Need some help with forms and mysql

[adolphsons]

I have a registration form which new users fill in some basic iinformation and when it is submitted the appropriate tables in mysql database are updated. Is there a way for when the user enters their webpage url to append to the beginning and end of what they submit either in the form itself, the php page it calls on or mysql?

For example when they enter http://www.myhomepage.com I would like it pushed to the table as
<a href="http://www.myhomepage.com">

[bpat1434]

Yes, always. Assuming that the homepage URL they submit is in a separate field (much like the one in the forum here) you can just use string concatenation to create the link. Something like:

if(isset($_POST['homepage']) && !empty($_POST['homepage']))
    $homepage = '<a href="' . $_POST['homepage'] . '">Homepage</a>';
else
    $homepage = '';

Note that I did not check (1) for a valid URL and (2) whether or not "http://" was at the front or not (which is required for <a> tags).

[adolphsons]

I added it to my php, but get an error when going to the page. Not sure if I added it correctly.

Here is the portion of the php code:

//If POST, process form
if( isset($_POST['address']) && $_POST['address'] != ""){


	//verify package is valid 
	$sql = sprintf("select * from accounting where id = %s and active = 'Yes' and mid = %s", intval($_POST['cp']), intval($member['id']));
	$result = $mysql->exSql($sql) or die($mysql->debugPrint());
	if(mysql_num_rows($result)==0) die("<script>alert('Invalid credit package!'); history.back();</script>");
	$packageRow = mysql_fetch_assoc($result);

	//proceed to add property
	$node = new sqlNode();
	$node->table = "items";
	$node->push("text","mls", $_POST['mls']);
	$node->push("int", "cid", $_POST['cid']); //property type
	$node->push("text", "title", $_POST['title']); 
	$node->push("double", "price", $_POST['price']);
	$node->push("defined", "pdate", "NOW()"); //publish date
	$node->push("text","sold", "No"); //sold=no, default
	$node->push("text","description",$_POST['description']);
	$node->push("text","address", $_POST['address']);
	$node->push("text","city", $_POST['city']);
	$node->push("text","state", $_POST['state']);
	$node->push("text","zip", $_POST['zipcode']);
	$node->push("text","featured","No"); //featured=no, default
	$node->push("text","active", "Yes"); //active=yes, default
	$node->push("int","bed", $_POST['bed']);
	$node->push("text","bath", $_POST['bath']);
	$node->push("text","subdiv", $_POST['subdivision']);
	$node->push("text","schoold", $_POST['schooldistrict']);
	$node->push("text","year",$_POST['year']);
	$node->push("double","lot_size", $_POST['lotsize']);
	$node->push("double","sqft", $_POST['sqft']);
	$node->push("text","lat", $_POST['latitude']);
	$node->push("text","long", $_POST['longitude']);
	$node->push("text","sellerTitle", $_POST['sellerTitle']);
	$node->push("text","sellerName",$_POST['sellerName']);
	$node->push("text","sellerPhone",$_POST['sellerPhone']);
	$node->push("text","sellerEmail",$_POST['sellerEmail']);
	$node->push("int","mid",$member['id']);
	$node->push("text","Notes", $_POST['notes']);
	$node->push("defined","expires", sprintf("DATE_ADD(NOW(), INTERVAL %s DAY)", $packageRow['days']));
	$node->push("int","styleID", $_POST['styleID']);
	$node->push("text","garage",$_POST['garage']);
	$node->push("text","levels",$_POST['levels']);
	$node->push("text","testimonial", $_POST['testimonial']);
	$node->push("text","countyID",$_POST['county']);
	$node->push("text","sale_price",$_POST['salePrice']);
	$node->push("int","photoLimit",$packageRow['photoLimit']);
	$node->push("text","vlink",$_POST['vlink']);

	[B]if( isset($_POST['www']) && !empty($_POST['www']))
		$www = '<a href="' . $_POST['www'] . '"> Presenter's Website</a>';
	else
		$www = ''; [/B]

	//insert property
	$result = $mysql->insert($node) or die($mysql->debugPrint());
	$itemId = mysql_insert_id();

	//update credit as used (sending query after property just in case insert property fails)
	$sql = sprintf("update accounting set active = 'No', item='%s' where id = %s", intval($itemId), intval($packageRow['id']));
	$result = $mysql->exSql($sql) or die($mysql->debugPrint());

	//redirect
	@header('Location:myproperties.php?nomap=1');
	die("<script>window.location='myproperties.php?nomap=1';</script>"); //js redirect backup
}//End Process Post Form

[illzz]

The apostrophe in your text needs to be escaped.

$www = '<a href="' . $_POST['www'] . '"> Presenter's Website</a>';

should be

$www = '<a href="' . $_POST['www'] . '"> Presenter\'s Website</a>';

Also, when posting PHP code, be sure to use the

 tags for readability.

[adolphsons]

Thank you! I no longer receive an error, my table does not get populated in mysql. When I had this line in there before it would populate:

$node->push("text","www",$_POST['www']);

Is there something I am missing about the old way verses the new? Also, I apologise for my inexperience with the php code, still learning.

                            if( isset($_POST['www']) && !empty($_POST['www']))
		$www = '<a href="' . $_POST['www'] . '"> Presenter\'s Website</a>'; 
	else
		$www = '';

[adolphsons]

Here are the lines in my form page for this:

<form action="add.php" method="post" enctype="multipart/form-data" id="addForm">

<td valign="top" class="column">Your Website URL</td>
<td class="row"><input type="text" name="www" size="30"></td>

[illzz]

It looks like it isn't populating because you are no longer 'push'ing it, you're just assigning the value to a variable. You can handle this a couple of ways, depending on your preference or the database (no sure if you want 'www' to be NULL or a default value)

if( isset($_POST['www']) && !empty($_POST['www'])) {
    $www = '<a href="' . $_POST['www'] . '"> Presenter\'s Website</a>';
    $node->push("text","www",$www);
} else {
    $www = '';
}

or...

if( isset($_POST['www']) && !empty($_POST['www'])) {
    $www = '<a href="' . $_POST['www'] . '"> Presenter\'s Website</a>';
} else {
    $www = '';
}
$node->push("text","www",$www);

The only difference is in how you handle an empty $www. You can either push an empty string or nothing at all.

Also, others can correct me if I am wrong, but you can get rid of the isset() statement there and change it to:

if(!empty($_POST['www'])) {
    ....
}

Before, I thought that empty() would throw a [Notice: Undefined index] if the array index didn't exist, but I guess it doesn't.

[adolphsons]

I'm getting there. Now it does post some data, but only- Presenter's Website

I used this:

if( isset($POST['www']) && !empty($POST['www'])) {
$www = '<a href="' . $_POST['www'] . '"> Presenter\'s Website</a>';
} else {
$www = '';
}
$node->push("text","www",$www);

[illzz]

Just to make sure, place a

var_dump($www);

just before you do the push and verify that it is correct.

It seems like the string is being parsed at some point prior to the actual insert (I don't think that MySQL itself would parse a string like that, but I could be wrong). Can you look at the code for the push() method and see if it is doing anything to the input within there?

I have a feeling that somewhere inside of the push() method, some input sanitation is stripping out the tags.