form is spoilt

[canavar]

Hi, I run this form. but i don't see $name and $text.. where is my mistake?

<center>
<br>
<table bgcolor="#000000" border="0" cellpadding="1" cellspacing="0" width="450">
  <tr><td>
    <table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" width="450">
      <tr><td bgcolor="#006486">
        <b><center>Note Book</b>
      </td></tr>
      <td>
        <form method="post" action="send.php"><br>
           <b>Name :</b><input type="text" name="name" size=30><br><br>
          <center><textarea rows=15 cols=50 name="text"></textarea>
      </td></tr>
      <tr><td>
        <center><br>
        <input type="submit" value="  Send  "> 
        <input type="reset" value="  Reset  "><br><br>
      </td></tr>
    </table>
  </td></tr>
</table>

send.php :

<?php

if ($file_open = (fopen("./data.txt","a")))
{
  $date = date("d.m.Y");
  $new_text = "<br><table border='0' cellpadding='0' cellspacing='0' bgcolor='#eaeaea' width='600'>
  <tr><td>by <b>$name</b> <b>$date</b><br><br></td></tr>\n
  <tr><td>$text</td></tr></table><br>";
  fwrite($file_open, $new_text);
  fclose($file_open);
  echo "Dear $name thank you.<br>";
  require("./data.txt");
}
 else
{
 echo "<center><br><b>Error!</b></center>";
}
?>

data.txt🙁there aren't $name and $ text):
Dear thank you.

by 04.09.2006

[planetsim]

try using $POST["name"] and $POST["text"] instead, also santize your data, a good habit to get into especially when using databases, you can search the forum for examples on how to sanitize data, or google also.

[Crowly]

You need to use either $POST['name'] and $POST['text'] or $REQUEST['name'] and $REQUEST['text'] to fetch the value from name and text fields from the form.

[bradgrafelman]

Crowly wrote:

You need to use either $POST['name'] and $POST['text'] or $REQUEST['name'] and $REQUEST['text'] to fetch the value from name and text fields from the form.

with $_POST being the preferred choice, here.

Search the forum for "register globals" (or "register_globals") and you'll see why $name is no longer valid due to security exploits and whatnot.