guestbook

<?php
########  Gastenboek ##########
## Volgende elementen:                                ##
## in te vullen: naam, emailadres, invoervak ##
## gegeven: tijd van plaatsing, submit button ###
############################

$host = "localhost";
$user = "id02695";
$password = "pavilion";
$database = "gastenboek"; // database  nog aan te maken
$connection = mysql_connect ($host, $user, $password)
        or die ("Unable to connect to server");
$db = mysql_select_db ($database, $connection)
        or die ("Unable to select database");

$f_date = ("l d F Y - H-i-s");
?>

<form action="guestbook.php" method="POST">
<?php echo "$f_date"; ?>
Nickname: <input type="text" name="nickname" /> <br />
E-mail: <input type="text" name="email" /> <br />
Message: <input type="text" name="message" /> <br />
<input type="submit" name="submit" value="send" /> <br />
</form>

<?php
$nickname = htmlspecialchars(trim($_POST['nickname']));
$email = htmlspecialchars(trim($_POST['email']));
$message = strip_tags(trim($_POST['message']));

/* kijken of de juiste waarden zijn ingevoerd*/
foreach ($_POST as $field => $value)
{
        if ($value == "") // is de waarde leeg?
        {
                $blank_array[$field] => "blank";
                echo "Not all the required fields are filled in";
        }
        elseif (ereg("(name)",$field))
        {
                if (!ereg("^[A-Za-Z' -]{1,50}",$_POST[$field])) // bevat de waarde verkeerde tekens?
                {
                $bad_format[$field] => "bad";
                }
        }
}

/* gevolg voor slechte invoerwaardes */
if ($bad_format[$field] = "bad" or $blank_array[$field] = "blank")
{
        echo "You have filled in incorrect values.";
}
else
{
        $query = "INSERT INTO gastenboek (nickname, email, message)
                VALUES ('$nickname', '$email','$message')";
        $result = mysql_query($query)
                or die ("Unable to insert query");
        echo "Your message is entered succesfully!";
}

?>