Form validation issue

------=_NextPart_000_0001_01CA81BD.7E39F510
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_01CA81BD.7E3A9150"

------=_NextPart_001_0002_01CA81BD.7E3A9150
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Good Day,

I need help in in validating a form.

The for is valdated be a javascript frist then if all the
fields are filled in its valaded be PHP.

The Form starts with:

<form name="myForm" action="<?php echo
$_SERVER['PHP_SELF'];?>" method="post" onsubmit='return formValidator()' >

The "formValidator()" goes to a javascript and does display the missing
information in this case BUT then the page gets reloaded and clears all the
javascript error messages and does the PHP validation.

The PHP only runs if the fields are set by testing using 'isset".

Without puting on numeric lines of go can you suggest things I must have
overlooked. Silly request but there must be something I'm overlooking. I
have simular code on other programs but this one is casuing me trouble.

Thanks every so much..

......./Ernie

------=_NextPart_001_0002_01CA81BD.7E3A9150
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta name=3D"Microsoft Theme 2.00" content=3D"rmnsque 011">
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>

</style>

</head>

<body bgcolor=3Dwhite background=3D"cid:image001.jpg [at] 01CA81BD.416D13B0" =
lang=3DEN-CA
link=3D"#996600" vlink=3D"#666666">
<img src=3D"cid:image001.jpg [at] 01CA81BD.416D13B0"
v:src=3D"cid:image001.jpg [at] 01CA81BD.416D13B0" v:shapes=3D"_x0000_Mail" =
width=3D0
height=3D0 class=3Dshape style=3D'display:none;width:0;height:0'>

<div class=3DSection1>

Good Day,<o:p></o:p>

<o:p> </o:p>

 &=
nbsp; I
need help in in validating a form.<o:p></o:p>

 &=
nbsp; The
for is valdated be a javascript frist then if all the fields are filled =
in its
valaded be PHP.<o:p></o:p>

<o:p> </o:p>

 &=
nbsp; The
Form starts with:<o:p></o:p>

 &=
nbsp; <form
name=3D"myForm" action=3D"<?php echo
$_SERVER['PHP_SELF'];?>" method=3D"post" =
onsubmit=3D'return
formValidator()' ><o:p></o:p>

<o:p> </o:p>

The =
“formValidator()”
goes to a javascript and does display the missing information in this =
case BUT
then the page gets reloaded and clears all the javascript error messages =
and
does the PHP validation.<o:p></o:p>

<o:p> </o:p></s=
pan>

The PHP only runs =
if the
fields are set by testing using =
‘isset”.<o:p></o:p>

<o:p> </o:p></s=
pan>

Without puting on =
numeric
lines of go can you suggest things I must have overlooked. Silly request =
but
there must be something I’m overlooking. I have =
simular
code on other programs but this one is casuing me =
trouble.<o:p></o:p>

<o:p> </o:p></s=
pan>

Thanks every so =
much..<o:p></o:p>

<o:p> </o:p></s=
pan>

....../Ernie<o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

</div>

</body>

</html>

------=_NextPart_001_0002_01CA81BD.7E3A9150--

------=_NextPart_000_0001_01CA81BD.7E39F510--

--0016e64c16d4a12d6e047b3642bf
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

"then the page gets reloaded and clears all the javascript error messages
and does the PHP validation."
That is because the form is getting submitted... make sure you js code
prevents form submit if errors are found....

Midhun Girish

On Mon, Dec 21, 2009 at 8:13 AM, Ernie Kemp <ernie.kemp [at] sympatico.ca> wrote=
:

> Good Day,
>
>
>
> I need help in in validating a form.
>
> The for is valdated be a javascript frist then if all the
> fields are filled in its valaded be PHP.
>
>
>
> The Form starts with:
>
> <form name=3D"myForm" action=3D"<?php echo
> $_SERVER['PHP_SELF'];?>" method=3D"post" onsubmit=3D'return formValidator=
()' >
>
>
>
> The =93formValidator()=94 goes to a javascript and does display the missi=
ng
> information in this case BUT then the page gets reloaded and clears all t=
he
> javascript error messages and does the PHP validation.
>
>
>
> The PHP only runs if the fields are set by testing using =91isset=94.
>
>
>
> Without puting on numeric lines of go can you suggest things I must have
> overlooked. Silly request but there must be something I=92m overlooking. =
I
> have simular code on other programs but this one is casuing me trouble.
>
>
>
> Thanks every so much..
>
>
>
> ....../Ernie
>
>
>
>
>
>
>
>
>
>
>

--0016e64c16d4a12d6e047b3642bf--

--Apple-Mail-1--378752498
Content-Type: text/plain;
charset=utf-8;
format=flowed;
delsp=yes
Content-Transfer-Encoding: quoted-printable

Does the js function return false on the errors to block the submission?

Bastien

Sent from my iPod

On Dec 20, 2009, at 9:43 PM, "Ernie Kemp" <ernie.kemp [at] sympatico.ca>
wrote:

> Good Day,
>
>
>
> I need help in in validating a form.
>
> The for is valdated be a javascript frist then if
> all the fields are filled in its valaded be PHP.
>
>
>
> The Form starts with:
>
> <form name=3D"myForm" action=3D"<?php echo $_SERVER
> ['PHP_SELF'];?>" method=3D"post" onsubmit=3D'return formValidator()' >
>
>
>
> The =E2=80=9CformValidator()=E2=80=9D goes to a javascript and does =
display the
> missing information in this case BUT then the page gets reloaded and =

> clears all the javascript error messages and does the PHP validation.
>
>
>
> The PHP only runs if the fields are set by testing using =E2=80=98isset=E2=
=80=9D.
>
>
>
> Without puting on numeric lines of go can you suggest things I must =

> have overlooked. Silly request but there must be something I=E2=80=99m =
overl
> ooking. I have simular code on other programs but this one is cas =

> uing me trouble.
>
>
>
> Thanks every so much..
>
>
>
> ....../Ernie
>
>
>
>
>
>
>
>
>
>

--Apple-Mail-1--378752498--

At 9:43 PM -0500 12/20/09, Ernie Kemp wrote:
>Good Day,
>
> I need help in in validating a form.
> The for is valdated be a javascript frist then if
>all the fields are filled in its valaded be PHP.
>
> The Form starts with:
> <form name="myForm" action="<?php echo
>$_SERVER['PHP_SELF'];?>" method="post" onsubmit='return
>formValidator()' >
>
>The "formValidator()" goes to a javascript and does display the
>missing information in this case BUT then the page gets reloaded and
>clears all the javascript error messages and does the PHP validation.
>
>The PHP only runs if the fields are set by testing using 'isset".
>
>Without puting on numeric lines of go can you suggest things I must
>have overlooked. Silly request but there must be something I'm
>overlooking. I have simular code on other programs but this one
>is casuing me trouble.
>
>Thanks every so much..
>

Ernie:

Client-side javascript can help populate fields and correct any
problems a user might have, but once the form is submitted to the
server, then the data is sent and evaluated server-side, hence
validation.

However, if the server-side evaluation fails and the page is
refreshed, then all the previous values are lost -- UNLESS -- you
keep them in a cookie, database, or session. I suggest using a
session.

Cheers,

tedd

--
-------
http://sperling.com http://ancientstones.com http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

The javascript function formValidator() must return false if any
errors are formed.

>>The PHP only runs if the fields are set by testing using =91isset=94.
You should definitely have a better validation than that. Remember
that all users dont have javascript enabled. Moreover it is very easy
to modify the request variables.

>> However, if the server-side evaluation fails and the page is refreshed, =
then all the previous values are lost -- UNLESS -- you keep them in a cooki=
e, database, or session. I suggest using a session.
This is true when the page is refreshed but I doubt that is the case
here. Since $_SERVER['PHP_SELF'] is being used I think value=3D"<?php
echo $_POST[...] ?>" will be sufficient

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

--000e0cd517147f130f047b76d176
Content-Type: text/plain; charset=ISO-8859-1

Tedd,

If you are using a post method using $_SERVER['PHP_SELF'], then values are
present in the POST array, hence, you would write your html with
interspersed php like so:

<input type="text" name="username" value="<?php if
(isset($_POST['username'])) echo $_POST['username'] ?>" id="username" />

I sometimes use a function for the echoing of these values if I use the same
form for first time (ie. registration) and editing (update), and the
function checks for a $_POST value, then secondly for an existing database
value variable (ie. $row['username']). If either exist, populate the input
with it (precedence given to POST), otherwise it is empty.

