Posted by Jerry Stuckle on 08/15/07 11:58

shror wrote:
> also the mail() I used here it is:
>
> <?php
> $FirstName = $_POST["FirstName"];
> $FamilyName = $_POST["FamilyName"];
> $name = "Full Name: " . $FirstName $FamilyName;
> $Address = $_POST["Address"];
> $Email = $_POST["Email"];
> $Phone = $_POST["Phone"];
> $City = $_POST["City"];
> $Zipcode = $_POST=["Zipcode"];
> $Otherdata = $_POST["Otherdata"];
> $data = "Address: " . $Address . "E-mail: " . $Email \n . "Phone: " .
> $Phone \n . "City: " . $City \n . "Zip code: " . $Zipcode \n . "Other
> Data: " . $Otherdata;
> $Adults = $_POST["Adults"];
> $Children = $_POST["Children"];
> $Infants = $_POST["Infants"];
> $persons = "Adults: " . $Adults \n . "Children: " . $Children \n .
> "Infants: " . $Infants \n;
> $Arrdate = $_POST["Arrivaldate"];
> $Depdate = $_POST["Departuredate"];
> $Arrflight = $_POST["ArrivalFlight"];
> $Depflight = $_POST["DepartureFlight"];
> $time ="Arrival date: " . $Arrdate \n . "Departure date: " . $Depdate
> \n . "Arrival Flight: " . $Arrflight \n . "Departure flight: " .
> $Depflight \n;
> $Singleroom = $_POST["Singleroom"'];
> $Doubleroom = $_POST["Doubleroom"];
> $Trebleroom = $_POST["Trebleroom"];
> $MoreComments = $_POST["MoreComments"];
> $needs ="Number of Single room(s): " . $Singleroom \n . "Number of
> double room(s): " . $Doubleroom \n . "Number of tribleroom(s): " .
> $Trebleroom;
> $to = "me @ mydomain";
> $from ="$Email";
> $subject = "BeachTours Booking Form";
> $message = "You recieved a new message from your website, \n its
> details are as follows:\n\n $name \n $data \n\n $persons \n\n $time\n
> \n $needs \n"
> mail("$to","$subject","$message","$from\r\n" . "Reply-To: $from\r\n" .
> "X-Mailer: www.BeachToursEgypt.com");
> ?>
>

$name = "Full Name: " . $FirstName . $FamilyName;
Missing ^

$to = "me @ mydomain";
^ ^ Remove spaces

There may be other errors - these I spotted right off the top.

Also, this form is insecure and can be use by spammers by header
injection. Always validate any information from the user!

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[Back to original message]