simple php & form create file

[ryanfoland]

I don't know much because I spend most of my time around javascript, html, and css.

The basic goal is to have a form, where peolpe can type in javascript, choose a filename, and click create. The file is wrote to the directory.

php:

<?php
$server= 's7/bin/';
$name= $filename;
$data= $thedata;
$ending= '.js';
$copyright= '// JavaScript created with javascripthost.com';
$file= $name . $ending;
if ( $file && $data ) {
$fp = fopen($file, "w"); 
fwrite($fp, $copyright);
fwrite($fp, "<br>");
fwrite($fp, $data);
fclose($fp);
header("Location: http://javascripthost.com/$server$file");
}
else
{ echo = 'Fill out the form to complete the javascript builder';
}
?>

html:

<form method="post" action="createfile.php">
<font size"3"><b>File name:</b> </font>
<br /><input type="text" size="15" name="filename" id="filename"><br />
<font size"3"><b>File data:</b> </font>
<div id="dat"><textarea name="thedata" id="thedata" cols="30" rows="15"></textarea></div>
<div id="sub" style="position:absolute; left: 25">
<input type="submit" value=" Create ">
</div>
</form>

[richie]

What happened when you ran the code?

Make sure that your "web server user" has proper permissions to the directory that will house your javascript files.

[amber_long83]

i dont understand why have you put this condition

if ( $file && $data ) { 

if you are checking for blank validation. then change this to

if ( strlen($file)>0 && strlen($data)>0 ) { 

other coding seems fine. just be careful regarding the file permission

[djjjozsi]

something:

{ echo = 'Fill out the form to complete the javascript builder';

echo = this is not recommended 🙂

to print something, use this

 echo "something!";  

And if you send the form, you can get these values with $_POST["variable_name"]

for example:

 if(empty($_POST["thedata"]))
print "fill the data!!";  

[djjjozsi]

and if your visitors could add a file name, its not so safe.

create a folder with his/her session id,

if(!file_exists(session_id()))
mkdir(session_id());
$server= 's7/bin/'.session_id();

and use some kind of encryption to keep these file names safer:

 $name= md5($filename); 

if i were you, i'm just print the embed code to the javascript,

print 'Embed code:<br> <textarea name="textarea" cols="60" rows="5"> <script  src="http://javascripthost.com/'.$server.$file.'" language="JavaScript1.2" type="text/JavaScript1.2">
</script></textarea>';

You might solve this javascript creator with one php file. You can print the form with php.

When you create the javascript, printing <br> into javascript is not so valid, if you want a break into that file, you can print "\r\n"

$copyright= '// JavaScript created with javascripthost.com'."\r\n";

Hello,

jjozsi

[ryanfoland]

Thanks for the replies, however I brushed up on my php and changed the way the creator works.

Also, since my parser only creates .js files, there is no need for md5 encryption. Also, the reason they are uploading the file is to store it as a direct accessible file.
If you visit javascripthost.com you'll see what I mean, the files are quite public.
Soon I'll code a member system and their {$folder} include will be used to do much of everything.

Also to follow up on the <br> I was originally making this for an html, and just forgot to replace with /n for js.

I also had to change a setting in php so that the escape characters wouldn't be applied to the js file. It's safe, me and testers tested and proved it safe.

Thanks again!