state']) == 0 ||
 strlen($_POST['state']) > 2)
{
	$errors[] = "Your state is required and may not exceed 2 characters.<br />";
	}else{
	$st = escape_data($_POST['state']);
}

	// Check for a zip code.
if(isset($_POST['zip']) === false || is_numeric($_POST['zip']) === false || strlen($_POST['zip']) == 0 ||
 strlen($_POST['zip']) > 10)

{
	$errors[] = "Your zip code is required and may not exceed 10 characters<br />";
	}else{
	$zp = escape_data($_POST['zip']);
}

// Check for a phone number.
if(isset($_POST['phone']) === false || isset($_POST['phone2']) === false || isset($_POST['phone3']) === false ||
 is_numeric($_POST['phone']) === false || is_numeric($_POST['phone2']) === false || is_numeric($_POST['phone3']) === false ||
 strlen($_POST['phone']) == 0 || strlen($_POST['phone2']) == 0 || strlen($_POST['phone3']) == 0 ||
 strlen($_POST['phone']) > 3 || strlen($_POST['phone2']) > 2 || strlen($_POST['phone3']) > 4)
{
	$errors[] = "Your phone number is required and may not exceed 10 characters.<br />";
	}else{
	$ph = escape_data($_POST['phone']) . escape_data($_POST['phone2']) . escape_data($_POST['phone3']);
}

[Enlightened]

#################################################################
# Is payment type a VISA?
#################################################################		
	switch($_POST['payment_type'])
	{
		case 'VISA':
	// Check for a bank name.
	if(isset($_POST['bank_name']) === false || strlen($_POST['bank_name']) == 0 ||
	 strlen($_POST['bank_name']) > 25)

{
	$errors[] = "The company / bank name is required.<br />";
	}else{
	$bn = escape_data($_POST['bank_name']);
}

// Check for a cc number.
if(isset($_POST['cc_number']) === false || is_numeric($_POST['cc_number']) === false || strlen($_POST['cc_number']) == 0 ||
 strlen($_POST['cc_number']) > 20)
{
	$errors[] = "Your Credit Card number is required.<br />";
	}else{
	$cc = escape_data($_POST['cc_number']);
}

// Check for a cc expiration date.
if(isset($_POST['cc_exp']) === false || is_numeric($_POST['cc_exp']) === false || strlen($_POST['cc_exp']) == 0 ||
 strlen($_POST['cc_exp']) > 4)

{
	$errors[] = "Your Credit Cards expiration date is required.<br />";
	}else{
	$ce = escape_data($_POST['cc_exp']);
}

// Check for a cv2 number.
if(isset($_POST['cv2_number']) === false || is_numeric($_POST['cv2_number']) === false || strlen($_POST['cv2_number']) == 0 ||
 strlen($_POST['cv2_number']) > 3)
{
	$errors[] = "Your Credit Cards CV2 number is required.<br />";
	}else{
	$cv2 = escape_data($_POST['cv2_number']);
}

	// Check for a payment ammount.
if(isset($_POST['pay_ammount']) === false || strlen($_POST['pay_ammount']) == 0 ||
 strlen($_POST['pay_ammount']) > 8)
{
	$errors[] = "Your payment ammount is required.<br />";
	}else{
	$pa = escape_data($_POST['pay_ammount']);
}

if(isset($_POST['payment_type']) === false || strlen($_POST['payment_type']) == 0 ||
strlen($_POST['payment_type']) > 15)
{
	$errors[] = "Payment type chosen is invalid.";
	}else{
	$pt = escape_data($_POST['payment_type']);	
}
	break;

#################################################################
# Is payment type a Mastercard?
#################################################################		

	case 'Mastercard':
// Check for a bank name.
if(isset($_POST['bank_name']) === false || strlen($_POST['bank_name']) == 0 ||
 strlen($_POST['bank_name']) > 25)

{
	$errors[] = "The company / bank name is required.<br />";
	}else{
	$bn = escape_data($_POST['bank_name']);
}

// Check for a cc number.
if(isset($_POST['cc_number']) === false || is_numeric($_POST['cc_number']) === false || strlen($_POST['cc_number']) == 0 ||
 strlen($_POST['cc_number']) > 20)
{
	$errors[] = "Your Credit Card number is required.<br />";
	}else{
	$cc = escape_data($_POST['cc_number']);
}

