验证我的PHP表单并提交到数据库

时间:2012-04-17 20:22:06

标签: php mysql database forms validation

基本上我正在撰写一份评论表,用户填写有关特定产品的项目,并在提交表格时调用process.php验证表格,并在提交时没有错误地通过电子邮件发送给我。然后它将用户返回到表单页面,并显示已提交的错误或表示已成功提交,这一切都很好但我现在需要做的是当表单填写正确时我仍然想要电子邮件和返回到表单的页面,但也将数据插入我的数据库。我的表单验证工作得很好,直到我尝试弹出一些代码插入数据库,然后我得到这些错误......

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/XZXZ/support/database.inc:16) in /home/XZXZ/public_html/Reviews/process.php on line 113

Warning: Cannot modify header information - headers already sent by (output started at /home/XZXZ/support/database.inc:16) in /home/XZXZ/public_html/Reviews/process.php on line 117

我只需要知道我可以在哪里播放这个以避免这些错误,并且仍然可以正常工作。以下是process.php文件:

<?php

    if( isset($_POST) ){  

        //form validation vars  
        $formok = true;  
        $errors = array();  

        //sumbission data  
        $ipaddress = $_SERVER['REMOTE_ADDR'];  
        $sub_date = date('d/m/Y');  
        $sub_time = date('H:i:s');  

        //form data
        $sub_date = $_POST['sub_date'];  
        $sub_time = $_POST['sub_time'];  
        $review_title = $_POST['review_title'];
        $rating = $_POST['rating'];
        $pros = $_POST['pros'];  
        $cons = $_POST['cons'];  
        $best_uses = $_POST['best_uses'];  
        $comments = $_POST['comments'];
        $upload = $_POST['upload']; 
        $recommend = $_POST['recommend'];
        $reviewer_name = $_POST['reviewer_name'];
        $reviewer_desc = $_POST['reviewer_desc'];
        $reviewer_loc = $_POST['reviewer_loc'];



        //form validation to go here....  

    }  

        //validate review title is not empty  
    if(empty($review_title)){  
        $formok = false;  
        $errors[] = "You have not entered a title for this review";  
    }

        //validate rating is selected  
    if (isset ($_POST['rating']) && ($_POST['rating'] == '' )) {
        $formok = FALSE;
        $errors[] = "You have not selected a rating for the product";
    } 

        //validate pros is not empty  
    if(empty($pros)){  
        $formok = false;  
        $errors[] = "You have not entered any pros";   
    }

        //validate cons is not empty  
    if(empty($cons)){  
        $formok = false;  
        $errors[] = "You have not entered any cons";  
    }

        //validate name is not empty  
    if(empty($reviewer_name)){  
        $formok = false;  
        $errors[] = "You have not entered your name";  
    }

        //validate desc is not empty  
    if(empty($reviewer_desc)){  
        $formok = false;  
        $errors[] = "You have not entered your description";  
    }

        //validate location is not empty  
    if(empty($reviewer_loc)){  
        $formok = false;  
        $errors[] = "You have not entered your location";  
    } 

        //send email if all is ok  
    if($formok){  

        $headers = "From: reviews@XZXZ.com" . "\r\n";  
        $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";  

        $emailbody = "<p>You have received a new product review pending approval from XZXZ.com</p> 
                      <p><strong>Review Title: </strong> {$review_title} </p>
                      <p><strong>Rating: </strong> {rating} </p>
                      <p><strong>Pros: </strong> {$pros} </p> 
                      <p><strong>Cons: </strong> {$cons} </p> 
                      <p><strong>Best Uses: </strong> {$best_uses} </p> 
                      <p><strong>Comments: </strong> {$comments} </p>
                      <p><strong>Upload: </strong> {$upload} </p> 
                      <p><strong>Recommend: </strong> {$recommend} </p>
                      <p><strong>Name: </strong> {$reviewer_name} </p>
                      <p><strong>Description: </strong> {$reviewer_desc} </p> 
                      <p><strong>Location: </strong> {$reviewer_loc} </p>
                      <p>This message was sent from the IP Address: {$ipaddress} on {$date} at {$time}</p>";  

        mail("XX@XZXZ.com","New Pending Review",$emailbody,$headers);

        //insert to database    

        require("/home/XZXZ/support/database.inc");

        $SQL="INSERT INTO 'XZXZ_rvs'.'reviews_prod' (sub_date, sub_time, review_title, rating, pros, cons, best_uses, comments, upload, recommend, reviewer_name, reviewer_desc, reviewer_loc) VALUES ('$_POST[$sub_date]','$_POST[$sub_time]','$_POST[$review_title]','$_POST[$rating]','$_POST[$pros]','$_POST[$cons]','$_POST[$best_uses]','$_POST[$comments]','$_POST[$upload]','$_POST[$recommend]','$_POST[$reviewer_name]','$_POST[$reviewer_desc]','$_POST[$reviewer_loc]')";

    }
        //what we need to return back to our form  
    $returndata = array(  
        'posted_form_data' => array(  
            'review_title' => $review_title,
            'rating' => $rating, 
            'pros' => $pros,  
            'cons' => $cons,  
            'best_uses' => $best_uses,  
            'comments' => $comments,
            'upload' => $upload,
            'recommend' => $recommend,
            'reviewer_name' => $reviewer_name,  
            'reviewer_desc' => $reviewer_desc,
            'reviewer_loc' => $reviewer_loc  
        ),  
        'form_ok' => $formok,  
        'errors' => $errors  
    );
    //if this is not an ajax request  
if(empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) !== 'xmlhttprequest'){  

    //set session variables  
    session_start();  
    $_SESSION['cf_returndata'] = $returndata;  

    //redirect back to form  
    header('location: ' . $_SERVER['HTTP_REFERER']);  

} 

3 个答案:

答案 0 :(得分:1)

您必须在任何发送到浏览器之前添加脚本,包括空白行或空格。如果您关闭此脚本之前包含的PHP脚本文件(?>),并且您的编辑器,FTP客户端或其他应用程序在文件末尾添加一个空行(这是常见的),则可能会发生这种情况。 )。为了防止这种情况发生,只需将PHP脚本保持开放状态(如果整个文件是PHP,则省略?>)。流浪echo(或类似的,例如printprint_var等)也可能导致此问题。

在您的警告中,/home/XZXZ/support/database.inc 16 die();就会发生这种情况。

另外,正如Saurabh所说,必须在每header("Location: ...");之后放置header(),因为Location: ...函数不会重定向用户 - 它只发送{{1}}作为浏览器的标题,并留给浏览器完成剩下的工作 - 然而,服务器不知道你是在重定向用户,所以它会继续运行脚本。因此,您必须终止脚本以防止执行任何其他代码。

答案 1 :(得分:1)

您必须在任何html标记之前启动会话

答案 2 :(得分:0)

请您分享/home/XZXZ/support/database.inc中的内容。我没有看到您执行查询的位置。但是看看错误,我觉得/home/XZXZ/support/database.inc正在尝试设置重定向。使用die()

重定向后,最好放置header