Securimage Example Form

Example Form

This is an example PHP form that processes user information, checks for errors, and validates the captcha code.
This example form also demonstrates how to submit a form to itself to display error messages.

There was a problem with your submission. Errors are displayed below in red.

The captcha was correct and the message has been sent!

$value) { if (!is_array($key)) { // sanitize the input data if ($key != 'ct_message') $value = strip_tags($value); $_POST[$key] = htmlspecialchars(stripslashes(trim($value))); } } $name = @$_POST['ct_name']; // name from the form $email = @$_POST['ct_email']; // email from the form $URL = @$_POST['ct_URL']; // url from the form $message = @$_POST['ct_message']; // the message from the form $captcha = @$_POST['ct_captcha']; // the user's entry for the captcha code $name = substr($name, 0, 64); // limit name to 64 characters $errors = array(); // initialize empty error array if (isset($GLOBALS['DEBUG_MODE']) && $GLOBALS['DEBUG_MODE'] == false) { // only check for errors if the form is not in debug mode if (strlen($name) < 3) { // name too short, add error $errors['name_error'] = 'Your name is required'; } if (strlen($email) == 0) { // no email address given $errors['email_error'] = 'Email address is required'; } else if ( !preg_match('/^(?:[\w\d]+\.?)+@(?:(?:[\w\d]\-?)+\.)+\w{2,4}$/i', $email)) { // invalid email format $errors['email_error'] = 'Email address entered is invalid'; } if (strlen($message) < 20) { // message length too short $errors['message_error'] = 'Please enter a message'; } } // Only try to validate the captcha if the form has no errors // This is especially important for ajax calls if (sizeof($errors) == 0) { require_once dirname(__FILE__) . '/securimage.php'; $securimage = new Securimage(); if ($securimage->check($captcha) == false) { $errors['captcha_error'] = 'Incorrect security code entered
'; } } if (sizeof($errors) == 0) { // no errors, send the form $time = date('r'); $message = "A message was submitted from the contact form. The following information was provided.

" . "Name: $name
" . "Email: $email
" . "URL: $URL
" . "Message:
" . "

$message

" . "

IP Address: {$_SERVER['REMOTE_ADDR']}
" . "Time: $time
" . "Browser: {$_SERVER['HTTP_USER_AGENT']}
"; $message = wordwrap($message, 70); if (isset($GLOBALS['DEBUG_MODE']) && $GLOBALS['DEBUG_MODE'] == false) { // send the message with mail() mail($GLOBALS['ct_recipient'], $GLOBALS['ct_msg_subject'], $message, "From: {$GLOBALS['ct_recipient']}\r\nReply-To: {$email}\r\nContent-type: text/html; charset=ISO-8859-1\r\nMIME-Version: 1.0"); } $_SESSION['ctform']['error'] = false; // no error with form $_SESSION['ctform']['success'] = true; // message sent } else { // save the entries, this is to re-populate the form $_SESSION['ctform']['ct_name'] = $name; // save name from the form submission $_SESSION['ctform']['ct_email'] = $email; // save email $_SESSION['ctform']['ct_URL'] = $URL; // save URL $_SESSION['ctform']['ct_message'] = $message; // save message foreach($errors as $key => $error) { // set up error messages to display with each field $_SESSION['ctform'][$key] = "$error"; } $_SESSION['ctform']['error'] = true; // set error floag } } // POST } $_SESSION['ctform']['success'] = false; // clear success value after running