javascript - 从数据库获取电子邮件值并发送(PHP电子邮件)/刷新页面而不更改网站链接

Question

我的这个脚本有两个问题，有问题 1. 无法从数据库中选择电子邮件地址值。 该脚本仅在我手动输入电子邮件时才有效

$yourEmail = "email@exemple.com";

按下提交按钮后，我希望刷新页面而不更改网站链接，或者单击发送后，联系框应关闭。 您能帮忙解决这些问题吗？ 预先感谢您!

        <?php
        $sql = "select * from tables where email='" . $email . "'";
        while($row=mysql_fetch_array($sql))
        {
        $email=$row['email'];
        }
        $yourEmail = $email; // the email address you wish to receive these mails through
        $yourWebsite = "WEBSITE NAME";
        $thanksPage = ''; // URL to 'thanks for sending mail' page; leave empty to keep                          message on the same page 
        $maxPoints = 4; 
        $requiredFields = "name,email,comments";



        $error_msg = array();
        $result = null;

        $requiredFields = explode(",", $requiredFields);

        function clean($data) {
            $data = trim(stripslashes(strip_tags($data)));
            return $data;
        }
        function isBot() {
            $bots = array("Indy", "Blaiz", "Java", "libwww-perl", "Python", "OutfoxBot", "User-Agent", "PycURL", "AlphaServer", "T8Abot", "Syntryx", "WinHttp", "WebBandit", "nicebot", "Teoma", "alexa", "froogle", "inktomi", "looksmart", "URL_Spider_SQL", "Firefly", "NationalDirectory", "Ask Jeeves", "TECNOSEEK", "InfoSeek", "WebFindBot", "girafabot", "crawler", "www.galaxy.com", "Googlebot", "Scooter", "Slurp", "appie", "FAST", "WebBug", "Spade", "ZyBorg", "rabaz");

            foreach ($bots as $bot)
                if (stripos($_SERVER['HTTP_USER_AGENT'], $bot) !== false)
                    return true;

            if (empty($_SERVER['HTTP_USER_AGENT']) || $_SERVER['HTTP_USER_AGENT'] == " ")
                return true;

            return false;
        }

        if ($_SERVER['REQUEST_METHOD'] == "POST") {
            if (isBot() !== false)
                $error_msg[] = "No bots please! UA reported as: ".$_SERVER['HTTP_USER_AGENT'];

            // lets check a few things - not enough to trigger an error on their own, but worth assigning a spam score.. 
            // score quickly adds up therefore allowing genuine users with 'accidental' score through but cutting out real spam :)
            $points = (int)0;

            $badwords = array("adult", "beastial", "bestial", "blowjob", "clit", "cum", "cunilingus", "cunillingus", "cunnilingus", "cunt", "ejaculate", "fag", "felatio", "fellatio", "fuck", "fuk", "fuks", "gangbang", "gangbanged", "gangbangs", "hotsex", "hardcode", "jism", "jiz", "orgasim", "orgasims", "orgasm", "orgasms", "phonesex", "phuk", "phuq", "pussies", "pussy", "spunk", "xxx", "viagra", "phentermine", "tramadol", "adipex", "advai", "alprazolam", "ambien", "ambian", "amoxicillin", "antivert", "blackjack", "backgammon", "texas", "holdem", "poker", "carisoprodol", "ciara", "ciprofloxacin", "debt", "dating", "porn", "link=", "voyeur", "content-type", "bcc:", "cc:", "document.cookie", "onclick", "onload", "javascript");

            foreach ($badwords as $word)
                if (
                    strpos(strtolower($_POST['comments']), $word) !== false || 
                    strpos(strtolower($_POST['name']), $word) !== false
                )
                    $points += 2;

            if (strpos($_POST['comments'], "http://") !== false || strpos($_POST['comments'], "www.") !== false)
                $points += 2;
            if (isset($_POST['nojs']))
                $points += 1;
            if (preg_match("/(<.*>)/i", $_POST['comments']))
                $points += 2;
            if (strlen($_POST['name']) < 3)
                $points += 1;
            if (strlen($_POST['comments']) < 15 || strlen($_POST['comments'] > 1500))
                $points += 2;
            if (preg_match("/[bcdfghjklmnpqrstvwxyz]{7,}/i", $_POST['comments']))
                $points += 1;
            // end score assignments

            foreach($requiredFields as $field) {
                trim($_POST[$field]);

