PHP Guestbook. Writing a guestbook script Mad dealer guestbook php

When we open this page we will see book, at left side we will draw list of last three records, at right - form of posting new records. When we submitting form - script sending POST data (to same php page), script saving this data to database, and returning us list of fresh 3 records. Then, via fading effect we draw returned data at left column. All code contains comments - read it for better understanding code. Ok, next PHP file is:

classes / CMySQL.php

This is my own service class to work with database. This is nice class which you can use too. Database connection details located in this class in few variables, sure that you will be able to configure this to your database. I don`t will publish its sources - this is not necessary for now. Available in package.

Step 3. CSS

Now - all used CSS styles:

css / main.css

(-webkit-transform: rotate (3deg); -moz-transform: rotate (3deg); -ms-transform: rotate (3deg); -o-transform: rotate (3deg); ) #records form (margin: 10px 0; padding: 10px; text-align: left;) #records table td.label (color: # 000; font-size: 13px; padding-right: 3px; text-align: right ;) #records table label (font-size: 12px; vertical-align: middle;) #records table td.field input, #records table td.field textarea (background-color: rgba (255, 255, 255, 0.4) ; border: 0px solid # 96A6C5; font-family: Verdana, Arial, sans-serif; font-size: 13px; margin-top: 2px; padding: 6px; width: 190px;) #records table td.field input (background -color: rgba (200, 200, 200, 0.4); cursor: pointer; float: right; width: 100px;) #records table td.field input: hover (background-color: rgba (200, 200, 200, 0.8 );) #records_list (text-align: left;) #records_list .record (border-top: 1px solid # 000000; font-size: 13px; padding: 10px;) #records_list .record: first-child (border-top -width: 0px;) #records_list .record p: first-child (font-weight: bold; font-size: 11px;)

The description and solution of this problem will be written right here, without performance checks, so there may be a typo somewhere. This was done not because of my laziness, but again because of additional training when you created the guestbook. Also, the presented solution will be a little "crooked", but more on that at the end of this article in the "Independent work" section.

If you don't know how to work with PHP at all, then first I advise you to read the PHP post - where to start.

We will analyze the creation of the most primitive guestbook, without design and administration. In other words, we will limit ourselves to entering the book, registering and leaving messages.
From the task itself, it becomes clear that we can completely limit ourselves to three php files to accomplish this task. Of course, the registration task can be divided into two: the registration form and adding data to the database, but we will not do this. The same reasoning is valid for the commenting procedure. Thus, we create three files: index.php, registration.php, book.php.

By the names of the files, you can immediately understand what they will be responsible for: index.php - the login page, registration.php - the registration page, book.php - the guest book page.

The simplest thing in our case is the login page. Since the page is responsible for entering a pair of username and password, it must have a form to send this data to the book.php page. As well as a link to the registration page. We have:

A little off topic, for those who do not like what the code above means. Here we have bare HTML. Key point is the tag form which takes two parameters action, which is responsible for the address of the page that will open after confirming the data entry, and the parameter method, which answers how the form data will be sent to the specified page(see POST and GET in simple terms). Inside the form tag, fields for input (input, select) are indicated, which must have an attribute name... It is by the value of this attribute that it will be possible to get the data entered by the user on the page specified in the parameter action forms... There must be an input with the type inside the form submit, which in essence is a button, by clicking on which the data will be sent to the action page.

Let's continue ... Now we need to create a new user registration page. It is worth immediately thinking about what exactly we want to have. I decided that for a simple guestbook it would be quite enough to have users with unique logins, as well as to know the address of their Web site (if any). Once we have decided what we want to know about the user, then we can start designing our database.

Go to phpMyAdmin. Let's create a database there with the name gb. In this database, create a Users table with the following fields:

Login varchar (50) unique // username, unique field password varchar (150) // www password varchar (255) // site address

And since we have already entered the database editor, we can immediately think about how we will store messages. In our case, it is quite suitable to know who and when left the message, well, and the actual text of our message. Also, for convenience, it is worthwhile to number our messages. We have decided on this, so we can safely create another Messages table with the following structure:

Id int ai (auto_increment) primary_key // message number, counter that will increase itself mes text // text of the message who varchar (50) // username of the one who left the message when timestamp default (current) // time of leaving the message, by the default is the current date and time

With the database sorted out. Now let's move on to the registration.php file. Summarizing the above, we have:

