电子邮件前的PHP表格审查

时间:2013-05-01 19:47:51

标签: php forms review

我看到了另一个与此相关的主题,但仍然有点困惑,因为我仍然是PHP的基础。所以我有一个发布到我的Order.php的表单。这发送电子邮件,工作正常。我希望将表单发布到Review.php然后发送。下面是我的Order.PHP(我删除了数组中的一些输入字段,因为它相当长)。我正在考虑review.php我可以使用所有的order.php代码而不是$send = mail($to, $subject, $body, $headers);我只能在某个html中请求$to, $subject, $body, $headers然后有一个sumbit按钮,它会将这些代码发送到订单.php将被简化,因为所有数据都在评论页面中处理。听起来不错吗?

order.php如下

<?php 

$headers = "MIME-Version: 1.0" . "\r\n";
$headers .= "Content-type:text/html;charset=iso-8859-1" . "\r\n";

 $to = "packy@mycompany.com";
 $name = $_REQUEST['FitterName'] ; 
 $from = $_REQUEST['FitterEmail'] ; 
 $headers = "From: $from"; 
 $subject = "Online Order"; 
 $name2 = $_REQUEST['CustomerEmail'] ; 

 $grind = join(", ", $_REQUEST["grind"]);
 $woods = join(", ", $_REQUEST["woods"]);
 $hybrids = join(", ", $_REQUEST["hybrids"]);
 $iron = join(", ", $_REQUEST["iron"]);
 $wedges = join(", ", $_REQUEST["wedges"]);

 $fields = array(); 
 $fields{"AccountName"} = "Accounts's Name:  "; 
 $fields{"FitterName"} = "Fitter's Name:  "; 
 $fields{"CustomerCat"} = "__________________________CUSTOMER INFO__________________________"; 
 $fields{"CustomerName"} = "Customer's Name:  ";
 $fields{"CustomerPhone"} = "Customer's Phone:  ";
 $fields{"CustomerAddress"} = "Customer's Address:  ";



 $body = "We have received the following Online Order from www.mycompany.com:\n\n"; foreach($fields as $a => $b){   $body .= sprintf("%2s %s\n",$b,$_REQUEST[$a]); }
 $body2 = "Please Review the following Online Order from www.mycompany.com:\n\n"; foreach($fields as $a => $b){     $body2 .= sprintf("%2s %s\n",$b,$_REQUEST[$a]); }




 $headers2 = "From: noreply@mycompany.com"; 
 $subject2 = "Thank you for your order"; 
 $autoreply = "Thank you for your order. Customer service will call in the next 24 hours to review your order.";

 $autoreply2 = "Company Customer";

 if($from == '') {print "You have not entered an email, please go back and try again";} 
 else { 
 if($name == '') {print "You have not entered a name, please go back and try again";} 
 else { 
 $send = mail($to, $subject, $body, $headers); 
 $send2 = mail($from, $subject2, $autoreply, $headers2); 
 $send3 = mail($name2, $subject2, $autoreply2, $headers2); 
 if($send) 
 {header( "Location: http://fitter.henry-griffitts.com/fitter/success.php" );} 
 else 
 {print "We encountered an error sending your mail, please review your information"; } 
 }
}
 ?>

2 个答案:

答案 0 :(得分:0)

您可以向用户显示评论页面并隐藏在该页面中,您可以嵌入他们在订单页面上提供的信息。

审核页面确认按钮标记;

<form name="review" action="order.php" method="POST">
  <input type="hidden" name="FitterName" value="Bob Smith">
  <input type="hidden" name="FitterEmail" value="a@b.com">
  <input type="submit" value="Submit">
</form>

当他们点击评论页面上的提交按钮时,他们的订单信息。将被转发到order.php页面。

答案 1 :(得分:0)

以下是review.php文件的基本示例。它将每个字段作为隐藏的输入变量添加到表单中。

<p>Does everything look correct?</p>
<form method="post" action="order.php">
    <ul>
    <?php
        if (is_array($_REQUEST)) {
            foreach ($_REQUEST as $key => $val) {
                echo "<li><strong>" . $key . "</strong>: " . $val . "</li>";

                // This code should support the checkboxes and multiple selects
                if (is_array($val)) {
                    foreach ($val as $val2) {
                        echo "<input type='hidden' name='" . $key . "[]' value='" . $val2 . "' />";
                    }
                }
                else {
                    echo "<input type='hidden' name='" . $key . "' value='" . $val . "' />";
                }
            }
        }
    ?>
    </ul>
    <input type="submit" value="Submit Info" />
</form>

现在在你的order.php上,让我们清理它并简化它,因为。

<?php
    //define some fields
    define("HEADERS",   "MIME-Version: 1.0\r\nContent-type:text/html;charset=iso-8859-1\r\nFrom: noreply@mycompany.com\r\n");
    define("BODY_1",    "We have received the following Online Order from www.mycompany.com:");
    define("BODY_2",    "Please Review the following Online Order from www.mycompany.com:");
    define("SUBJECT_1", "Online Order");
    define("SUBJECT_2", "Thank you for your order");
    define("MY_EMAIL",  "packy@mycompany.com");
    define("REPLY",     "Thank you for your order. Customer service will call in the next 24 hours to review your order.")

    //sanitize your inputs. I like to remove every character that is not allowed
    $data = array(
        'name'   => preg_replace('/[^A-Za-z\\s]/', '', $_POST['FitterName']),
        'email'  => preg_replace('/[^A-Za-z0-9\\.@-_]/', '', $_POST['CustomerEmail']),
        'fitter' => preg_replace('/[^A-Za-z0-9\\.@-_]/', '', $_POST['FitterEmail']),
        'grind'  => preg_replace('/[^A-Za-z\\s,]/', '', implode(',', $_POST['grind'])),
        //the rest of your fields
    );

    //do your field checks here, exit out or return them to the form

    //send your emails
    $send = mail(MY_EMAIL, SUBJECT_1, BODY_1 . print_r($data, true), HEADERS);
    $send2 = mail($data['fitter'], SUBJECT_2, BODY_2 . print_r($data, true), HEADERS);
    $send3 = mail($data['email'], SUBJECT_2, REPLY, HEADERS);

    //more code and redirect