[RESOLVED] Passing variables within a form

truman

I am trying to pass a form input through an encryption script into a database.

I cannot seem to pass the "data" info from the form to the script.

Static variables work fine...

<td><label>Data:</label> <input type="password" name="data" value="" size="10">

<?php

   $key = "xxxxxx";
   $input = data;

   $td = mcrypt_module_open('tripledes', '', 'ecb', '');
   $iv = "11111111";
   mcrypt_generic_init($td, $key, $iv);
   $output = mcrypt_generic($td, $input);
   mcrypt_generic_deinit($td);
   mcrypt_module_close($td);
?>

Thank you for your time...

Cheers,
truman

HP400

You would access the data input through the superglobal $_POST["data"]

truman

I tried to retrieve the variable using a superglobal, but when the information is spit back the information is blank... Static variables work beautifully, but I need the user's input...

Is it possible to pull that variable if everything takes place on the same page??? Because I thought that in order for a superglobal to work one would have to post the info to another page and then retrieve the variable...

thank you,
truman

dotnotwhat

Can you change the line where you set $input, to:-

$input = $_POST['data'];

That should work (presuming your form submits using POST method) but from what you are saying, it doesn't, so add this line after that:-

die($input);

After submitting your form, do you get the 'data' you expected displayed on screen? Just trying to work out where your problem lies...

truman

The form does use a POST method... I still get the same result... I am truly perplexed because I've tried everything I could think of (even off the wall stuff)...

Here is a larger chunk of the code (the whole form is huge)

<form action="<?php echo $editFormAction; ?>" method="post" name="form1">
            <h2>Applicant Data</h2>
			<h3>Applying for the position of <?php echo $row_openPos['position_Title']; ?> <input name="applicant_PosApplied" type="hidden" value="<?php echo $row_openPos['position_Title']; ?>" /></h3>
            <table class="tblAPPDATA" width="100%" cellpadding="2" cellspacing="2">
                           <tr> 

            <td><label>DATA:</label> <input type="password" name="data" value="" size="10">

<?php

   $key = "xxxxxx";
   $input = $_POST['data']; 

   $td = mcrypt_module_open('tripledes', '', 'ecb', '');
   $iv = "11111111";
   mcrypt_generic_init($td, $key, $iv);
   $output = mcrypt_generic($td, $input);
   mcrypt_generic_deinit($td);
   mcrypt_module_close($td);
?>

<input name="ouput_data" type="hidden" value="<?php echo "$output" ?>" />

I really appreciate all the help...

Cheers,
truman

dotnotwhat

I think we need to make sure the basics are working as expected.

The script that handles your POST request - can you put these 2 lines at the top of that script temporarily, fill your form in, submit it and post the exact output here?

print_r($_POST);
exit;

If we see the expected output, at least we know your form is ok, etc.

truman

The post command posts to a command to INSERT into a database on the same page... I assume that's why I cannot retrieve the variable using standard super globals...

I added the print command and I received

Array ()

Since the form and the script reside on the same page I was not able to fill out the form... It read the print command first...

I may be trying to accomplish something that cannot be accomplished...

Thank you again,
truman

truman

The print command stops the rest of the form past its location in the document code... It doesn't render the rest of the page... However it prints out

Array ()

Since the form is posting to an action within the same page... Could that be the reason the super globals are not working???

bradgrafelman

Yep. Change this in your HTML:

<form action="<?PHP echo $editFormAction; ?>" method="post" name="form1">

to this:

<form action="<?PHP echo $editFormAction; ?>?submit=true" method="post" name="form1">

Then, change the two lines suggested above to this:

if(!empty($_GET['submit']) || !empty($HTTP_GET_VARS['submit'])) {
print_r($_POST); 
exit;
}

truman

OK... the print command gave me some insight... The form is picking up everything that it is suppose to, but it is not inserting the variable into the form...

It is encrypting blank space...

But on the bright side at least I can see the variable from the $_POST

bradgrafelman

Okay, go ahead and get rid of those debug lines (and change the HTML code back), and repost your entire code again. Not snippets, the whole thing.

I'm wondering if it's not trying to do the encrypting before the form's submitted (i.e. on the first load of the script).

HP400

You don't have to post to another page for a post to work.

You can do

<form action="<?php echo $_SERVER['PHP_SELF']; ?>" metho="post">

Then at the top of the page you can check...

if($_POST["submit"])
{
do stuff
}

truman

I tried to cut as much as I could, but I could not get it under 10,000 chars...

bradgrafelman

Oh wow, didn't know it was that large. :-\

truman

Yeah... over 100,000 chars... Ok... thus far I can tell that it does recognize the POST variable "data"... It will encrypt static variables... But it will not insert the POST variable into the encryption script...

herve

May be a stupid question but anyway : have you check that you have a " </form> " HTML tag
at the end of your form ?

truman

Yep... It's there...

Is there any way to establish the variable from the value of the input and not it's value after POST

Something like this <input name="data" value="<? = $data ?>">

At this point my I am grasping for straws...

herve

This was the "old way" to get the content of HTML form. You had global variables
with the content. But it was dangerous (from a security point of view) so it was discarded
in profit of $REQUEST, $GET, $POST, etc.

May be you should try with a very simple HTML form, calling the same PHP script
and print the value in $_POST variables ?

Something like this :

<form method="post" action="myscript.php">
<input type="password" name="data" value="" size="10">
<input type="submit" value="ok">
</form>

and myscript.php :

<?PHP

print "value = ###".$_POST["data"]."###<br>\n";

To see if it's ok that (simple) way, and then add progressively the rest ?

truman

Thank you guys for all of your help... I found a work around that will do the job...

Cheers,
truman

ace21

Well what's the work around?