Re: [WEB400] PHP Forms processing

["Jeffrey Lee" <jeff@xxxxxxxxxxx>]

I alway just make my own form processing scripts. That way only the 
variables I set are passed... most take ANY posted information.
Now if I had more variables here I'd just add them in this format: $variable 
= $_REQUEST['variable'];
Then you do as you wish with them. You can also just grab anything posted. 
Also you should add some security features like addslashes() or 
escshellcmd().

<?

$books = $_REQUEST['books'];
$type = $_REQUEST['type'];
include'connect.php';

mysql_connect("$host","$username","$pass");
mysql_select_db("$DB_Name");

if ($books != NULL && $type != NULL) {
   $sql = "INSERT INTO myvote (vote, type) ";
   $sql.= "VALUES ('{$books}', '{$type}')";
   mysql_query ($sql);
   mysql_close();
}

mysql_close();

?>


----- Original Message ----- 
From: "Bartell, Aaron L. (TC)" <ALBartell@xxxxxxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Monday, September 06, 2004 2:40 PM
Subject: [WEB400] PHP Forms processing


> Being that we are on the subject of PHP and that is what I am coding
> today I was wondering what people in this list use for processing forms
> within PHP?  I have been searching for a form creator that operates
> similar to CGIDEV2 where you can have a template and just fill in the
> holes from your code.
>
> I have tried a couple different ones out there including Phorm, etc, but
> have found layout limitations among other things.
>
> Aaron Bartell
>
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.