php - 联系表格未通过 php 发送完整的提交数据
问题描述
我有一个使用 javascript 进行更改功能的 HTML 联系表单。我有一个主题的下拉菜单,并根据人们选择的选项显示不同的字段。例如,如果他们选择 Bug 报告,则会出现与选择添加我的组不同的字段。每当用户未填写表单并通过电子邮件发送给我时,他们根据他们选择的主题对问题的回答不会通过电子邮件发送给我。
我已经包含下面的代码,任何帮助表示赞赏。
HTML
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js"></script>
<script type="text/javascript">
$(function () {
$("#select").change(function () {
if ($(this).val() == "subject1") {
$("#EVENT").show();
} else {
$("#EVENT").hide();
}
if ($(this).val() == "subject2") {
$("#GROUPCLUBS").show();
} else {
$("#GROUPCLUBS").hide();
}
if ($(this).val() == "subject3") {
$("#DIRECTORY").show();
} else {
$("#DIRECTORY").hide();
}
if ($(this).val() == "subject4") {
$("#BUG").show();
} else {
$("#BUG").hide();
}
});
});
</script>
<form name="contactform" method="post" action="contact.php">
<table width="450px">
<tr>
<td valign="top">
<label for="name">Name *</label>
</td>
<td valign="top">
<input type="text" name="name" maxlength="50" size="30">
</td>
</tr>
<tr>
<td valign="top">
<label for="email">Email Address *</label>
</td>
<td valign="top">
<input type="text" name="email" maxlength="80" size="30">
</td>
</tr>
<tr>
<td valign="top">
<label for="subject">Subject *</label>
</td>
<td valign="top">
<select name="subject" id="select">
<option value="">-- select an option --</option>
<option value="subject1">Add an Event</option>
<option value="subject2">Add my Group or Club</option>
<option value="subject3">I want listed in the Business Directory</option>
<option value="subject4">Submit a Bug Report</option>
<option value="subject5">Other Questions</option>
</select>
<div id="EVENT" style="display: none">
<label for="EventDate">Event Date</label>
<input type="text" name="eventdate" />
<br>
<label for="EventTime">Event Time</label>
<input type="text" name="eventtime" />
<br>
<label for="EventLocation">Event Location</label>
<input type="text" name="eventlocation" />
<br>
<label for="EventDescription">Event Description</label>
<input type="text" name="eventdescription" />
<br>
<label for="Ticketinfo">Ticket Information</label>
<input type="text" name="eventticketinfo" />
<br>
<label for="ExtraInfo">Extra Info</label>
<input type="text" name="extrainfo" />
<br>
<label for="Website">Website</label>
<input type="text" name="website" />
<br>
<label for="ContactInfo">Contact Info</label>
<input type="text" name="contact" />
</div>
<div id="GROUPCLUBS" style="display: none">
<label for="ClubDescription">Club Description</label>
<input type="text" name="clubdescription" />
<br>
<label for="Meet">When does the club meet?</label>
<input type="text" name="meeting" />
<br>
<label for="Location">Location</label>
<input type="text" name="location" />
<br>
<label for="Cost">Cost of joining</label>
<input type="text" name="cost" />
<br>
<label for="ExtraInfo">Extra Info</label>
<input type="text" name="extrainfo" />
<br>
<label for="ContactInfo">Contact Info</label>
<input type="text" name="contact" />
</div>
<div id="DIRECTORY" style="display: none">
<label for="BusinessDescription">Business Description</label>
<input type="text" name="businessdescription" />
<br>
<label for="BusinessLocation">Business Location</label>
<input type="text" name="location" />
<br>
<label for="OpeningHours">Opening Hours</label>
<input type="text" name="openinghours" />
<br>
<label for="Website">Website</label>
<input type="text" name="website" />
<br>
<label for="ContactInfo">Contact Info</label>
<input type="text" name="contact" />
</div>
<div id="BUG" style="display: none">
