Contact form get email

[infinitus 8]

Hello, it's my first post and I'm not sure if is the right place.
I want to integrate some contact form into my website, but every page I have diferent email address and ID, 2 or 3 page it's ok, I can do manually, but it will be hundreds of page and hundred email address in database.
So, I try this to fill out the $email fild:

My Code:
<?php
$sql_email = "SELECT EMAIL FROM USERS WHERE ID = '$_GET[get_id]'";

$email = array();

$query = mysql_query($sql_email) or die(mysql_error());

while($r = mysql_fetch_array($query )){
$email[] = $r;
}
?>

Contact Form:
<?php
$email ='[e-mail]';// <<=== update to your email address

session_start();
.
.
.

I'm not programmer and I tried everythink, but not is working, :banghead: any Idea?
Thank you in advanced.

[EvolutionFallen]

Hello, it's my first post and I'm not sure if is the right place.
I want to integrate some contact form into my website, but every page I have diferent email address and ID, 2 or 3 page it's ok, I can do manually, but it will be hundreds of page and hundred email address in database.
So, I try this to fill out the $email fild:

My Code:
<?php
$sql_email = "SELECT EMAIL FROM USERS WHERE ID = '$_GET[get_id]'";

$email = array();

$query = mysql_query($sql_email) or die(mysql_error());

while($r = mysql_fetch_array($query )){
$email[] = $r;
}
?>

Contact Form:
<?php
$email ='[e-mail]';// <<=== update to your email address

session_start();
.
.
.

I'm not programmer and I tried everythink, but not is working, :banghead: any Idea?
Thank you in advanced.

Copy and paste this line under the one that says $sql_email = SELECT... :

echo "<br />sql query is: $sql_email<br />";

Then reload the page and paste back in here what it says. It may also help if you copy and paste the full URL of the web page in your reply. If you don't want to give out the domain, just paste whatever is after the ".com/"

Also, please use [ code ] tags around your code to make it easier to read ;)

- EF

[infinitus 8]

Copy and paste this line under the one that says $sql_email = SELECT... :

echo "<br />sql query is: $sql_email<br />";

Thank you, I got the ID, but not the email address, please take a look, the contact form is under google streetview.

http://www.infinitus8.net/businessdetail-31-7.htm

[EvolutionFallen]

Try using mysql_fetch_assoc instead of mysql_fetch_array on the line with your while loop.

Edit: I don't understand, what is the purpose of the line $email ='[e-mail]';// <<=== update to your email address ?

[infinitus 8]

This is the begin of original php contact form:

<?php 
$your_email ='[e-mail]';// <<=== update to your email address

session_start();
$errors = '';
$name = '';
$visitor_email = '';
$user_message = '';

if(isset($_POST['submit']))
{

This is my code to get email address from DB:

<?php
$sql_email = "SELECT EMAIL FROM USERS WHERE ID = '$_GET[get_id]'";
echo "<br />sql query is: $sql_email<br />";
$email = array();

$query = mysql_query($sql_email)or die(mysql_error());

while($r = mysql_fetch_assoc($query )){
    $email[] = $r['EMAIL'];
}
session_start();
$errors = '';
$name = '';
$visitor_email = '';
$user_message = '';

Maybe it's more clear for what I'm doing.

[EvolutionFallen]

Does $email store the address that you want to send to, or send from?

[infinitus 8]

Send TO:

My website is a Business Directory, each page will be diferent business with diferent email address and I want a contact form, the only way to contact form works is getting the email address from database by ID. The code got ID but not the email address.
Ok, here is the complete contact form tha I want integrate into my website, I just don't know why lines 37 and 39 says: $to and $from

<?php 
$your_email ='[e-mail]';// <<=== update to your email address

session_start();
$errors = '';
$name = '';
$visitor_email = '';
$user_message = '';

if(isset($_POST['submit']))
{
	
	$name = $_POST['name'];
	$visitor_email = $_POST['email'];
	$user_message = $_POST['message'];
	///------------Do Validations-------------
	if(empty($name)||empty($visitor_email))
	{
		$errors .= "\n Name and Email are required fields. ";	
	}
	if(IsInjected($visitor_email))
	{
		$errors .= "\n Bad email value!";
	}
	if(empty($_SESSION['6_letters_code'] ) ||
	  strcasecmp($_SESSION['6_letters_code'], $_POST['6_letters_code']) != 0)
	{
	//Note: the captcha code is compared case insensitively.
	//if you want case sensitive match, update the check above to
	// strcmp()
		$errors .= "\n The captcha code does not match!";
	}
	
	if(empty($errors))
	{
		//send the email
		$to = $your_email;
		$subject="New form submission";
		$from = $your_email;
		$ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '';
		
		$body = "A user  $name submitted the contact form:\n".
		"Name: $name\n".
		"Email: $visitor_email \n".
		"Message: \n ".
		"$user_message\n".
		"IP: $ip\n";	
		
