在PHP邮件中清空$ _POST()

Question

一些帮助以下将非常感谢!我一直在搜索网络和stackoverflow几个小时.我的php邮件功能有这个问题.

我的网站上有一个表单(该网站使用wordpress),有两个文本字段,名称和电话号码.表单中还有一个显示当前URL的隐藏字段,因此我们可以看到填写表单的页面.此信息也存储在php会话中.

<?php session_start();
$_SESSION['url'] = $_SERVER['REQUEST_URI']; 
?> 

<form name="callback" action="callme.php" method="post" onsubmit="return(validate());">
<label>Name:</label><input type="text" name="name" size=15 />
<label>Tel:</label><input class="sky" type="text" name="tel" size=15 />
<div id="afterfive"><p>Call after five<input type="checkbox" name="afterfive" value="Call back after five"></p></div>
<input type="hidden" name="url" value="<?php echo $_SESSION['url']; ?>">
<input type="submit" class="classname" value="Call me back!" title="Call me back!" />
</form>

<script>
function validate()
{
if( document.callme.name.value == "" )
{
 alert( "Please fill in your name" );
 document.callme.name.focus() ;
 return false;
 }
if( document.callme.tel.value == "" )
{
alert( "Please fill in your phone number" );
document.callme.tel.focus() ;
return false;
}
}
</script>

以下php代码是callme.php:

<?php session_start();

$name = $_POST['name'];
$tel = $_POST['tel'];
$afterfive = $_POST['afterfive']; 
$url = $_POST['url'];

$to = "me@myemail.com";
$subject = "Please call back $name";
$message .= "Hi, the following person would like to be called back: \n";
$message .= "Name: $name \n";
$message .= "Phonenumber: $tel \n";
$message .= "$afterfive \n";
$message .= "This message was send from this page: $url \n";
$headers = "From: meagain@myemail.com" . "\r\n";
$headers .= "BCC: meagain@myemail.com" . "\r\n";

if(mail($to, $subject, $message, $headers)){
$_SESSION['name'] = $_POST['name'];
$_SESSION['tel'] = $_POST['tel'];
header("Location: http://www.mywebsite.thankyou");
}

?>

提交表单后,访问者将被重定向到我们的谢谢页面,并有机会使用第二个表单填写其他信息.先前存储在php会话中的信息(表单字段名称,tel和url)将添加到隐藏表单字段中.

这大部分时间都可以正常工作,但有时我们会收到所有或部分字段为空的电子邮件.当然,这可能是禁用javascript的用户或提交空白表单的谷歌机器人,但奇怪的是有时甚至url字段都是空的(表单在我们的主页上不可见).不应该$ _SERVER ['REQUEST_URI']仍然有效吗？

我在考虑添加php表单验证,但我不确定这会解决问题.这可能与wordpress的超级缓存插件有关吗？或者它可能与php会话有关？

Answer 1

"但有时我们会收到所有或某些字段为空的电子邮件"

您应该使用服务器端方法而不是JS,例如

if(empty($_POST['name'])){ die("You need to enter your name."); 

(JS总是可以被用户禁用,一个可能的原因是空的电子邮件/字段)

这将确保您希望的字段不是空的,可以填充.结合Andrewsi提到的内容,if(isset($_POST['submit'])){在处理程序的顶部使用,并将提交按钮命名为直接访问的name="submit"方式,callme.php如果没有单击提交按钮,则不会处理信息.

例如:

注意:还有很多其他方法可以实现这一点,但这是一种基本但有效的方法.

命名您的提交按钮,例如:

<input type="submit" name="submit" value="Submit">

在你的情况下,它将是:

<input type="submit" name="submit" class="classname" value="Call me back!" title="Call me back!" />

PHP处理程序

<?php 

session_start();

if(isset($_POST['submit'])){

    if(empty($_POST['name'])){ die("You need to enter your name."); }
    if(empty($_POST['tel'])){ die("You need to enter your telephone number."); }
    if(empty($_POST['afterfive'])){ die("You need to fill this field."); }
    if(empty($_POST['url'])){ die("You need to fill this field."); }

    $name = $_POST['name'];
    $tel = $_POST['tel'];
    $afterfive = $_POST['afterfive']; 
    $url = $_POST['url'];

    $to = "me@myemail.com";
    $subject = "Please call back $name";
    $message .= "Hi, the following person would like to be called back: \n";
    $message .= "Name: $name \n";
    $message .= "Phonenumber: $tel \n";
    $message .= "$afterfive \n";
    $message .= "This message was send from this page: $url \n";
    $headers = "From: meagain@myemail.com" . "\r\n";
    $headers .= "BCC: meagain@myemail.com" . "\r\n";

    if(mail($to, $subject, $message, $headers)){
        $_SESSION['name'] = $_POST['name'];
        $_SESSION['tel'] = $_POST['tel'];
        header("Location: http://www.mywebsite.thankyou");
    }

}

// You could use this at end also to show a message
// if callme.php is accessed directly.
// else {echo "You cannot do that from here.";exit;}

?>