<label for="device">Device</label>
<input type="text" name="device" />
<br>
<label for="info"></label>
<strong>Please provide more details in the message box below</strong>
</div>
</td>
</tr>
<tr>
<td valign="top">
<label for="message">Message *</label>
</td>
<td valign="top">
<textarea name="message" maxlength="1000" cols="25" rows="6"></textarea>
</td>
</tr>
<tr>
<td colspan="2" style="text-align:center">
<input type="submit" value="Submit">
</td>
</tr>
</table>
</form>
PHP
<?php
if(isset($_POST['email'])) {
$email_to = "david@davidsthompson.co.uk";
$email_subject = "New Contact Form";
function died($error) {
// your error code can go here
echo "We are very sorry, but there were error(s) found with the form you submitted. ";
echo "These errors appear below.<br /><br />";
echo $error."<br />";
echo "Please go back and fix these errors.<br /><br />";
die();
}
// validation expected data exists
if(!isset($_POST['name']) ||
!isset($_POST['email']) ||
!isset($_POST['subject']) ||
!isset($_POST['message'])) {
died('We are sorry, but there appears to be a problem with the form you submitted.');
}
$name = $_POST['name']; // required
$email_from = $_POST['email']; // required
$subject = $_POST['subject']; // required
$message = $_POST['message']; // required
$error_message = "";
$email_exp = '/^[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}$/';
$string_exp = "/^[A-Za-z .'-]+$/";
if(!preg_match($string_exp,$name)) {
$error_message .= 'The Name you entered does not appear to be valid.<br />';
}
if(!preg_match($email_exp,$email_from)) {
$error_message .= 'The Email Address you entered does not appear to be valid.<br />';
}
if(strlen($subject) < 2) {
$error_message .= 'The Subject you entered does not appear to be valid.<br />';
}
if(strlen($message) < 2) {
$error_message .= 'The Message you entered does not appear to be valid.<br />';
}
if(strlen($error_message) > 0) {
died($error_message);
}
$email_message = "Form details below.\n\n";
function clean_string($string) {
$bad = array("content-type","bcc:","to:","cc:","href");
return str_replace($bad,"",$string);
}
$email_message .= "Name: ".clean_string($name)."\n";
$email_message .= "Email: ".clean_string($email_from)."\n";
$email_message .= "Subject: ".clean_string($subject)."\n";
$email_message .= "Message: ".clean_string($message)."\n";
// create email headers
$headers = 'From: '.$email_from."\r\n".
'Reply-To: '.$email_from."\r\n" .
'X-Mailer: PHP/' . phpversion();
@mail($email_to, $email_subject, $email_message, $headers);
?>
<!-- include your own success html here -->
Thank you for contacting us. We will be in touch with you very soon.
<?php
}
?>
从下图中,您可以看到正在通过电子邮件发送的信息字段。
解决方案
您需要像这样将收集到的变量发送到您的电子邮件正文。
在这之后...
$email_message .= "Message: ".clean_string($message)."\n";
添加这个...
$email_message .= "Event Date: ".clean_string($_POST['eventdate'])."\n";
$email_message .= "Event Time: ".clean_string($_POST['eventtime'])."\n";
//etc...
对您希望在电子邮件中看到的表单字段重复此操作。
你永远不应该像你一样真正接受来自 $_POST 的原始输入,而应该过滤它以防止攻击。
另外我注意到您正在尝试防止电子邮件标头注入,这是一种很好的(并且建议的)做法,但是,请更改您的str_replace
功能str_ireplace
以确保有人无法输入BCC
(等)而不仅仅是bcc
(小写)进入您的表单字段。
推荐阅读
- python - 在 python 上以连接的水平线绘制数据
- vb.net - 如何使用 vb.net 中的数据阅读器从多个表中读取数据?
- r - 将 tibble 扩展到行并使用 R 基于行创建新列
- javascript - 动态创建的选项无法正常工作
- loops - 如何将 SAS 表中的所有 DATETIME 变量转换为 DATE9
- java - Java 8 api 流。需要解决重复密钥问题
- openstack - 只能以管理员用户身份重置 cinder 卷状态
- list - 在循环中有效地聚合(拟合器/选择)大型数据帧并创建新数据帧
- java - 从 Hystrix 获取异常
- node.js - express.handlebars 没有正确路由