		$headers = "From: $from \r\n";
		$headers .= "Reply-To: $visitor_email \r\n";
		
		mail($to, $subject, $body,$headers);
		
		header('Location: thank-you.html');
	}
}

// Function to validate against any email injection attempts
function IsInjected($str)
{
  $injections = array('(\n+)',
              '(\r+)',
              '(\t+)',
              '(%0A+)',
              '(%0D+)',
              '(%08+)',
              '(%09+)'
              );
  $inject = join('|', $injections);
  $inject = "/$inject/i";
  if(preg_match($inject,$str))
    {
    return true;
  }
  else
    {
    return false;
  }
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> 
<html>
<head>
	<title>Contact Us</title>
<!-- define some style elements-->
<style>
label,a, body 
{
	font-family : Arial, Helvetica, sans-serif;
	font-size : 12px; 
}
.err
{
	font-family : Verdana, Helvetica, sans-serif;
	font-size : 12px;
	color: red;
}
</style>	
<!-- a helper script for vaidating the form-->
<script language="JavaScript" src="scripts/gen_validatorv31.js" type="text/javascript"></script>	
</head>

<body>
<?php
if(!empty($errors)){
echo "<p class='err'>".nl2br($errors)."</p>";
}
?>
<div id='contact_form_errorloc' class='err'></div>
<form method="POST" name="contact_form" 
action="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>"> 
<p>
<label for='name'>Name: </label><br>
<input type="text" name="name" value='<?php echo htmlentities($name) ?>'>
</p>
<p>
<label for='email'>Email: </label><br>
<input type="text" name="email" value='<?php echo htmlentities($visitor_email) ?>'>
</p>
<p>
<label for='message'>Message:</label> <br>
<textarea name="message" rows=8 cols=30><?php echo htmlentities($user_message) ?></textarea>
</p>
<p>
<img src="captcha_code_file.php?rand=<?php echo rand(); ?>" id='captchaimg' ><br>
<label for='message'>Enter the code above here :</label><br>
<input id="6_letters_code" name="6_letters_code" type="text"><br>
<small>Can't read the image? click <a href='javascript: refreshCaptcha();'>here</a> to refresh</small>
</p>
<input type="submit" value="Submit" name='submit'>
</form>
<script language="JavaScript">
// Code for validating the form
// Visit http://www.javascript-coder.com/html-form/javascript-form-validation.phtml
// for details
var frmvalidator  = new Validator("contact_form");
//remove the following two lines if you like error message box popups
frmvalidator.EnableOnPageErrorDisplaySingleBox();
frmvalidator.EnableMsgsTogether();

frmvalidator.addValidation("name","req","Please provide your name"); 
frmvalidator.addValidation("email","req","Please provide your email"); 
frmvalidator.addValidation("email","email","Please enter a valid email address"); 
</script>
<script language='JavaScript' type='text/javascript'>
function refreshCaptcha()
{
	var img = document.images['captchaimg'];
	img.src = img.src.substring(0,img.src.lastIndexOf("?"))+"?rand="+Math.random()*1000;
}
</script>
<noscript>
Code from the <a href='http://www.html-form-guide.com/contact-form/html-contact-form-captcha.html'
>php contact form</a> article.
</noscript>
</body>
</html>

[EvolutionFallen]

OK nevermind I see you corrected it on line 2, to $your_email.

First, since you're only pulling one e-mail address out of the DB, $email does not need to be an array. Change it to:

$sql_email = "SELECT EMAIL FROM USERS WHERE ID = '$_GET[get_id]'";
echo "<br />sql query is: $sql_email<br />";

$query = mysql_query($sql_email)or die(mysql_error());

while($r = mysql_fetch_assoc($query )){
    $email = $r['EMAIL'];
}

Now, what do you do with $email? Can you show where you are using it later?

[infinitus 8]

Nope...
Still as in the beggining, I got only the ID, not the email address. The same code works for videos, I got the videos from database by ID, as I said, each business has they own photos, videos, info... I need find way to insert the email address here:

<?php 
$email ='[e-mail]';// <<=== your email address

[EvolutionFallen]

If you make the corrections to the code as I showed in the previous post, $email will already be set to the e-mail address, and you won't need a line that says

<?php 
$email ='[e-mail]';// <<=== your email address

[infinitus 8]

Contact form after include your code, I really tank yoy but sorry it's not working...