The function looks something this:

function echoValue($post=null, $row=null) {
if (isset($post)) {
echo $post;
} elseif (isset($row)) {
echo $row;
}
}

and is used like this:

<input type... value="<?php echoValue($_POST['username'], $row['username'] )
?>" id="username" />

after performing a query on a query-string variable (eg. profile.php?id=57
---> 'SELECT * FROM `users` WHERE `id` = '.$_GET['id'] ) etc.

On Mon, Dec 21, 2009 at 8:03 AM, tedd <tedd.sperling [at] gmail.com> wrote:

> At 9:43 PM -0500 12/20/09, Ernie Kemp wrote:
>
>> Good Day,
>>
>> I need help in in validating a form.
>> The for is valdated be a javascript frist then if all the
>> fields are filled in its valaded be PHP.
>>
>> The Form starts with:
>> <form name="myForm" action="<?php echo
>> $_SERVER['PHP_SELF'];?>" method="post" onsubmit='return formValidator()' >
>>
>> The "formValidator()" goes to a javascript and does display the missing
>> information in this case BUT then the page gets reloaded and clears all the
>> javascript error messages and does the PHP validation.
>>
>> The PHP only runs if the fields are set by testing using 'isset".
>>
>> Without puting on numeric lines of go can you suggest things I must have
>> overlooked. Silly request but there must be something I'm overlooking. I
>> have simular code on other programs but this one is casuing me trouble.
>>
>> Thanks every so much..
>>
>>
>
> Ernie:
>
> Client-side javascript can help populate fields and correct any problems a
> user might have, but once the form is submitted to the server, then the data
> is sent and evaluated server-side, hence validation.
>
> However, if the server-side evaluation fails and the page is refreshed,
> then all the previous values are lost -- UNLESS -- you keep them in a
> cookie, database, or session. I suggest using a session.
>
> Cheers,
>
> tedd
>
> --
> -------
> http://sperling.com http://ancientstones.com http://earthstones.com
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

--000e0cd517147f130f047b76d176--

At 2:22 AM -0800 12/24/09, Allen McCabe wrote:
>Tedd,
>
>If you are using a post method using $_SERVER['PHP_SELF'], then
>values are present in the POST array, hence, you would write your
>html with interspersed php like so:
>
><input type="text" name="username" value="<?php if
>(isset($_POST['username'])) echo $_POST['username'] ?>"
>id="username" />

No, I wouldn't do it that way.

First, a "post method using $_SERVER['PHP_SELF']" is the same as
action="". A form by default, defaults to itself and thus no need for
$_SERVER['PHP_SELF'].

Second, I seldom use any POST variable without sanitizing it first.
As such, my <input> statements always look like --

<input type="text" name="user_name" value="<?php echo($user_name); ?>" >

-- where the variable $user_name has been"sanitized" in some fashion
(i.e., trim, limit length, etc.).

I think that is easier to read and debug. Also, if I am using a
javascript routine (as mentioned in the OP), then I add '
id="user_name" '

Cheers and Merry Christmas.

tedd

--
-------
http://sperling.com http://ancientstones.com http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

At 3:10 PM +0530 12/24/09, kranthi wrote:
>The javascript function formValidator() must return false if any
>errors are formed.
>
>>>The PHP only runs if the fields are set by testing using 'isset".
>You should definitely have a better validation than that. Remember
>that all users dont have javascript enabled. Moreover it is very easy
>to modify the request variables.
>
>>> However, if the server-side evaluation fails and the page is
>>>refreshed, then all the previous values are lost -- UNLESS -- you
>>>keep them in a cookie, database, or session. I suggest using a
>>>session.
>This is true when the page is refreshed but I doubt that is the case
>here. Since $_SERVER['PHP_SELF'] is being used I think value="<?php
>echo $_POST[...] ?>" will be sufficient

I forgot to mention that $_POST does hold on to the values as well --
so, one could use that. However, you still have to repopulate the
form and that was what I was getting at.

Cheers and Merry Christmas.

tedd

--
-------
http://sperling.com http://ancientstones.com http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Form validation issue

Re: Form validation issue

Re: Form validation issue

Re: Form validation issue

Re: Form validation issue

Re: Form validation issue

Re: Form validation issue

Re: Form validation issue