my first php code!

yilduz · 06-16-2008, 07:27 PM

I created a php code! I made a guestbook. Rather than find a guestbook code and figure it out, I decided to read some tutorials and make my own. I did it and it works and I now have my own guestbook!

I'm confident in learning php now.

Hurley4540 · 06-16-2008, 07:31 PM

Nice, more than I can make

weblord · 06-16-2008, 07:31 PM

where did you place it? can we see the code?

yilduz · 06-16-2008, 07:41 PM

Originally Posted by weblord

where did you place it? can we see the code?

I placed it on my homepage.

????: NamePros.com http://www.namepros.com/programming/482541-my-first-php-code.html

http://yilduz.com/contact.php#guestbook

It's not the best in the world, it's only very, very basic. I'm going to improve it eventually, but I just started reading php tutorials yesterday. I think it's good for a day of learning.

weblord · 06-16-2008, 07:52 PM

looks good

yilduz · 06-16-2008, 07:54 PM

Originally Posted by weblord

looks good

Thank you!

I've been working very hard to get the html, javascript, css, php and mysql all work together. I think I'll get the hang of it soon.

weblord · 06-16-2008, 07:58 PM

finally paid off.

Originally Posted by yilduz

Thank you!

I've been working very hard to get the html, javascript, css, php and mysql all work together. I think I'll get the hang of it soon.

Eric · 06-16-2008, 08:34 PM

Originally Posted by yilduz

I placed it on my homepage.

????: NamePros.com http://www.namepros.com/showthread.php?t=482541

http://yilduz.com/contact.php#guestbook

It's not the best in the world, it's only very, very basic. I'm going to improve it eventually, but I just started reading php tutorials yesterday. I think it's good for a day of learning.

Not a bad start, but tip - www.php.net/empty

I was able to submit a blank entry

yilduz · 06-16-2008, 08:37 PM

Originally Posted by SecondVersion

Not a bad start, but tip - www.php.net/empty
????: NamePros.com http://www.namepros.com/showthread.php?t=482541

I was able to submit a blank entry

Ah, thank you.

That's one of the reasons I've been posting it. I'm ALWAYS looking for more tips, help, ideas, etc...

thank you. I'll look at it and make the appropriate edits.

wikes82 · 06-16-2008, 09:29 PM

hmm, you need to filter HTML tag in input...
http://en.wikipedia.org/wiki/Cross-site_scripting

hint: http://us.php.net/strip_tags

xrvel · 06-17-2008, 01:03 AM

Who put an alert box there?

I prefer htmlentities than stripping tags, btw.

wikes82 · 06-17-2008, 01:44 AM

Originally Posted by xrvel

Who put an alert box there?

sorry, I just can't resist ...

i did it...

Barrucadu · 06-17-2008, 02:25 AM

Well done, it's good for a first start. I learned PHP by making an image hosting script, followed by an arcade script.

Mujahid · 06-17-2008, 02:51 AM

I`m also learning php these days. I also know C/C++ so its becoming easy for me to learn php. I`ve left a comment on your guestbook as well.

Smiler · 06-17-2008, 02:52 AM

Where can you get some good practice and tutorial for php coding. I know HTML but I'm hoping to learn php codes in the near future. I've been reading about php and I've learn that its a very dynamic code which is really cool IMO.

yilduz · 06-17-2008, 06:47 AM

Originally Posted by Smiler

Where can you get some good practice and tutorial for php coding. I know HTML but I'm hoping to learn php codes in the near future. I've been reading about php and I've learn that its a very dynamic code which is really cool IMO.

When I coded my guestbook, I was actually looking at several tutorials. I'd google for tutorials and look at a few, when they all did something similar and had the same bit of code, i knew that's what did it. I've noticed that many, many php tutorials are horribly non-descriptive. Most just show a working code and say what the entire thing does. Not really a tutorial, if you ask me. Maybe I'll write some when I learn a bit more.
????: NamePros.com http://www.namepros.com/showthread.php?t=482541
________________
As soon as I saw that little wazzup box pop up, I knew you guys were doing more stuff to see what I did wrong.

Thank you, though. I'll look at what you guys have shown me and learn a bit more.

Thanks for the comments and the help.

Quote:

Well done, it's good for a first start. I learned PHP by making an image hosting script, followed by an arcade script.

As soon as I get the guestbook good, project 2 is going to be a text-based game.

yilduz · 06-17-2008, 01:57 PM

I've been looking around those links you guys gave me. I think it's good now.

Anyone want to check it for me?

thebrokenbox · 06-17-2008, 07:09 PM

Still has annoying javascript popups. It's a nice little script and stuff. Now work on adding anti-spam measures and that whole blank and html issues. Other then that great job. I need to get back into PHP

yilduz · 06-17-2008, 08:08 PM

Originally Posted by thebrokenbox

Still has annoying javascript popups. It's a nice little script and stuff. Now work on adding anti-spam measures and that whole blank and html issues. Other then that great job. I need to get back into PHP

I think I eliminated those problems. The boxes were already put there from other people. i'll get rid of them. See if you can still add that stuff.

