Question

在第一次提交时，这会将用户返回到索引，POST数据仍在URL中。在第二次使用url中的数据提交时，它会返回错误或处理邮件。我不确定究竟是什么导致了这一点。

<?php
if(!isset($_POST['submit']))
{
//This page should not be accessed directly. Need to submit the form.
echo "error; you need to submit the form!";
}
$name = $_POST['name'];
$company = $_POST['company'];
$project = $_POST['project'];
$email = $_POST['email'];
$phone = $_POST['phone'];
$message = $_POST['message'];
unset($_POST);

//Validate first
if(empty($name)||empty($email)) 
{
echo "Name and email are mandatory!";
exit;
}

if(IsInjected($email))
{
echo "Bad email value!";
exit;
}

$email_from = 'wevans.evansweb@gmail.com';
$email_subject = "New Contact Request";
$email_body = "You have received a new message from $name.\n
email: $email\n
company: $company\n
project: $project\n
phone: $phone\n
message: $message\n";

$to = 'wevans.evansweb@gmail.com';
$headers = "From: $email_from \r\n";

mail($to,$email_subject,$email_body,$headers);
//done. redirect to thank-you page.
header('Location: index.html');


// Function to validate against any email injection attempts
function IsInjected($str)
{
  $injections = array('(\n+)',
          '(\r+)',
          '(\t+)',
          '(%0A+)',
          '(%0D+)',
          '(%08+)',
          '(%09+)'
          );
  $inject = join('|', $injections);
  $inject = "/$inject/i";
  if(preg_match($inject,$str))
    {
    return true;
  }
  else
  {
    return false;
  }
}

?>

Answer 1

您确定在表单的HTML中使用method="post"吗？

<FORM action="someURL.php" method="post">

据我所知，当method为get时，表单值会显示在网址中，因为您正在使用$_POST，因此无法按照您的预期为您提供服务在你的PHP中。

PHP表单处理重定向与url中的POST数据

1 个答案: