Something wrong with PHP

by

String concatenation is done with dots (.), and not commas (,).

Replace:

fwrite($handle, "<h2 class="Roboto-Slab">$title</h2>", "<br>", "<h3 
class="Roboto-Slab">By $name</h3>", "<p class="Roboto-Slab">$content</p>");

With:

fwrite($handle, "<h2 class="Roboto-Slab">$title</h2>". "<br>". "<h3 
class="Roboto-Slab">By $name</h3>". "<p class="Roboto-Slab">$content</p>");

And it will work. However, this concatenation is useless. You can do simply:

fwrite($handle, "<h2 class="Roboto-Slab">$title</h2><br><h3 class="Roboto-Slab">By $name</h3><p class="Roboto-Slab">$content</p>");

Also check if comments.html file has CHMOD 777. Furthermore, enable error_reporting on your php.ini file, as the PHP error thrown on this case could guide you to the error line easily.

Here’s an implementation of your code secured against stored XSS (the vulnerability that allows people to insert HTML and Javascript code on your page) as well as RCE (remote code execution):

 <?php
if ($_SERVER['REQUEST_METHOD']=='POST') {
    $title = strip_tags($_POST['title']);
    $name = strip_tags($_POST['name']);
    $content = nl2br(htmlspecialchars($_POST['commentContent']));
    $handle = fopen("comments.html", "a");
    fwrite($handle, "<h2 class="Roboto-Slab">$title</h2><br><h3 
    class="Roboto-Slab">By $name</h3><p class="Roboto-Slab">$content</p>");
    fclose($handle);


    }

?>
    <form action="" method="POST">
    <textarea class="comment-boxmain" rows="20" cols="40" name="commentContent" 
    placeholder="Start Typing...."></textarea><br>
    <input class="comment-boxname" placeholder="Title" type="text" 
    name="title">
    <input class="comment-boxname" placeholder="Your Name" type="text" 
    name="name">
    <input class="comment-btn" type="submit" value="post"><br>
    </form>
    <?php echo file_get_contents("comments.html"); ?>

Also, do some searching about database engines (if you want to still using files, take a look on implementation of flat-files databases, as it’s called).

More Related Contents:

  1. Syntax error unexpected '<' [duplicate]
  2. Pass PHP variable value into HTML label [closed]
  3. Unexpected $end but I don’t know why PHP [closed]
  4. php variable changes when clicked on html link [closed]
  5. Thank you for helping [closed]
  6. Auto responder mail reverts fill all fields when i have filled them
  7. Login form using HTML
  8. Seperating html form from php file
  9. Extract URLs from text in PHP
  10. PHP mail function doesn’t complete sending of e-mail
  11. Print string with a php variable in it
  12. How to insert HTML to PHP DOMNode?
  13. The character encoding of the HTML document was not declared
  14. How to write html code inside , I want write html code within the PHP script so that it can be echoed from Backend [closed]
  15. Get img src with PHP
  16. php variable in html no other way than:
  17. RegExp to strip HTML comments
  18. What’s the best practice to set html attribute via PHP?
  19. PHP header() redirect with POST variables [duplicate]
  20. PHP Implode wrap in tags
  21. How can we open a link in private browsing mode
  22. What do the ENT_HTML5, ENT_HTML401, … modifiers on html_entity_decode do?
  23. How can I parse JSON into a html table using PHP?
  24. Hiding a Div using php
  25. HTML PHP Progress Bar
  26. PHP E-mail Form Sender Name Instead Of E-mail?
  27. POST arrays not showing unchecked Checkboxes
  28. saving checkbox state on reload
  29. Why are escape characters being added to the value of the hidden input
  30. loadHTML LIBXML_HTML_NOIMPLIED on an html fragment generates incorrect tags

Leave a Comment