Eric · 06-17-2008, 08:36 PM

Pulled this from one of my projects, try this:

PHP Code:

  /**

* Strip any unsafe tags/chars/attributes from input values.

*

* @param  string  Value to be cleaned

* @param  boolean Strip \r\n ?

* @return string

*/

function sanitize($value, $strip_crlf = true)

{

    // Some of what we have in the $search array may not be needed, but let's be safe.

    $search = array(

        '@<script[^>]*?>.*?</script>@si',

        '@<applet[^>]*?>.*?</applet>@si',

        '@<object[^>]*?>.*?</object>@si',

????: NamePros.com http://www.namepros.com/showthread.php?t=482541
        '@<iframe[^>]*?>.*?</iframe>@si',

        '@<style[^>]*?>.*?</style>@si',

        '@<form[^>]*?>.*?</form>@si',

        '@<[\/\!]*?[^<>]*?>@si',

        '@&(?!(#[0-9]+|[a-z]+);)@si'

    );

 
    if ($strip_crlf)

    {

        array_push($search, '@([\r\n])[\s]+@');

    }

    $value = preg_replace($search, '', $value);

????: NamePros.com http://www.namepros.com/showthread.php?t=482541
 
    // Make sure we get everything..

    $value = strip_tags($value);

 
    return clean($value);

}

 
/**

* Cleans either a string, or can clean an entire array of values:

*    clean($array);

*

* @param  mixed  Value to be cleaned

* @return mixed

*/

function clean($value)

{

    if (is_array($value))

    {

        foreach ($value AS $key => $val)

        {

            if (is_string($val))

            {

                $value["$key"] = trim(stripslashes($val));

            }

            else if (is_array($val))

            {

                $value["$key"] = clean($value["$key"]);

            }

        }

        return $value;

    }

    return trim(stripslashes($value));

}

Example:

PHP Code:

  $name = sanitize($_POST['name']);

-Ray- · 06-20-2008, 10:33 AM

Originally Posted by yilduz

I created a php code! I made a guestbook. Rather than find a guestbook code and figure it out, I decided to read some tutorials and make my own. I did it and it works and I now have my own guestbook!
????: NamePros.com http://www.namepros.com/showthread.php?t=482541

I'm confident in learning php now.

yep.. ive been working with php for 5 years off and on.. i dont use it extensivivly, but rather just for my little projects.

itnashvillecom · 06-25-2008, 05:26 AM

Very nice, great job!!

mholt · 06-27-2008, 11:40 AM

Couldn't hurt to run mysql_real_escape_string() on all the input put into the database, either.

yilduz · 06-27-2008, 08:24 PM

Originally Posted by mholt

Couldn't hurt to run mysql_real_escape_string() on all the input put into the database, either.

I'm not sure what that is, but I'll look it up. Thank you for the tip.

mholt · 06-27-2008, 11:50 PM

Originally Posted by yilduz

I'm not sure what that is, but I'll look it up. Thank you for the tip.

Sure - basically, it prevents people from doing an SQL injection attack against your database.

06-16-2008, 07:27 PM	THREAD STARTER #1 (permalink)
yilduz Your face is regfee! Join Date: May 2008 Location: Oregon Posts: 1,075 Follow @yilduz	my first php code! I created a php code! I made a guestbook. Rather than find a guestbook code and figure it out, I decided to read some tutorials and make my own. I did it and it works and I now have my own guestbook! I'm confident in learning php now. __________________ Looking for fantasy hockey owners to begin the new season on ESPN. Deep league with lots of owners and a very high % of keepers (dynasty league). Looking for active owners because this league will continue year after year. My homepage \| I miss my dog - Athena

06-16-2008, 07:31 PM	#3 (permalink)
weblord NamePros Legend Join Date: Dec 2005 Location: Philippines - www.Nabaza.com Posts: 19,785	where did you place it? can we see the code? __________________ Nabaza.com - Amaia

06-16-2008, 07:52 PM	#5 (permalink)
weblord NamePros Legend Join Date: Dec 2005 Location: Philippines - www.Nabaza.com Posts: 19,785	looks good __________________ Nabaza.com - Amaia

06-16-2008, 09:29 PM	#10 (permalink)
wikes82 NamePros Regular Join Date: Sep 2006 Location: K-R.NET Posts: 902	hmm, you need to filter HTML tag in input... http://en.wikipedia.org/wiki/Cross-site_scripting hint: http://us.php.net/strip_tags __________________ LogicBoxes/Directi/Resell.biz Domain Catcher for Windows,Linux,Mac OSX

