phpcompsysassign/process_EOI.php at main · nicoleinternet/phpcompsysassign · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
<!DOCTYPE html>
<html lang="en">
<?php
include 'settings.php';
include 'menu.inc.php';
// We can check if we have submitted the form
draw_headerhtml("Thank you!");

// Create variables for readability
$jobRefNum = "";
$firstName = "";
$lastName = "";
$dob = "";
$gender = "";
$street_address = "";
$suburb = "";
$state = "";
$postcode = "";
$emailField = "";
$pNumber = "";
$otherSkills = "";

if (are_fields_set()) {

    $jobRefNum = validate_html($_POST['jobRefNum']);
    $firstName = validate_html($_POST['firstName']);
    $lastName = validate_html($_POST['lastName']);
    $dob = validate_html($_POST['dob']);
    $gender = validate_html($_POST['gender']);
    $street_address = validate_html($_POST['street_address']);
    $suburb = validate_html($_POST['suburb']);
    $state = validate_html($_POST['state']);
    $postcode = validate_html($_POST['postcode']);
    $emailField = validate_html($_POST['emailField']);
    $pNumber = validate_html($_POST['pNumber']);
    $otherSkills = validate_html($_POST['otherSkills']);
    $gender = validate_html($_POST['gender']);

    // Validate items
if (!is_under_size($jobRefNum,6) || !ctype_alnum($jobRefNum)) {
    echo "";
    // handle error here
    fail($jobRefNum);
}
if (!is_under_size($firstName,20) || !ctype_alpha($firstName)) {
    echo "";
    // handle error here
    fail($firstName);
}
if (!is_under_size($lastName,20) || !ctype_alpha($lastName)) {
    echo "";
    // handle error here
    fail($lastName);
}
//TODO: DOB/GENDER
if (!is_under_size($street_address,40)) {
    echo "";
    fail($street_address);
}
if (!is_under_size($suburb,40)) {
    echo "";
    fail($suburb);
}
// TO DO STATE AND POSTCODE HERE
$valid_states = ['NSW','ACT','VIC','QLD','SA','WA','TAS','NT'];
if (!in_array($state, $valid_states)) {
    fail($state);
}
if (!valid_postcode($state,$postcode)) {
    fail($postcode);
};
if (!is_under_size($emailField, 20) || !filter_var($emailField, FILTER_VALIDATE_EMAIL)) {
    fail($emailField);
}
};


// FROM PHPMyAdmin
// $sql = "INSERT INTO `eoi`(`job_ref`, `status`, `first_name`, `last_name`, `email`, `phone_number`, `street_address`, `suburb_address`, `state_address`, `postcode`, `skill_1`, `skill_2`, `skill_3`, `skill_4`, `skill_5`, `miscinfo`) VALUES (\'[value-1]\',\'New\',\'[value-4]\',\'[value-5]\',\'[value-6]\',\'[value-7]\',\'[value-8]\',\'[value-9]\',\'VIC\',\'3000\',\'[value-12]\',\'[value-13]\',\'[value-14]\',\'[value-15]\',\'[value-16]\',\'[value-17]\');";
$sql = "INSERT INTO eoi(job_ref, status, first_name, last_name, email, phone_number, street_address, suburb_address, state_address, postcode, miscinfo, dob, gender) VALUES ('$jobRefNum','New','$firstName','$lastName','$emailField','$pNumber','$street_address','$suburb','$state','$postcode','$otherSkills', '$dob','$gender');";
if ($conn->query($sql) === TRUE) {
  echo "New record created successfully";
} else {
  echo "Error: " . $sql . "<br>" . $conn->error;
}


// Is this not a POST request?
if (!$_SERVER['REQUEST_METHOD'] == "POST") {
    $errorMsg = "You must submit the form.";
    fail($errorMsg);

}


// Returns 1 (TRUE) or 0 (FALSE) based on field and SIZE
function is_under_size($field, $size) {
    $value = trim((string)$field);
    if (strlen($value) < $size) {
        return true;
    } else {
        return false;
    }

    return strlen($value) < $size;
}


function valid_postcode($state, $postcode) {

    // https://stackoverflow.com/questions/14037290/what-does-or-mean-in-php
    // We can use => like the map<> in C++, letting us define
    // values in an array.

    // This is technically creating a two dimensional array, with the second dimension having two indexes (the postcodes).
    $postcodes = [
        'NSW' => [1000, 2999],
        'ACT' => [2600, 2618],
        'VIC' => [3000, 3999],
        'QLD' => [4000, 4999],
        'SA'  => [5000, 5999],
        'WA'  => [6000, 6999],
        'TAS' => [7000, 7999],
        'NT'  => [800, 999]
    ];
// if the postcode is within the bounds of the states second dimension array
    if ($postcode >= $postcodes[$state][0] && $postcode <= $postcodes[$state][1]) {
        return true;
    } else {
        return false;
    }

}


// USE IN AN IF STATEMENT TO CHECK IF WE HAVE SET FIELDS
function are_fields_set() {
$requiredfields = ['firstName','lastName','jobRefNum','suburb','postcode','street_address','gender'];
foreach ($requiredfields as $field) {
    if (!isset($_POST[$field]) || empty($_POST[$field])) {
        echo "<p>Sorry, $field or more fields are empty.</p>";
        return false;
    }
    if (isset($_POST['otherSkill'])) {
        if (!isset($_POST['otherSkills']) || empty($_POST['otherSkills'])) {
            echo "<p>Sorry, $field or more fields are empty.</p>";
            return false;
        }
    }

}
return true;
}

function validate_html($data) {
    // trim, stripslashes, htmlspecialchars
    $data = htmlspecialchars($data);
    return $data;
}

function fail($data)
{
    echo "<h1>Your input information is incorrect.</h1>";
    echo "<h2>".$data."</h2>";
}


?>
<body>
</body>

</body>
</html>