发送邮件前检查PHP表单


php form review before email

我看到了另一个与此相关的主题,但仍然有点困惑,因为我仍然是PHP的基础。因此,我有一个表单,张贴到我的订单。php。这发送电子邮件和工作正常。我想表单张贴到Review.php然后发送。下面是我的Order.PHP(我从数组中删除了一些输入字段,因为它相当长)。我在想,在review.php上,我可以使用所有的order.php代码,而不是$send = mail($to, $subject, $body, $headers);,我可以在一些html中请求$to, $subject, $body, $headers,然后有一个sumbit按钮,将这些发送到order.php,这将被简化,因为所有的数据都在评论页面中处理。听起来对吗?

order.php如下所示

<?php 
$headers = "MIME-Version: 1.0" . "'r'n";
$headers .= "Content-type:text/html;charset=iso-8859-1" . "'r'n";
 $to = "packy@mycompany.com";
 $name = $_REQUEST['FitterName'] ; 
 $from = $_REQUEST['FitterEmail'] ; 
 $headers = "From: $from"; 
 $subject = "Online Order"; 
 $name2 = $_REQUEST['CustomerEmail'] ; 
 $grind = join(", ", $_REQUEST["grind"]);
 $woods = join(", ", $_REQUEST["woods"]);
 $hybrids = join(", ", $_REQUEST["hybrids"]);
 $iron = join(", ", $_REQUEST["iron"]);
 $wedges = join(", ", $_REQUEST["wedges"]);
 $fields = array(); 
 $fields{"AccountName"} = "Accounts's Name:  "; 
 $fields{"FitterName"} = "Fitter's Name:  "; 
 $fields{"CustomerCat"} = "__________________________CUSTOMER INFO__________________________"; 
 $fields{"CustomerName"} = "Customer's Name:  ";
 $fields{"CustomerPhone"} = "Customer's Phone:  ";
 $fields{"CustomerAddress"} = "Customer's Address:  ";

 $body = "We have received the following Online Order from www.mycompany.com:'n'n"; foreach($fields as $a => $b){   $body .= sprintf("%2s %s'n",$b,$_REQUEST[$a]); }
 $body2 = "Please Review the following Online Order from www.mycompany.com:'n'n"; foreach($fields as $a => $b){     $body2 .= sprintf("%2s %s'n",$b,$_REQUEST[$a]); }


 $headers2 = "From: noreply@mycompany.com"; 
 $subject2 = "Thank you for your order"; 
 $autoreply = "Thank you for your order. Customer service will call in the next 24 hours to review your order.";
 $autoreply2 = "Company Customer";
 if($from == '') {print "You have not entered an email, please go back and try again";} 
 else { 
 if($name == '') {print "You have not entered a name, please go back and try again";} 
 else { 
 $send = mail($to, $subject, $body, $headers); 
 $send2 = mail($from, $subject2, $autoreply, $headers2); 
 $send3 = mail($name2, $subject2, $autoreply2, $headers2); 
 if($send) 
 {header( "Location: http://fitter.henry-griffitts.com/fitter/success.php" );} 
 else 
 {print "We encountered an error sending your mail, please review your information"; } 
 }
}
 ?>

可以。

您可以向用户展示一个评论页面,并在该页面中隐藏您可以嵌入他们在订单页面上提供的信息。

查看页面确认按钮标记;

<form name="review" action="order.php" method="POST">
  <input type="hidden" name="FitterName" value="Bob Smith">
  <input type="hidden" name="FitterEmail" value="a@b.com">
  <input type="submit" value="Submit">
</form>

当他们点击审查页面上的提交按钮时,他们的订单信息。将转发到order.php页面

下面是一个非常基本的示例,说明您的review.php文件可能是什么样子。它将每个字段添加为表单中的隐藏输入变量。

<p>Does everything look correct?</p>
<form method="post" action="order.php">
    <ul>
    <?php
        if (is_array($_REQUEST)) {
            foreach ($_REQUEST as $key => $val) {
                echo "<li><strong>" . $key . "</strong>: " . $val . "</li>";
                // This code should support the checkboxes and multiple selects
                if (is_array($val)) {
                    foreach ($val as $val2) {
                        echo "<input type='hidden' name='" . $key . "[]' value='" . $val2 . "' />";
                    }
                }
                else {
                    echo "<input type='hidden' name='" . $key . "' value='" . $val . "' />";
                }
            }
        }
    ?>
    </ul>
    <input type="submit" value="Submit Info" />
</form>

现在在order.php中,让我们清理并简化一下,因为。

<?php
    //define some fields
    define("HEADERS",   "MIME-Version: 1.0'r'nContent-type:text/html;charset=iso-8859-1'r'nFrom: noreply@mycompany.com'r'n");
    define("BODY_1",    "We have received the following Online Order from www.mycompany.com:");
    define("BODY_2",    "Please Review the following Online Order from www.mycompany.com:");
    define("SUBJECT_1", "Online Order");
    define("SUBJECT_2", "Thank you for your order");
    define("MY_EMAIL",  "packy@mycompany.com");
    define("REPLY",     "Thank you for your order. Customer service will call in the next 24 hours to review your order.")
    //sanitize your inputs. I like to remove every character that is not allowed
    $data = array(
        'name'   => preg_replace('/[^A-Za-z''s]/', '', $_POST['FitterName']),
        'email'  => preg_replace('/[^A-Za-z0-9''.@-_]/', '', $_POST['CustomerEmail']),
        'fitter' => preg_replace('/[^A-Za-z0-9''.@-_]/', '', $_POST['FitterEmail']),
        'grind'  => preg_replace('/[^A-Za-z''s,]/', '', implode(',', $_POST['grind'])),
        //the rest of your fields
    );
    //do your field checks here, exit out or return them to the form
    //send your emails
    $send = mail(MY_EMAIL, SUBJECT_1, BODY_1 . print_r($data, true), HEADERS);
    $send2 = mail($data['fitter'], SUBJECT_2, BODY_2 . print_r($data, true), HEADERS);
    $send3 = mail($data['email'], SUBJECT_2, REPLY, HEADERS);
    //more code and redirect