// Check for a cc expiration date.
if(isset($_POST['cc_exp']) === false || is_numeric($_POST['cc_exp']) === false || strlen($_POST['cc_exp']) == 0 ||
 strlen($_POST['cc_exp']) > 4)

{
	$errors[] = "Your Credit Cards expiration date is required.<br />";
	}else{
	$ce = escape_data($_POST['cc_exp']);
}

// Check for a cv2 number.
if(isset($_POST['cv2_number']) === false || is_numeric($_POST['cv2_number']) === false || strlen($_POST['cv2_number']) == 0 ||
 strlen($_POST['cv2_number']) > 3)
{
	$errors[] = "Your Credit Cards CV2 number is required.<br />";
	}else{
	$cv2 = escape_data($_POST['cv2_number']);
}

	// Check for a payment ammount.
if(isset($_POST['pay_ammount']) === false || strlen($_POST['pay_ammount']) == 0 ||
 strlen($_POST['pay_ammount']) > 8)
{
	$errors[] = "Your payment ammount is required.<br />";
	}else{
	$pa = escape_data($_POST['pay_ammount']);
}

if(isset($_POST['payment_type']) === false || strlen($_POST['payment_type']) == 0 ||
strlen($_POST['payment_type']) > 15)
{
	$errors[] = "Payment type chosen is invalid.";
	}else{
	$pt = escape_data($_POST['payment_type']);	

}
		break;

#################################################################
# Is payment type an Atm?
#################################################################		

	case 'Atm':
// Check for a bank name.
if(isset($_POST['bank_name']) === false || strlen($_POST['bank_name']) == 0 ||
 strlen($_POST['bank_name']) > 25)

{
	$errors[] = "The company / bank name is required, it may not exceed 25 characters.<br />";
	}else{
	$bn = escape_data($_POST['bank_name']);
}

// Check for a cc number.
if(isset($_POST['cc_number']) === false || is_numeric($_POST['cc_number']) === false || strlen($_POST['cc_number']) == 0 ||
 strlen($_POST['cc_number']) > 20)
{
	$errors[] = "Your Credit Card number is required.<br />";
	}else{
	$cc = escape_data($_POST['cc_number']);
}

// Check for a cc expiration date.
if(isset($_POST['cc_exp']) === false || is_numeric($_POST['cc_exp']) === false || strlen($_POST['cc_exp']) == 0 ||
 strlen($_POST['cc_exp']) > 4)

{
	$errors[] = "Your Credit Cards expiration date is required.<br />";
	}else{
	$ce = escape_data($_POST['cc_exp']);
}

// Check for a cv2 number.
if(isset($_POST['cv2_number']) === false || is_numeric($_POST['cv2_number']) === false || strlen($_POST['cv2_number']) == 0 ||
 strlen($_POST['cv2_number']) > 3)
{
	$errors[] = "Your Credit Cards CV2 number is required.<br />";
	}else{
	$cv2 = escape_data($_POST['cv2_number']);
}

	// Check for a payment ammount.
if(isset($_POST['pay_ammount']) === false || strlen($_POST['pay_ammount']) == 0 ||
 strlen($_POST['pay_ammount']) > 8)
{
	$errors[] = "Your payment ammount is required.<br />";
	}else{
	$pa = escape_data($_POST['pay_ammount']);
}

if(isset($_POST['payment_type']) === false || strlen($_POST['payment_type']) == 0 ||
strlen($_POST['payment_type']) > 15)
{
	$errors[] = "Payment type chosen is invalid, it may not exceed 15 characters.";
	}else{
	$pt = escape_data($_POST['pay_type']);	

}
		break;

#################################################################
# Is payment type a Check?
#################################################################			

case 'Check':
			// Check for a bank name.
if(isset($_POST['bank_name']) === false || strlen($_POST['bank_name']) == 0 ||
strlen($_POST['bank_name']) > 25)
{
	$errors[] = "The company / bank name is required, and may not exceed 25 characters.<br />";
	}else{
	$bn = escape_data($_POST['bank_name']);
}

// Check for a check name.
if(isset($_POST['chk_name']) === false || strlen($_POST['chk_name']) == 0 ||
strlen($_POST['payment_type']) > 45)
{
	$errors[] = "The name on your Checking Account is required, and may not exceed 45 characters.<br />";
	}else{
	$cname = escape_data($_POST['chk_name']);
}

