Cookie Problem, i think......

Anon

I have a vote script and i am stoping them from being able to submit more then once but it says i cant run the script form that location.

i get...

Sorry, You can not run this script from this page.

Here is the script can some one please help??

Code
<hr>

<?
$security_domain = "tuna.port-aransas.k12.tx.us/~brooks/con";
$security_domain2= "tuna.port-aransas.k12.tx.us/~brooks/con";
$url = explode("/", $HTTP_REFERER);
if(ereg("$security_domain|$security_domain2", $url[2]))
{
$filesplit = explode(".", $url[4]);
$filename = $filesplit[0];
if(ereg("[0-9]{6}", $filename))
{
$check = "rated";
$check .= $filename;
if (isset($rated))
{
// the person has rated another page so do not overwrite cookie
// add routine to make an array with all cookie values
$count = count($rated);
$i = 0;
while($i < $count)
{
if($rated[$i] == $check)
{
print("<BODY>You have already voted. Thank you.</BODY>");
exit;
}
$i++;
}
// since no rate on this page yet, add new rating to array
$rated[] = $check;
$count++;
$i=0;
while($i < $count)
{
setcookie("rated[$i]", $rated[$i], time()+86400);
$i++;
}
$filename .= ".dat";
$newrate = fopen($filename, "a");
if ($newrate)
{
fputs($newrate, "$rating\n");
fclose($newrate);
print("<p>Thanks for rating my page: $HTTP_REFERER ");
print("<br>with a rating of: $rating</BODY>");
exit;
}
}
else
{
// no cookies exist so set initial cookie and write file
setcookie("rated[0]", $check, time()+86400);
// time to open the unique file for appending new rating
$filename .= ".dat";
$newrate = fopen($filename, "a");
if ($newrate)
{
fputs($newrate, "$rating\n");
fclose($newrate);
print("<p>Thanks for rating my page: $HTTP_REFERER ");
print("<br>with a rating of: $rating</BODY>");
}
}
}
else
{
// diary page is not valid
print("<BODY><p><strong>Sorry this is not a valid diary");
print("page</strong></BODY>");
}
}
else
{
// link did not come from domain, security violation
print("<BODY><p><strong>Sorry, you cannot run this");
print(" script from this location</strong></BODY>");
}
?>

any help is appreciated.

-BS

dannys

Looks like there's a problem with your first ereg. Try printing out the contents of $url[2] and note that ereg is case sensitive (use eregi if you want nonsensitive searches).

Anon

that didnt work...

if you would like to check out the page it is at..

http://tuna.port-aransas.k12.tx.us/~brooks/con/

the code on index.php is...

<pre>
<table>
<form action="send_email.php" method="POST">
<tr>
<td>
From:<br></td><td><input type="text" size=22 name="from">
</td>
</tr>
<tr>
<td>
Subject:</td><td><input type="text" size=22 name="subject" value="TEST">
</td>
</tr>
</table>
<input type="checkbox" name="php_script_list" value="yes"> Yes, add me to
your email
list
<br>
<br>
Comments:
<br>
<textarea rows="6" cols="60" name="comments"></textarea>

and the source for send_mail.php is...

if ($php_script_list == "yes")
{

if(eregi("([[:alnum:].-]+)(@[[:alnum:].-]+.+)", $from))

{

if(file_exists("email_list.txt"))
{
$newfile = fopen("email_list.txt", "r");
while(!feof($newfile))
{
$duplicate = fgetss($newfile, 255);
// is email address submitted already on file?
if(eregi("$from", $duplicate))
{
print("This email $from");
print(" is already in the database. Please go back");
print(" and uncheck the mail list box");
fclose($newfile);
exit;
}
}
fclose($newfile);
$addemail = fopen("email_list.txt", "a");
fputs($addemail, "$from\n");
fclose($addemail);
}
else
{
// since file doesn't already exist, let's create for first time
$newfile = fopen("email_list.txt", "a");
fputs($newfile, "$from\n");
fclose($newfile);
chmod("email_list.txt", 0666);
}
}

}

any help would be greatly appreciated. Thanks..

-BS

Anon

I really need help on this if someone can help....

-BS