A little about the code. As you may have noticed, PHP is present here. I will not describe the form any more, but as we can see, here the form data is sent to the same page where this form is located. In other words, the registration.php file sends the data to itself. Nobody forbids doing this, however, it is not always possible to use it, since it greatly spoils the readability of the code. However, on the other hand, this clearly demonstrates the possibilities PHP language... Essentially, our page is split into two cases. The first case is when data is sent to the page with a POST request, the second is when no POST request is sent to the page. In the second case, we will show the registration form, and in the first case, we will start checking the submitted data. As you can see, the data is sent in the form of an associative array (that is, an array whose indices are strings). Moreover, the indices coincide with the names of the input fields specified in the form for sending data. Those. if we write

then we, when sending this data by POST request, will have a variable

$ _POST ["vasa-peta"]

It is also worth noting that we do not do any checks for repeated login. This check will be carried out at the database level, since the login field is marked as unique.

Now the last one. It remains to make the guestbook itself. A bit of reasoning. Since the guestbook works with a username and password, the first thing we have to do is check the entered username and password for availability in the database. Since we decided to add messages in the book.php file as well, the procedure for adding a message should obviously follow. Well, at the very end, the display of all messages. (if you add a message after they are displayed, the added message will be displayed only after the page is reloaded). We have:

";) else (echo" Your message has not been added!

That's essentially all. If the code is 100% working, good. If not, then I advise you to try to correct the mistakes yourself. Now the promised section.

Independent work
As mentioned at the beginning, this solution is "crooked". If you still do not understand why, then I will explain now. As you may have noticed in the book.php file, there are several hidden fields in the form for adding a comment, and two of them are the username and password entered by the user. Not good, is it? Try to fix this issue using sessions (How to work with sessions in PHP).
Try to answer the question, how are functions different? empty / isset and exit / die?
Change the request for retrieving messages from the database so that when messages are displayed, the website of the author of the message is displayed.
If you have noticed, the password of users in the database is stored in clear text, which is not very good. Edit the code so that the hash of the user's password is stored in the database (for example, MD5 or SHA1).

In this tutorial, we will create a PHP guestbook using AJAX. The records will be stored in the database. The table will contain the following information: sender's name, email address, IP address and date-time of the last entry. JQuery will be used (for AJAX implementation). A simple spam protection will also be implemented - you can post no more than one entry every 10 minutes.

Step 1. SQL

For our application to work, we need to create a table:

CREATE TABLE IF NOT EXISTS `s178_guestbook` (` id` int (10) unsigned NOT NULL auto_increment, `name` varchar (255) default" ",` email` varchar (255) default "", `description` varchar (255) default "", `when` int (11) NOT NULL default" 0 ",` ip` varchar (20) default NULL, PRIMARY KEY (`id`)) ENGINE = MyISAM DEFAULT CHARSET = utf8;

Step 2. PHP

The main file will contain the following code:

guestbook.php

= ") == 1) error_reporting (E_ALL & ~ E_NOTICE & ~ E_DEPRECATED); else error_reporting (E_ALL & ~ E_NOTICE); require_once (" classes / CMySQL.php "); // including service class to work with database // Get Visitor IP function getVisitorIP () ($ ip = "0.0.0.0"; if ((isset ($ _ SERVER ["HTTP_X_FORWARDED_FOR"])) && (! Empty ($ _ SERVER ["HTTP_X_FORWARDED_FOR"]))) ($ ip = $ _SERVER ["HTTP_X_FORWARDED_FOR"];) elseif ((isset ($ _ SERVER ["HTTP_CLIENT_IP"])) && (! Empty ($ _ SERVER ["HTTP_CLIENT_IP"]))) ($ ip = explode (".", $ _ SERVER [ "HTTP_CLIENT_IP"]); $ ip = $ ip. ".". $ Ip. ".". $ Ip. ".". $ Ip;) elseif ((! Isset ($ _ SERVER ["HTTP_X_FORWARDED_FOR"])) | | (empty ($ _ SERVER ["HTTP_X_FORWARDED_FOR"]))) (if ((! isset ($ _ SERVER ["HTTP_CLIENT_IP"])) && (empty ($ _ SERVER ["HTTP_CLIENT_IP"]))) ($ ip = $ _SERVER ["REMOTE_ADDR"];)) return $ ip;) // Get the last entries in the guestbook function getLastRecords ($ iLimit = 3) ($ sRecords = ""; $ aRecords = $ GLOBALS ["MySQL"] -> getAll ( "SELECT * FROM` s178_guestbook` ORDER BY `id` DESC L IMIT ($ iLimit) "); foreach ($ aRecords as $ i => $ aInfo) ($ sWhen = date ("F j, Y H: i", $ aInfo ["when"]); $ sRecords. =<<

($ aInfo ["description"])