                if (!isset($_POST[$field]) || empty($_POST[$field]) && array_pop($error_msg) != "Please fill in all the required fields and submit again.\r\n")
                    $error_msg[] = "Please fill in all the required fields and submit again.";
            }

            if (!empty($_POST['name']) && !preg_match("/^[a-zA-Z-'\s]*$/", stripslashes($_POST['name'])))
                $error_msg[] = "The name field must not contain special characters.\r\n";
            if (!empty($_POST['email']) && !preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i', strtolower($_POST['email'])))
                $error_msg[] = "That is not a valid e-mail address.\r\n";
            if (!empty($_POST['url']) && !preg_match('/^(http|https):\/\/(([A-Z0-9][A-Z0-9_-]*)(\.[A-Z0-9][A-Z0-9_-]*)+)(:(\d+))?\/?/i', $_POST['url']))
                $error_msg[] = "Invalid website url.\r\n";

            if ($error_msg == NULL && $points <= $maxPoints) {
                $subject = "Automatic Form Email";

                $message = "You received this e-mail message through your website: \n\n";
                foreach ($_POST as $key => $val) {
                    if (is_array($val)) {
                        foreach ($val as $subval) {
                            $message .= ucwords($key) . ": " . clean($subval) . "\r\n";
                        }
                    } else {
                        $message .= ucwords($key) . ": " . clean($val) . "\r\n";
                    }
                }
                $message .= "\r\n";
                $message .= 'IP: '.$_SERVER['REMOTE_ADDR']."\r\n";
                $message .= 'Browser: '.$_SERVER['HTTP_USER_AGENT']."\r\n";
                $message .= 'Points: '.$points;

                if (strstr($_SERVER['SERVER_SOFTWARE'], "Win")) {
                    $headers   = "From: $yourEmail\r\n";
                } else {
                    $headers   = "From: $yourWebsite <$yourEmail>\r\n"; 
                }
                $headers  .= "Reply-To: {$_POST['email']}\r\n";

                if (mail($yourEmail,$subject,$message,$headers)) {
                    if (!empty($thanksPage)) {
                        header("Location: $thanksPage");
                        exit;
                    } else {
                        $result = 'Your mail was successfully sent.';
                        $disable = true;
                    }
                } else {
                    $error_msg[] = 'Your mail could not be sent this time. ['.$points.']';
                }
            } else {
                if (empty($error_msg))
                    $error_msg[] = 'Your mail looks too much like spam, and could not be sent this time. ['.$points.']';
            }
        }
        function get_data($var) {
            if (isset($_POST[$var]))
                echo htmlspecialchars($_POST[$var]);
        }
        ?>

html 表单

<form action="<?php echo basename(__FILE__); ?>" method="post">
<noscript>
        <p><input type="hidden" name="nojs" id="nojs" /></p>
</noscript>
<p>
    <label for="name">Name: *</label> 
        <input type="text" name="name" id="name" value="<?php get_data("name"); ?>" /><br />

    <label for="email">E-mail: *</label> 
        <input type="text" name="email" id="email" value="<?php get_data("email"); ?>" /><br />

    <label for="url">Website URL:</label> 
        <input type="text" name="url" id="url" value="<?php get_data("url"); ?>" /><br />

    <label for="location">Location:</label>
        <input type="text" name="location" id="location" value="<?php get_data("location"); ?>" /><br />

    <label for="comments">Comments: *</label>
        <textarea name="comments" id="comments" rows="5" cols="20"><?php get_data("comments"); ?></textarea><br />
</p>
<p>
    <input type="submit" name="submit" id="submit" value="Send" <?php if (isset($disable) && $disable === true) echo ' disabled="disabled"'; ?> />
</p>
</form>

Answer 1

在 while 循环之前，您假设在您的情况下使用 mysql_query 或 mysqli_query 实际执行查询 mysql_query。 您的另一个问题是您将结果作为基于索引的数组(0 ...)获取，并使用字符串来访问它，因此您应该调用 mysql_fetch_assoc 它返回一个可以在当前实现中访问的关联数组

 $sql = "select * from tables where email='" . $email . "'";
 $result = mysql_query($sql, $connection);// this actually performs the query and returns the result to be fetched using mysql_fetch_array or it's other methods such as mysql_fetch_assoc
 while($row=mysql_fetch_assoc($result)){
    $email=$row['email'];
 }

还在 while 循环之外声明您的 $email 变量，就好像数据库没有返回任何行一样，您的 $email 变量将不存在，因此会破坏您的代码，因此您应该将其带到 while 循环的顶部并将其初始化为一些默认值。