✔ Pflichtfelder

Zack · 7. August 2008

ich benutze firefox und opera. es solte aber shcon so sein das es später überall läuft ^^.

mhm bei mir findet keinerlei Überprüfung des Textfeldes statt. Langsam reichts mir -_- ich mach das gleich mit Php wobei Javascript besser wäre. Benutzerfreundlicher durch die Überprüfung wärend der Laufzeit...

Sven Mintel · 7. August 2008

Das hier sollte dein aktueller Code sein:

Code:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<base href="http://wiki.moxiecode.com/examples/tinymce/">
<title>Test</title>
<link href="css/screen.css" rel="stylesheet" type="text/css" />
<link href="/css/syntax.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="jscripts/tiny_mce/tiny_mce.js"></script>
<script language="javascript" type="text/javascript">
tinyMCE.init({
	mode : "textareas",
	theme : "simple"
});


</script>
<script language="JavaScript" type="text/javascript">
		<!--
		function chkFormular() {
			if(document.post.name.value == "") {
				alert("Sie müssen einen Namen angeben.");
				document.post.name.focus();
		   		return false;
			}

			if (tinyMCE.get('content').getContent() == "") {
			    alert("Keine Nachricht");
				tinyMCE.get('content').focus();
		   		return false;
			}

			if(document.post.captcha.value == "") {
				alert("Sie müssen den Sicherheitscode angeben!");
				document.post.captcha.focus();
		   		return false;
			}
		}
		-->
		</script>
</head>
<body>
<form method="post" action="" name="post" onSubmit="return chkFormular()">
<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
	<tr>
		<td>
			Name: *<br /><input type="text" value="" name="name">
		</td>
		<td>
			E-Mail-Adresse: <br /><input type="text" value="" name="mail">
		</td>
		<td>
			Homepage: <br /><input type="text" value="" name="homepage">
		</td>
	</tr>
	<tr>
		<td>
			Sicherheitscode: *
		</td>
		<td>
			<img src="capt/mccapt.php">
		</td>
		<td>
			<input type="text" value="" name="captcha">
		</td>
	</tr>
</table>
<br />
Nachricht: * <br />
<textarea name="content" cols="80" rows="15"></textarea>
<input type="submit" value="Eintrag schreiben." />
</form>
</body>
</html>

....und dort wird geprüft.

Wenn es bei dir nicht geht, hast du wohl anderen Code im Einsatz....ohne diesen zu Kennen, kann man die Ursache nicht finden.

Zack · 7. August 2008

index.php

Kurze Variante:

Javascript:

<?php
/*
 * Created on 04.08.2008
 * Projekt: Waldwirtschaft_Goehler
 * -----------------------------
 * createt by Frank Kubis
 * (c) bei http://waldwirtschaft-goehler.de
 * -----------------------------
 * Dont remove this copyrighttag!
 */
	error_reporting(E_ALL);
	session_start();
	include "function.php";
?>
<!DOCTYPE html
     PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  	<title>Waldwirtschaft Goehler</title>
	<link rel="stylesheet" type="text/css" href="style1.css" />
	<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
	<meta http-equiv="content-language" content="de" />
	<meta name="description" content="Waldwirtschaft Knut G&ouml;hler Schmiedeberg Waldbewirtschaftung Gartenbau Landschaftsbau Baumpflege Baumf&auml;llung Mobiles S&auml;gewerk Holzbearbeitung" />
	<meta name="keywords" content="waldwirtschaft, knut, g&ouml;hler, schmiedeberg, waldbewirtschaftung, gartenbau, landschaftsbau, baumpflege, baumf&auml;llung, mobiles, s&auml;gewerk, holzbearbeitung, altenberg, dippoldiswalde, dresden, tharandt, reichenau, frauenstein, chemnitz, freiberg, brand-erbisdorf, sebnitz, bad schandau, elbe, wei&szlig;eritz, glash&uuml;tte, sachsen, osterzgebirge, seiffen, erzgebirge" />
	<meta name="generator" content="(c) Frank Kubis" />
	<script language="javascript" type="text/javascript" src="jscripts/tiny_mce/tiny_mce.js"></script>
	<script language="JavaScript" type="text/javascript">
			<!--
			function chkFormular() {
				if(document.post.name.value == "") {
					alert("Sie müssen einen Namen angeben.");
					document.post.name.focus();
			   		return false;
				}

				if (tinyMCE.get('content').getContent() == "") {
				    alert("Keine Nachricht");
					tinyMCE.get('content').focus();
			   		return false;
				}

				if(document.post.captcha.value == "") {
					alert("Sie müssen den Sicherheitscode angeben!");
					document.post.captcha.focus();
			   		return false;
				}
			}
			-->
	</script>
</head>
<body>
.....
</body>
</html>

guestbook.php

HTML:

<?php
/*
 * Created on 05.08.2008
 * Projekt: Waldwirtschaft_Goehler
 * -----------------------------
 * createt by Frank Kubis
 * (c) bei http://waldwirtschaft-goehler.de
 * -----------------------------
 * Dont remove this copyrighttag!
 */
?>
<h1>G&auml;stebuch</h1>
        <script type='text/javascript'>
          /* <![CDATA[ */
          tinyMCE.init({
            // General options
            mode : 'textareas',
            theme : 'advanced',
            language : 'de',
            oninit : 'myOnInit',
            plugins : 'safari,link,emotions,inlinepopups,searchreplace,contextmenu,paste,template',

            // Theme options
			            theme_advanced_buttons1 : 'cut,copy,paste,|,search,replace,|,undo,redo,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,|,bullist,numlist,|,forecolor,backcolor,|,fontselect,fontsizeselect',
			            theme_advanced_buttons2 : ' sub, sup, outdent,indent,blockquote,|,link,unlink,anchor,cleanup,|,charmap,emotions',
            theme_advanced_buttons3 : '',
            theme_advanced_toolbar_location : 'top',
            theme_advanced_toolbar_align : 'left',

            // Drop lists for link/image/media/template dialogs
            template_external_list_url : 'lists/template_list.js',
            external_link_list_url : 'lists/link_list.js',
            external_image_list_url : 'lists/image_list.js',
            media_external_list_url : 'lists/media_list.js',

            // Replace values for the template plugin
            template_replace_values : {
              username : 'Some User',
              staffid : '991234'
            }
          });
          /* ]]> */
        </script>
<hr />
<!-- Eintrag schreiben -->
<?php
if(isset($_POST['write']))
{
...
}else{
	?>
	<form method="post" action="" name="post" onsubmit="return chkFormular()">
	<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
		<tr>
			<td>
				Name: *<br /><input type="text" value="" name="name" />
			</td>
			<td>
				E-Mail-Adresse: <br /><input type="text" value="" name="mail" />
			</td>
			<td>
				Homepage: <br /><input type="text" value="http://" name="homepage" />
			</td>
		</tr>
		<tr>
			<td>
				Sicherheitscode: *
			</td>
			<td>
				<img src="capt/mccapt.php" alt="Dosnt work." />
			</td>
			<td>
				<input type="text" value="" name="captcha" />
			</td>
		</tr>
	</table>
	<br />
	Nachricht: * <br />
	<textarea name="content" cols="80" rows="15"></textarea>
	<input type="submit" name="write" value="Eintrag schreiben." />
	</form>
<?php
}
?>
<!-- Anzeige -->
......

dürfte alles beinhalten...

hier mal die lange:
index.php

Javascript:

<?php
/*
 * Created on 04.08.2008
 * Projekt: Waldwirtschaft_Goehler
 * -----------------------------
 * createt by Frank Kubis
 * (c) bei http://waldwirtschaft-goehler.de
 * -----------------------------
 * Dont remove this copyrighttag!
 */
	error_reporting(E_ALL);
	session_start();
	include "function.php";
?>
<!DOCTYPE html
     PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  	<title>Waldwirtschaft Goehler</title>
	<link rel="stylesheet" type="text/css" href="style1.css" />
	<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
	<meta http-equiv="content-language" content="de" />
	<meta name="description" content="Waldwirtschaft Knut G&ouml;hler Schmiedeberg Waldbewirtschaftung Gartenbau Landschaftsbau Baumpflege Baumf&auml;llung Mobiles S&auml;gewerk Holzbearbeitung" />
	<meta name="keywords" content="waldwirtschaft, knut, g&ouml;hler, schmiedeberg, waldbewirtschaftung, gartenbau, landschaftsbau, baumpflege, baumf&auml;llung, mobiles, s&auml;gewerk, holzbearbeitung, altenberg, dippoldiswalde, dresden, tharandt, reichenau, frauenstein, chemnitz, freiberg, brand-erbisdorf, sebnitz, bad schandau, elbe, wei&szlig;eritz, glash&uuml;tte, sachsen, osterzgebirge, seiffen, erzgebirge" />
	<meta name="generator" content="(c) Frank Kubis" />
	<script language="javascript" type="text/javascript" src="jscripts/tiny_mce/tiny_mce.js"></script>
	<script language="JavaScript" type="text/javascript">
			<!--
			function chkFormular() {
				if(document.post.name.value == "") {
					alert("Sie müssen einen Namen angeben.");
					document.post.name.focus();
			   		return false;
				}

				if (tinyMCE.get('content').getContent() == "") {
				    alert("Keine Nachricht");
					tinyMCE.get('content').focus();
			   		return false;
				}

				if(document.post.captcha.value == "") {
					alert("Sie müssen den Sicherheitscode angeben!");
					document.post.captcha.focus();
			   		return false;
				}
			}
			-->
	</script>
</head>
<body>
	<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="Centrierung">
		<tr>
			<td align="center">
				<table width="900" border="0" cellpadding="0" cellspacing="0" summary="Breite defenieren">
					<tr>
						<td>
						<?php

						    define('MYSQL_HOST',     'localhost');
						    define('MYSQL_USER',     'root');
						    define('MYSQL_PASS',     '');
						    define('MYSQL_DATABASE', 'Waldwirtschaft_Goehler');

							// Zur MySQL connecten und DB selecten
							@mysql_connect(MYSQL_HOST, MYSQL_USER, MYSQL_PASS) OR die(error('001'));
							mysql_select_db(MYSQL_DATABASE) OR die(error('002'));
						?>

							<table class="header" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Header">
								<tr>
									<td></td>
								</tr>
							</table>
							<table class="content" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Men&uuml; + Content">
								<tr>
									<td id="menu" valign="top" align="left">
										<?php include"menu.php"; ?>
									</td>
									<td id="content" valign="top" align="left">
										<?php include"content.php"; ?>
									</td>
								</tr>
							</table>
							<table class="copyright" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Copyrights">
								<tr>
									<td align="center">
										<?php if((isset($_SESSION['uid']))AND(!empty($_SESSION['uid'])))
											{
												echo '<a href="admin/index.php">Seitenadministartion</a>';
											}else{
												echo '<a href="admin/index.php">Adminlogin</a>';
												} ?>
											| All &copy; by Waldwirtschaft Goehler | Design &amp; Code created by <a href="mailto:admin@waldwirtschaft-goehler.de">Frank Kubis</a>
									</td>
								</tr>
							</table>
						</td>
					</tr>
				</table>
			</td>
		</tr>
	</table>
</body>
</html>

guestbook.php

HTML:

<?php
/*
 * Created on 05.08.2008
 * Projekt: Waldwirtschaft_Goehler
 * -----------------------------
 * createt by Frank Kubis
 * (c) bei http://waldwirtschaft-goehler.de
 * -----------------------------
 * Dont remove this copyrighttag!
 */
?>
<h1>G&auml;stebuch</h1>
        <script type='text/javascript'>
          /* <![CDATA[ */
          tinyMCE.init({
            // General options
            mode : 'textareas',
            theme : 'advanced',
            language : 'de',
            oninit : 'myOnInit',
            plugins : 'safari,link,emotions,inlinepopups,searchreplace,contextmenu,paste,template',

            // Theme options
			            theme_advanced_buttons1 : 'cut,copy,paste,|,search,replace,|,undo,redo,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,|,bullist,numlist,|,forecolor,backcolor,|,fontselect,fontsizeselect',
			            theme_advanced_buttons2 : ' sub, sup, outdent,indent,blockquote,|,link,unlink,anchor,cleanup,|,charmap,emotions',
            theme_advanced_buttons3 : '',
            theme_advanced_toolbar_location : 'top',
            theme_advanced_toolbar_align : 'left',

            // Drop lists for link/image/media/template dialogs
            template_external_list_url : 'lists/template_list.js',
            external_link_list_url : 'lists/link_list.js',
            external_image_list_url : 'lists/image_list.js',
            media_external_list_url : 'lists/media_list.js',

