Simplistik... thanks, I already edited the function to strip the only numbers required field.
DHDESIGN... thanks, I think I already added the password encryption, I just have to test it on the database. about the date, I still need to add some date formatting for input on mysql.
Do you have any suggestions as to how refill the fields in case there is some errors and the page is reloaded?
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>PHP LAB</title>
<link rel="stylesheet" type="text/css" href="global.css">
</head>
<body>
<?php
/*
FUNCTION formToQuery
PARAMETERS
1) table name
2) page to direct after the query is successful
REQUIREMENTS
1) field names should match column names.
Note that the required field name would strip the 'required' part before getting into the query string.
Ex. nameRequired would pass to the query as column 'name'.
2) required fields should contain 'required' as part of the field name. Ex. requiredName field would be required.
Note that the required field name would strip the 'required' part before getting into the query string.
Ex. nameRequired would pass to the query as column 'name'.
3) email fields should contain 'email' as part of the field name in order to be validated as an email address.
4) if field must cointain only numbers include 'number' as part of the field name
5) table must contain columns DATECREATED and DATEMODIFIED
6) do not name any column DATE
7) should have a database connection
PENDING
fix $_FILES
check if field names match column names
*/
function formToQuery($tablename, $location)
{
// initialize variables
$query = 'insert into '.$tablename.' set ';
$formdata = '';
$errors = '<ul>';
$i = 0;
// get field names into $fieldnames array
$fieldnames = array_keys($_POST);
foreach($_POST as $column)
{
$removeProcess = count($_POST)-1;
if($removeProcess>$i)
{
// ----- >>>>> START VALIDATION <<<<< -----
// ----- if field is REQUIRED -----
if(eregi('required',$fieldnames[$i]))
{
// strip whitespace
$column = trim($column);
if($column == '')
{
$requiredfield = str_replace('required', '', $fieldnames[$i]);
$requiredfield = strtoupper($requiredfield);
// error
$errors .= '<li>'.$requiredfield.' is required.</li>';
}
}
// ----- if the field should contain an EMAIL address -----
if(eregi('email',$fieldnames[$i]))
{
$pattern = '/.*@.*\..*/';
if(!preg_match($pattern, $column) > 0)
{
// error
$errors .= '<li>Please enter a valid email address.</li>';
}
}
// ----- if the field should contain ONLY NUMBERS -----
if(eregi('number',$fieldnames[$i]))
{
$column = preg_replace('|[^0-9]|', '', $column);
}
// ----- if form field is a DATE -----
if(eregi('date',$fieldnames[$i]))
{
if($column!="")
{
// !!!!!!!! FORMAT THE DATE FOR MYSQL
// $format = 'd-m-y';
}
}
// ----- if the field is a PASSWORD
if(eregi('password',$fieldnames[$i]))
{
$column = 'md5('.$column.')';
}
// prepare field name for query string
$fieldname = str_replace('required', '', $fieldnames[$i]);
$fieldname = str_replace('number', '', $fieldnames[$i]);
// build query
$query .= $fieldname.'="'.$column.'" ';
// add info to $formdata variable to display it
$formdata .= $fieldnames[$i].': '.$column.'<br />';
// ----- >>>>> END VALIDATION <<<<< -----
}
$i++;
}
// ----- if there are FILES to be uploaded -----
// get field names into $fieldnames array
$fieldnames = array_keys($_FILES);
$i = 0;
foreach($_FILES as $column)
{
$file = $fieldnames[$i];
if(!empty($_FILES[$file]['tmp_name']))
{
// !!!!!!!! FIND WAY TO NAME THE FILES
// build query
$query.= $fieldnames[$i].'="'.$_FILES[$file]['name'].'" ';
// add info to $formdata variable to display it
$formdata .= $fieldnames[$i].': '.$_FILES[$file]['name'].'<br />';
}
$i++;
}
$query .= 'datecreated = CURDATE(), datemodified = CURDATE();';
$errors .= '</ul>';
if($errors == '<ul></ul>')
{
// process query !!!!
}
else
{
echo '<div style="color:#C00; background-color:#FFC;">'.$errors.'</div>';
}
// DISPLAY FORM INFO
echo '<p>'.$formdata.'</p>';
// DISPLAY QUERY
echo '<p>'.$query.'</p>';
if(!mysql_query($query))
{
exit('<div style="color:#C00; background-color:#FFC;">Error performing query.</div>');
}
else
{
header('location:'.$location);
}
}
// if button has been pressed
if(isset($_POST['process'])&&$_POST['process']==1)
{
formToQuery('testing');
}
?>
<form name="testing" method="post" enctype="multipart/form-data" >
<table>
<tr>
<td>Date:</td><td><input type="text" name="inputdate" maxlength="8"><br />DD-MM-YY</td>
</tr>
<tr>
<td>Name:</td><td><input type="text" name="requiredname"></td>
</tr>
<tr>
<td>Password:</td><td><input type="password" name="password"></td>
</tr>
<tr>
<td>Re-enter Password:</td><td><input type="password" name="repassword"></td>
</tr>
<tr>
<td>Email:</td><td><input type="text" name="email"></td>
</tr>
<tr>
<td>Phone:</td><td><input type="text" name="phonenumber"></td>
</tr>
<tr>
<td>Subject:</td><td><input type="text" name="subject"></td>
</tr>
<tr>
<td>Upload file:</td><td><input type="file" name="photo"></td>
</tr>
<tr>
<td>Content:</td><td><textarea name="content"></textarea></td>
</tr>
</table>
<input type="hidden" value="1" name="process" />
<input type=submit value="Submit">
</form>
</body>
</html>