<?php
$sql_email = "SELECT EMAIL FROM USERS WHERE ID = '$_GET[get_id]'";
echo "<br />sql query is: $sql_email<br />";
$query = mysql_query($sql_email)or die(mysql_error());

while($r = mysql_fetch_assoc($query )){
    $email = $r['EMAIL'];
}

session_start();
$errors = '';
$name = '';
$visitor_email = '';
$user_message = '';

if(isset($_POST['submit']))
{
	
	$name = $_POST['name'];
	$visitor_email = $_POST['email'];
	$user_message = $_POST['message'];
	///------------Do Validations-------------
	if(empty($name)||empty($visitor_email))
	{
		$errors .= "\n Name and Email are required fields. ";	
	}
	if(IsInjected($visitor_email))
	{
		$errors .= "\n Bad email value!";
	}
	if(empty($_SESSION['6_letters_code'] ) ||
	  strcasecmp($_SESSION['6_letters_code'], $_POST['6_letters_code']) != 0)
	{
	//Note: the captcha code is compared case insensitively.
	//if you want case sensitive match, update the check above to
	// strcmp()
		$errors .= "\n The captcha code does not match!";
	}
	
	if(empty($errors))
	{
		//send the email
		$to = $email;
		$subject="New form submission";
		$from = $email;
		$ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '';
		
		$body = "A user  $name submitted the contact form:\n".
		"Name: $name\n".
		"Email: $visitor_email \n".
		"Message: \n ".
		"$user_message\n".
		"IP: $ip\n";	
		
		$headers = "From: $from \r\n";
		$headers .= "Reply-To: $visitor_email \r\n";
		
		mail($to, $subject, $body,$headers);
		
		header('Location: thank-you.html');
	}
}

// Function to validate against any email injection attempts
function IsInjected($str)
{
  $injections = array('(\n+)',
              '(\r+)',
              '(\t+)',
              '(%0A+)',
              '(%0D+)',
              '(%08+)',
              '(%09+)'
              );
  $inject = join('|', $injections);
  $inject = "/$inject/i";
  if(preg_match($inject,$str))
    {
    return true;
  }
  else
    {
    return false;
  }
}
?>


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> 
<html>
<head>
	<title>Contact Us</title>
<!-- define some style elements-->
<style>
label,a, body 
{
	font-family : Arial, Helvetica, sans-serif;
	font-size : 12px; 
}
.err
{
	font-family : Verdana, Helvetica, sans-serif;
	font-size : 12px;
	color: red;
}
</style>	
<!-- a helper script for vaidating the form-->
<script language="JavaScript" src="scripts/gen_validatorv31.js" type="text/javascript"></script>	
</head>

<body>
<?php
if(!empty($errors)){
echo "<p class='err'>".nl2br($errors)."</p>";
}
?>
<div id='contact_form_errorloc' class='err'></div>
<form method="POST" name="contact_form" 
action="">
<p>
<label for='name'>Name: </label><br>
<input type="text" name="name" value='<?php echo htmlentities($name) ?>'>
</p>
<p>
<label for='email'>Email: </label><br>
<input type="text" name="email" value='<?php echo htmlentities($visitor_email) ?>'>
</p>
<p>
<label for='message'>Message:</label> <br>
<textarea name="message" rows=8 cols=30><?php echo htmlentities($user_message) ?></textarea>
</p>
<p>
<img src="captcha_code_file.php?rand=<?php echo rand(); ?>" id='captchaimg' ><br>
<label for='message'>Enter the code above here :</label><br>
<input id="6_letters_code" name="6_letters_code" type="text"><br>
<small>Can't read the image? click <a href='javascript: refreshCaptcha();'>here</a> to refresh</small>
</p>
<input type="submit" value="Submit" name='submit'>
</form>
<script language="JavaScript">
// Code for validating the form
// Visit http://www.javascript-coder.com/html-form/javascript-form-validation.phtml
// for details
var frmvalidator  = new Validator("contact_form");
//remove the following two lines if you like error message box popups
frmvalidator.EnableOnPageErrorDisplaySingleBox();
frmvalidator.EnableMsgsTogether();

frmvalidator.addValidation("name","req","Please provide your name"); 
frmvalidator.addValidation("email","req","Please provide your email"); 
frmvalidator.addValidation("email","email","Please enter a valid email address"); 
</script>
<script language='JavaScript' type='text/javascript'>
function refreshCaptcha()
{
	var img = document.images['captchaimg'];
	img.src = img.src.substring(0,img.src.lastIndexOf("?"))+"?rand="+Math.random()*1000;
}
</script>

</body>
</html>

[EvolutionFallen]

Are you sure that the problem is with $email? The code looks more or less fine to me, aside from that you are missing a space between "||" and "empty" on line 23.