// Check for a cc expiration date.
if(isset($_POST['chk_accnt']) === false || is_numeric($_POST['chk_accnt']) === false || strlen($_POST['chk_accnt']) == 0 ||
strlen($_POST['chk_accnt']) > 15)
{
	$errors[] = "Your checking account number is required, and may not exceed 15 characters.<br />";
	}else{
	$ca = escape_data($_POST['chk_accnt']);
}

// Check for a check number.
if(isset($_POST['chk_number']) === false || is_numeric($_POST['chk_number']) === false || strlen($_POST['chk_number']) == 0 ||
strlen($_POST['chk_number']) > 6)
{
	$errors[] = "Your check number is required, and may not exceed 6 characters.<br />";
	}else{
	$cno = escape_data($_POST['chk_number']);
}

	// Check for a routing number.
if(isset($_POST['routing']) === false || is_numeric($_POST['routing']) === false || strlen($_POST['routing']) == 0 ||
strlen($_POST['routing']) > 9)
{
	$errors[] = "Your routing number is required, and may not exceed 9 characters<br />";
	}else{
	$rn = escape_data($_POST['routing']);
}

	// Check for a payment ammount.
if(isset($_POST['pay_ammount']) === false || strlen($_POST['pay_ammount']) == 0 ||
strlen($_POST['pay_ammount']) > 8)
{
	$errors[] = "Your payment ammount is required, and may not exceed 8 characters<br />";
	}else{
	$pa = escape_data($_POST['pay_ammount']);
}

if(isset($_POST['payment_type']) === false || strlen($_POST['payment_type']) == 0 ||
strlen($_POST['payment_type']) > 15)
{
	$errors[] = "Payment type chosen is invalid, and may not exceed 15 characters";
	}else{
	$pt = escape_data($_POST['payment_type']);	

}
		break;

[thorpe]

and your problem is?

[Enlightened]

#################################################################
# If its none of these, They didnt use the select form.
#################################################################		
	default:
		$errors[] = "You did not choose a valid payment type.<br />";
			break;
	}

if(!empty($errors))
{
 	echo "ERROR:<br />";
 	foreach($errors as $err)
    echo "$err";
 	die('Way to many errorsx0r');
   }else{        

	$query  = "INSERT INTO contact (pay_id, first_name, last_name, email,
	accnt, creditor, address, city, state, zip, phone, pay_date)
	VALUES ('$fn', '$ln', '$e', '$a', '$s', '$c', '$addy', '$cty', '$st',
	'$zp', '$ph', NOW())";

// Check payment method to be inserted into the db	
switch($_POST['payment_type'])
{
	case 'VISA':
		$query2  = "INSERT INTO payinfo (bank_name, payment_type, cc_number, cc_exp, cv2_number, pay_ammount, pay_date)
		VALUES('$bn', '$pt', '$cc', '$ce', '$cv2', '$pa', NOW())";
		break;

	case 'Mastercard':
		$query2  = "INSERT INTO payinfo (bank_name, payment_type, cc_number, cc_exp, cv2_number, pay_ammount, pay_date)
		VALUES('$bn', '$pt', '$cc', '$ce', '$cv2', '$pa', NOW())";
		break;

	case 'Atm':
		$query2  = "INSERT INTO payinfo (bank_name, payment_type, cc_number, cc_exp, pay_ammount, pay_date)
		VALUES('$bn', '$pt', '$cc', '$ce', '$cv2', '$pa', NOW())";
		break;

	case 'Check':
		$query2  = "INSERT INTO payinfo (bank_name, payment_type, chk_name, chk_number,
		chk_accnt, chk_number, routing, pay_ammount, pay_date)
		VALUES('$bn', '$pt', '$cname', '$ca', '$cno', '$rn', '$pa', NOW())";
		break;

	default:
		echo 'Could not submit your payment, Please contact us.';
		break;
}
$result  = mysql_query($query);
$result2 = mysql_query($query2);
echo 'so far so good';	
	if($result)
	{
		$recipient = "[e-mail]";
		$subject = "Online Payment";
		$msg = "A " . $_POST['payment_type'] . " payment has been made.";

mail($recipient, $subject, $msg);

echo 'Thanks, Your payment has been submitted.';

}else{

echo 'Your payment did not process, And unknown error has occured.
	Please contact us to complete the payment process';

	}
		mysql_close();
}

}

?>

[thorpe]

dont wont to be rude but, you might benefit from a read of the link in my signiture. i know we would.

[Enlightened]

its all in the topic