Filter text string and lablel it an error

[mrhford]

Hi everyone !

Learning PHP... Not sure of correct terminology so bear with me 😉

I have a mail form and have recently started to get spam.

the last time it happened I defined a string length for phone numbers and it stopped all the nigerian king selling viagra :eek:

now I want the form to move to my error page when It sees "http" or "www" strings in "$Comments"

My form validates my emails addresses and everything works fine, I just need to "block" URLs in any fields.(not remove) I want it impossible to submit the form ( I may add other words such as "viagra" also) Once I see the proper code i am sure I can figure out how to modifiy it to flag other words.

Thanks ahead of time

Henry
( I searched goolge and found many sites showing how to remove the words but not cause an error)

[NogDog]

One way (and there is always more than one way), would be to use regular expressions. For a quick example:

if(preg_match('#\b(https?://|www\.)#i', $Comments)) {
    // found a URL and/or web domain
}
else {
    // it's okay
}

Regular expressions are sort of their own little language and will require some studying to become proficient, but it's really useful stuff to know for all sorts of string processing. (In fact, some people over-use it when simpler string functions would suffice. 😉 )

[mrhford]

// found a URL and/or web domain

can be replaced with
print "<meta http-equiv=\"refresh\" content=\"0;URL=error.htm\">";
exit; ?

[NogDog]

mrhford;11040201 wrote:

// found a URL and/or web domain

can be replaced with
print "<meta http-equiv=\"refresh\" content=\"0;URL=error.htm\">";
exit; ?

It can be replaced with whatever you want. 🙂

(I'd probably use PHP's [man]header/man function to do the redirect, if that's what you want to do.)

[mrhford]

Thanks NogDog, I spent the last hour crying and laughing. I checked my HTML and it was like driving in a new city with the wrong map. I fixed that 😃

now after reading the FAQ I have even more questions...... ok not that many. The form works, the PHP you gave me was added but the form is still submitted regardless of whether there are errors or not and it does go to the error page (notfound.htm) when it should.
Can I ask for help with making sure every field filled ?
(can the code be modified to check all/any fields for "http" or "www"?

thanks

Here is my code.

---

<?php

$EmailFrom = "MYwebsite ";
$EmailTo = "[e-mail]";
$Subject = "web site contact form";
$Name = Trim(stripslashes($_POST['Name']));

// validation
$validationOK=true;
if (!$validationOK) {
print "<meta http-equiv=\"refresh\" content=\"0;URL=notfound.html\">";
exit;
}
if(preg_match('#\b(http?://|www.)#i', $Comments)) {
print "<meta http-equiv=\"refresh\" content=\"0;URL=notfound.html\">";
exit;
}
else {
// it's okay
}

// prepare email body text
$Body = "";
$Body .= "Name: ";
$Body .= $Name;
$Body .= "\n";
$Body .= "Email: ";
$Body .= $EmailAddress;
$Body .= "\n";
$Body .= "Phone Number: ";
$Body .= $Phone;
$Body .= "\n";
$Body .= "Address: ";
$Body .= $Address;
$Body .= "\n";
$Body .= "City: ";
$Body .= $City;
$Body .= "\n";
$Body .= "Interested in: ";
$Body .= $Iaminterestedin;
$Body .= "\n";
$Body .= "Item number or description: ";
$Body .= $listofparts;
$Body .= "\n";
$Body .= "How you learned of TMMC: ";
$Body .= $Howdidyouhearaboutus;
$Body .= "\n";
$Body .= "Comments: ";
$Body .= $Comments;
$Body .= "\n";

// send email
$success = mail($EmailTo, $Subject, $Body, "From: <$EmailFrom>");

// redirect to success page
if ($success){
print "<meta http-equiv=\"refresh\" content=\"0;URL=ty.htm\">";
}
else{
print "<meta http-equiv=\"refresh\" content=\"0;URL=notfound.html\">";
}
?>