[RESOLVED] How can I create an array of POST values?

webguy262

I have several checkboxes. I can access the values of those that are checked with $_POST['check'] but how do I turn the values into an array?

bradgrafelman

That depends how you created the checkboxes. If the HTML looks something like:

<input type="checkbox" name="check[]" value="foo">
<input type="checkbox" name="check[]" value="bar">

Then $_POST['check'] is already an array.

webguy262

Thanks, that's what I thought.

Perhaps you or someone can help with the next step...

The values of each checkbox is the name of a pdf file; the visitor chooses one or more files to receive by email.

How do I get from...

$_POST['check']

...to having the $values from $_POST['check'] in the following form to accommodate the emailer script I am using (the variable below is hard coded for a single pdf file; I need it to reflect any combination of from 1 - 5 pdfs offered to visitors)...

$myEmail->addFile("Marketing_Multi_Building.pdf", "application/pdf");

Here is the emailer_class.php file I am working with...

<?php
// --------------------------------------------
// | EP-Dev Emailer Class    

// |                                           

// | Copyright (c) 2003-2005 Patrick Brown as EP-Dev.com           

// | This program is free software; you can redistribute it and/or modify
// | it under the terms of the GNU General Public License
 as published by
// | the Free Software Foundation; either version 2 of the License, or
// | (at your option) any later version.              

// | 
// | This program is distributed in the hope that it will be useful,
// | but WITHOUT ANY WARRANTY; without even the implied warranty of
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// | GNU General Public License for more details.
// --------------------------------------------


/*
-------------------------------------------------------------
THIS CLASS SHOULDN'T HAVE TO BE EDITED.
-------------------------------------------------------------
*/

<?php
// --------------------------------------------
// | EP-Dev Emailer Class    

// |                                           

// | Copyright (c) 2003-2005 Patrick Brown as EP-Dev.com           

// | This program is free software; you can redistribute it and/or modify
// | it under the terms of the GNU General Public License as published by
// | the Free Software Foundation; either version 2 of the License, or
// | (at your option) any later version.              

// | 
// | This program is distributed in the hope that it will be useful,
// | but WITHOUT ANY WARRANTY; without even the implied warranty of
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// | GNU General Public License for more details.
// --------------------------------------------


/*
-------------------------------------------------------------
THIS CLASS SHOULDN'T HAVE TO BE EDITED.
-------------------------------------------------------------
*/

class EPDev_Emailer
{
    var $message;
    var $FILES;
    var $EMAIL;

function EPDev_Emailer($to_address, $from_address, $subject, $reply_address=null, $cc_address, $bcc_address, $mailer=null, $custom_header=null)
{
    $this->EMAIL = array(
        "to" => $to_address,
        "from" => $from_address,
        "subject" => $subject,
        "reply" => (empty($reply_address) ? $from_address : $reply_address),
        "cc" => (empty($cc_address) ? "" : $cc_address),
        "bcc" => (empty($bcc_address) ? "" : $bcc_address),
        "mailer" => (empty($mailer) ? "X-Mailer: PHP/" . phpversion() : $mailer),
        "header" => (empty($custom_header) ? "" : $custom_header),
        "boundary" => "_mimeboundary_".md5(uniqid(mt_rand(), 1))
        );

    $this->message = "";

    $this->FILES = array();
}

function addFile($filename, $type=null, $filecontents=null)
{
    if ($filecontents !== null)
    {
        $index = count($this->FILES);
        $this->FILES[$index]['data'] = chunk_split(base64_encode($filecontents));
        $this->FILES[$index]['name'] = basename($filename);

        if (empty($type))
            $this->FILES[$index]['mime'] = mime_content_type($filename);
        else
            $this->FILES[$index]['mime'] = $type;
    }
    else if (file_exists($filename))
    {
        $index = count($this->FILES);
        $this->FILES[$index]['data'] = chunk_split(base64_encode(file_get_contents($filename)));
        $this->FILES[$index]['name'] = basename($filename);

        if (empty($type))
            $this->FILES[$index]['mime'] = mime_content_type($filename);
        else
            $this->FILES[$index]['mime'] = $type;
    }
    else
    {
        return false;
    }

    return true;
}



function addText($text)
{
    $this->message .= $text;
}


function getHeader()
{
    $header = "From: {$this->EMAIL['from']}\r\n"
            . "Reply-To: {$this->EMAIL['reply']}\r\n"
            . (!empty($this->EMAIL['cc']) ? "Cc: {$this->EMAIL['cc']}\r\n" : "")
            . (!empty($this->EMAIL['bcc']) ? "Bcc: {$this->EMAIL['bcc']}\r\n" : "")
            . "X-Mailer: {$this->EMAIL['mailer']}\r\n"
            . "MIME-Version: 1.0\r\n"
            . "Content-Type: multipart/mixed; boundary=\"{$this->EMAIL['boundary']}\";\r\n";

    return $header;
}

function getEmail()
{    
    $content .= "--{$this->EMAIL['boundary']}\r\n"
            . "Content-Type: text/plain; charset=\"iso-8859-1\"\r\n"
            . "Content-Transfer-Encoding: 7bit\r\n\r\n"
            . $this->message . "\r\n";

    if (!empty($this->FILES))
    {
        foreach($this->FILES as $file)
        {
            $content .= "--{$this->EMAIL['boundary']}\r\n"
            . "Content-Type: {$file['mime']}; name=\"{$file['name']}\"\r\n"
            . "Content-Transfer-Encoding: base64\r\n"
            . "Content-Disposition: attachment\r\n\r\n"
            . $file['data'] . "\r\n";
        }
    }

    $content .= "--{$this->EMAIL['boundary']}--\r\n";


    return $content;
}

function send()
{
    return mail($this->EMAIL['to'], $this->EMAIL['subject'], $this->getEmail(), $this->getHeader());
}
}

dagon

something like:

foreach ($_POST['check'] as $file){
$myEmail->addFile($file, "application/pdf");
}

dagon

should do a file check, or i could send a post with any file name in it, and you wouldn't want that.

webguy262

the foreach did the trick!

this script SENDS files to the visitor; it does not allow them to UPLOAD files.

dagon

it may not allow uploads, but it may allow them to down load a file you did not intend them to.

webguy262

Please tell me how that could happen so I can prevent it. Would it be in the url? Something like "&check[file.ext]" ?

dagon

it would be in the post header, you can fake a post to a sites script bypassing their form. In your case you send the file name and don't check it, you could send an id then check that against a list for the file name, or have a list of accepted values from the form, and check that.