PHP and HTML Forms

[ace_lovegrove]

Hi everyone, first post here so nice to meet you all.

I'm after some help with HTML forms and PHP.

I have a simple username and password log in form. How is it best to verify that the user has actually entered information into the inputs?

I had the idea that i could have the page submit to itself, on submitting it would check the fields for the content, log the user in or not and then forward to the correct page. It would also be able to throw back error messages to the user easily this way. Only problem im not sure how, or even if you can, forward to another page in PHP code.

If you are interested in seeing what i am doing then go here . Bare in mind that it is nowhere done so easily breakable.

Thanks for any help.

ace

[Roger_Ramjet]

Before you go another step you need to read THIS . The page include the 'best practice' code for cleaning user input that you must use unless you want trouble.

As to the rest of your question, you have got it right. Now I personally use a verification script that I include in every page I want to password protect. You can use the base code I've attached, but you should modify it to include the quote_smart function etc. The actual code comes from Sitepoint and the article is well worth reading.

Redirecting to another page, or branching on input, or just including code fragments according to context is what php is so good at and why so many dynamic websites sre written in it. Have a search around these forums and you'll find all the answers already here.

[devinemke]

the basic idea:

<?php
ob_start();

function form()
{
	if (isset($_POST['username'])) {$username = $_POST['username'];}
	else {$username = '';}

echo '
<form action="" method="POST">
username: <input type="text" name="username" value="' . $username . '"><br>
password: <input type="password" name="password"><br>
<input type="submit" name="submit" value="submit">
</form>	
';
}

if (!isset($_POST['submit']))
{
	form();
}
else
{
	foreach ($_POST as $key => $value)
	{
		$value = trim($value);
		if ($value == '') {$errors[] = 'missing field: ' . $key;}
		$_POST[$key] = $value;
	}

if (isset($errors))
{
	foreach ($errors as $value)
	{
		echo $value . '<br>';
	}
	form();
}
else
{
	ob_end_clean();
	header('location: nextpage.php');
	exit();
}	
}

ob_end_flush();
?>

[ace_lovegrove]

Thanks guys, although i have solved the problem i will look into those links.

Thanks