06-17-2008, 01:03 AM	#11 (permalink)
xrvel i love automation Join Date: Nov 2007 Location: xrvel.com Posts: 1,620 Follow @xrvel	Who put an alert box there? I prefer htmlentities than stripping tags, btw. __________________ Xrvel \| Free Wordpress Plugins \| Desain \| Bodoh \| WP License

06-16-2008, 07:31 PM	#2 (permalink)
Hurley4540 Account Suspended Join Date: May 2003 Posts: 2,386	Nice, more than I can make

06-17-2008, 02:25 AM	#13 (permalink)
Barrucadu Senior Member Join Date: Aug 2005 Location: East Yorkshire, England Posts: 2,689 Follow @barrucadu	Well done, it's good for a first start. I learned PHP by making an image hosting script, followed by an arcade script. __________________ Website \| Blog Arch Hurd developer; GNU Webmaster; FSF member #8385

06-17-2008, 02:51 AM	#14 (permalink)
Mujahid NamePros Regular Join Date: Apr 2007 Location: Pakistan Posts: 450 Follow @mujahidishtiaq	I`m also learning php these days. I also know C/C++ so its becoming easy for me to learn php. I`ve left a comment on your guestbook as well. __________________ ePaisa.PK \| Earn Money Online from Pakistan peepri \| Articles,Columns, News & Information I'm a freelance PHP WEB DEVELOPER \| PM me if you need some work

06-17-2008, 02:52 AM	#15 (permalink)
Smiler Senior Member Join Date: Jul 2007 Posts: 1,360	Where can you get some good practice and tutorial for php coding. I know HTML but I'm hoping to learn php codes in the near future. I've been reading about php and I've learn that its a very dynamic code which is really cool IMO. __________________ iPod Touch Tutorials \| Custom Made Wordpress Website \| 24 .edu Backlinks DoFollow Blog Comment Service \| Exact Match Domains $1 Each \|

06-17-2008, 01:57 PM	THREAD STARTER #17 (permalink)
yilduz Your face is regfee! Join Date: May 2008 Location: Oregon Posts: 1,075 Follow @yilduz	I've been looking around those links you guys gave me. I think it's good now. Anyone want to check it for me? __________________ Looking for fantasy hockey owners to begin the new season on ESPN. Deep league with lots of owners and a very high % of keepers (dynasty league). Looking for active owners because this league will continue year after year. My homepage \| I miss my dog - Athena

06-17-2008, 07:09 PM	#18 (permalink)
thebrokenbox NamePros Regular Join Date: May 2008 Location: USA Posts: 609	Still has annoying javascript popups. It's a nice little script and stuff. Now work on adding anti-spam measures and that whole blank and html issues. Other then that great job. I need to get back into PHP __________________ Learn how to make the most from Points2Shop Sig Link Available- Only 50NP$/month. PM me.

06-17-2008, 08:36 PM	#20 (permalink)
Eric Senior Member Join Date: Mar 2005 Posts: 4,948	Pulled this from one of my projects, try this: PHP Code: /** * Strip any unsafe tags/chars/attributes from input values. * * @param string Value to be cleaned * @param boolean Strip \r\n ? * @return string / function sanitize($value, $strip_crlf = true) { // Some of what we have in the $search array may not be needed, but let's be safe. $search = array( '@<script[^>]?>.?</script>@si', '@<applet[^>]?>.?</applet>@si', '@<object[^>]?>.?</object>@si', ????: NamePros.com http://www.namepros.com/showthread.php?t=482541 '@<iframe[^>]?>.?</iframe>@si', '@<style[^>]?>.?</style>@si', '@<form[^>]?>.?</form>@si', '@<[\/\!]?[^<>]?>@si', '@&(?!(#[0-9]+\|[a-z]+);)@si' ); if ($strip_crlf) { array_push($search, '@([\r\n])[\s]+@'); } $value = preg_replace($search, '', $value); ????: NamePros.com http://www.namepros.com/showthread.php?t=482541 // Make sure we get everything.. $value = strip_tags($value); return clean($value); } /* * Cleans either a string, or can clean an entire array of values: * clean($array); * * @param mixed Value to be cleaned * @return mixed */ function clean($value) { if (is_array($value)) { foreach ($value AS $key => $val) { if (is_string($val)) { $value["$key"] = trim(stripslashes($val)); } else if (is_array($val)) { $value["$key"] = clean($value["$key"]); } } return $value; } return trim(stripslashes($value)); } Example: PHP Code: `$name = sanitize($_POST['name']);`

06-25-2008, 05:26 AM	#22 (permalink)
itnashvillecom Account Closed Join Date: Jun 2008 Posts: 156	Very nice, great job!!

06-27-2008, 11:40 AM	#23 (permalink)
mholt DNOA Member Join Date: May 2004 Posts: 5,040	Couldn't hurt to run mysql_real_escape_string() on all the input put into the database, either.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)