[infinitus 8]

This is the complete working code of contact form with CAPTCHA:

<?php
$sql_email = "SELECT EMAIL FROM LISTINGS WHERE ID = '$_GET[get_id]'";
$query = mysql_query($sql_email)or die(mysql_error());
if(mysql_num_rows($query) >= 1){
   $r = mysql_fetch_assoc($query);    
   $email = $r['EMAIL'];
}
else
{    
    echo "no record found with the id provided";
} 	
	$name = $_POST['name'];
	$visitor_email = $_POST['email'];
	$user_message = $_POST['message'];
	///------------Do Validations-------------
	if(empty($name)||empty($visitor_email))
	{
		$errors .= "\n Name and Email are required fields. ";	
	}
	if(IsInjected($visitor_email))
	{
		$errors .= "\n Bad email value!";
	}
	if(empty($_SESSION['6_letters_code'] ) ||
	  strcasecmp($_SESSION['6_letters_code'], $_POST['6_letters_code']) != 0)
	{
	//Note: the captcha code is compared case insensitively.
	//if you want case sensitive match, update the check above to
	// strcmp()
		$errors .= "\n The captcha code does not match!";
	}
	
	if(empty($errors))
	{
		//send the email
		$to = $email;
		$subject="New form submission";
		$from = $email;
		$ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '';
		
		$body = "A user  $name submitted the contact form:\n".
		"Name: $name\n".
		"Email: $visitor_email \n".
		"Message: \n ".
		"$user_message\n".
		"IP: $ip\n";	
		
		$headers = "From: $from \r\n";
		$headers .= "Reply-To: $visitor_email \r\n";
		
		mail($to, $subject, $body,$headers);
		
		header('Location: thank-you.html');
	}
}

// Function to validate against any email injection attempts
function IsInjected($str)
{
  $injections = array('(\n+)',
              '(\r+)',
              '(\t+)',
              '(%0A+)',
              '(%0D+)',
              '(%08+)',
              '(%09+)'
              );
  $inject = join('|', $injections);
  $inject = "/$inject/i";
  if(preg_match($inject,$str))
    {
    return true;
  }
  else
    {
    return false;
  }
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> 
<html>
<head>
	<title>Contact Us</title>
<!-- define some style elements-->
<style>
label,a, body 
{
	font-family : Arial, Helvetica, sans-serif;
	font-size : 12px; 
}
.err
{
	font-family : Verdana, Helvetica, sans-serif;
	font-size : 12px;
	color: red;
}
</style>	
<!-- a helper script for vaidating the form-->
<script language="JavaScript" src="scripts/gen_validatorv31.js" type="text/javascript"></script>	
</head>

<body>
<?php
if(!empty($errors)){
echo "<p class='err'>".nl2br($errors)."</p>";
}
?>
<div id='contact_form_errorloc' class='err'></div>
<form method="POST" name="contact_form" 
action="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>"> 
<p>
<label for='name'>Name: </label><br>
<input type="text" name="name" value='<?php echo htmlentities($name) ?>'>
</p>
<p>
<label for='email'>Email: </label><br>
<input type="text" name="email" value='<?php echo htmlentities($visitor_email) ?>'>
</p>
<p>
<label for='message'>Message:</label> <br>
<textarea name="message" rows=8 cols=30><?php echo htmlentities($user_message) ?></textarea>
</p>
<p>
<img src="captcha_code_file.php?rand=<?php echo rand(); ?>" id='captchaimg' ><br>
<label for='message'>Enter the code above here :</label><br>
<input id="6_letters_code" name="6_letters_code" type="text"><br>
<small>Can't read the image? click <a href='javascript: refreshCaptcha();'>here</a> to refresh</small>
</p>
<input type="submit" value="Submit" name='submit'>
</form>
<script language="JavaScript">
// Code for validating the form
// Visit http://www.javascript-coder.com/html-form/javascript-form-validation.phtml
// for details
var frmvalidator  = new Validator("contact_form");
//remove the following two lines if you like error message box popups
frmvalidator.EnableOnPageErrorDisplaySingleBox();
frmvalidator.EnableMsgsTogether();

frmvalidator.addValidation("name","req","Please provide your name"); 
frmvalidator.addValidation("email","req","Please provide your email"); 
frmvalidator.addValidation("email","email","Please enter a valid email address"); 
</script>
<script language='JavaScript' type='text/javascript'>
function refreshCaptcha()
{
	var img = document.images['captchaimg'];
	img.src = img.src.substring(0,img.src.lastIndexOf("?"))+"?rand="+Math.random()*1000;
}
</script>
<noscript>
Code from the <a href='http://www.html-form-guide.com/contact-form/html-contact-form-captcha.html'
>php contact form</a> article.
</noscript>
</body>
</html>

[EvolutionFallen]

So, what was wrong with it? Also, please mark the thread as solved if you've found your solution.

[infinitus 8]

Hi,
I just change USERS by LISTINGS.:-O

BEFORE:

$sql_email = "SELECT EMAIL FROM USERS WHERE ID = '$_GET[get_id]'";

AFTER:

$sql_email = "SELECT EMAIL FROM LISTINGS WHERE ID = '$_GET[get_id]'";

Thank you for all your time to help me :)

[EvolutionFallen]

Ah, no problem =)