            // Replace values for the template plugin
            template_replace_values : {
              username : 'Some User',
              staffid : '991234'
            }
          });
          /* ]]> */
        </script>
<hr />
<!-- Eintrag schreiben -->
<?php
if(isset($_POST['write']))
{
	if((!isset($_POST['content']))OR(empty($_POST['content'])))
	{
		?>
		<p class="error">Sie m&uuml;ssen eine Nachricht angeben.</p>
		<form method="post" action="index.php?site=gaestebuch" name="post" onsubmit="return chkFormular()">
		<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
			<tr>
				<td>
					Name: *<br /><input type="text" value="<?php if((isset($_POST['name']))AND(!empty($_POST['name']))){echo $_POST['name'];}?>" name="name" />
				</td>
				<td>
					E-Mail-Adresse: <br /><input type="text" value="<?php if((isset($_POST['mail']))AND(!empty($_POST['mail']))){echo $_POST['mail'];}?>" name="mail" />
				</td>
				<td>
					Homepage: <br /><input type="text" value="<?php if((isset($_POST['homepage']))AND(!empty($_POST['homepage']))){echo $_POST['homepage'];}?>" name="homepage" />
				</td>
			</tr>
			<tr>
				<td>
					Sicherheitscode: *
				</td>
				<td>
					<img src="capt/mccapt.php" />
				</td>
				<td>
					<input type="text" value="" name="captcha" />
				</td>
			</tr>
		</table>
		<br />
		Nachricht: * <br />
		<textarea name="content" cols="80" rows="15"><?php if((isset($_POST['content']))AND(!empty($_POST['content']))){echo $_POST['content'];}?></textarea>
		<input type="submit" name="write" value="Eintrag schreiben." />
		</form>
		<?php
	}elseif(md5($_POST['captcha'])!=$_SESSION['captcha'])
	{
		?>
		<p class="error">Der angegebene Sicherheitscode ist ung&uuml;tig</p>
		<form method="post" action="index.php?site=gaestebuch" name="post" onsubmit="return chkFormular()">
		<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
			<tr>
				<td>
					Name: *<br /><input type="text" value="<?php if((isset($_POST['name']))AND(!empty($_POST['name']))){echo $_POST['name'];}?>" name="name" />
				</td>
				<td>
					E-Mail-Adresse: <br /><input type="text" value="<?php if((isset($_POST['mail']))AND(!empty($_POST['mail']))){echo $_POST['mail'];}?>" name="mail" />
				</td>
				<td>
					Homepage: <br /><input type="text" value="<?php if((isset($_POST['homepage']))AND(!empty($_POST['homepage']))){echo $_POST['homepage'];}?>" name="homepage" />
				</td>
			</tr>
			<tr>
				<td>
					Sicherheitscode: *
				</td>
				<td>
					<img src="capt/mccapt.php" />
				</td>
				<td>
					<input type="text" value="" name="captcha" />
				</td>
			</tr>
		</table>
		<br />
		Nachricht: * <br />
		<textarea name="content" cols="80" rows="15"><?php if((isset($_POST['content']))AND(!empty($_POST['content']))){echo $_POST['content'];}?></textarea>
		<input type="submit" name="write" value="Eintrag schreiben." />
		</form>
		<?php
	}elseif(ip_chek() == true)
	{
		?>
		<p class="error">Spamschutz: Sie m&uuml;ssen 2Minuten und 30 Sekunden zwischen 2 Eintr&auml;gen warten.</p>
		<form method="post" action="index.php?site=gaestebuch" name="post" onsubmit="return chkFormular()">
		<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
			<tr>
				<td>
					Name: *<br /><input type="text" value="<?php if((isset($_POST['name']))AND(!empty($_POST['name']))){echo $_POST['name'];}?>" name="name" />
				</td>
				<td>
					E-Mail-Adresse: <br /><input type="text" value="<?php if((isset($_POST['mail']))AND(!empty($_POST['mail']))){echo $_POST['mail'];}?>" name="mail" />
				</td>
				<td>
					Homepage: <br /><input type="text" value="<?php if((isset($_POST['homepage']))AND(!empty($_POST['homepage']))){echo $_POST['homepage'];}?>" name="homepage" />
				</td>
			</tr>
			<tr>
				<td>
					Sicherheitscode: *
				</td>
				<td>
					<img src="capt/mccapt.php" alt="Dosnt work." />
				</td>
				<td>
					<input type="text" value="" name="captcha" />
				</td>
			</tr>
		</table>
		<br />
		Nachricht: * <br />
		<textarea name="content" cols="80" rows="15"><?php if((isset($_POST['content']))AND(!empty($_POST['content']))){echo $_POST['content'];}?></textarea>
		<input type="submit" name="write" value="Eintrag schreiben." />
		</form>
		<?php
	}elseif((!eregi("^[a-z0-9\._-]+@+[a-z0-9\._-]+\.+[a-z]{2,4}$", $_POST['mail']))AND(isset($_POST['mail']))AND(!empty($_POST['mail'])))
	{
		?>
		<p class="error">Die angegebene E-Mail Adresse ist ung&uuml;tig</p>
		<form method="post" action="index.php?site=gaestebuch" name="post" onsubmit="return chkFormular()">
		<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
			<tr>
				<td>
					Name: *<br /><input type="text" value="<?php if((isset($_POST['name']))AND(!empty($_POST['name']))){echo $_POST['name'];}?>" name="name" />
				</td>
				<td>
					E-Mail-Adresse: <br /><input type="text" value="<?php if((isset($_POST['mail']))AND(!empty($_POST['mail']))){echo $_POST['mail'];}?>" name="mail" />
				</td>
				<td>
					Homepage: <br /><input type="text" value="<?php if((isset($_POST['homepage']))AND(!empty($_POST['homepage']))){echo $_POST['homepage'];}?>" name="homepage" />
				</td>
			</tr>
			<tr>
				<td>
					Sicherheitscode: *
				</td>
				<td>
					<img src="capt/mccapt.php" alt="Dosnt work." />
				</td>
				<td>
					<input type="text" value="" name="captcha">
				</td>
			</tr>
		</table>
		<br />
		Nachricht: * <br />
		<textarea name="content" cols="80" rows="15"><?php if((isset($_POST['content']))AND(!empty($_POST['content']))){echo $_POST['content'];}?></textarea>
		<input type="submit" name="write" value="Eintrag schreiben." />
		</form>
		<?php
	}else{
		if($_POST['homepage']=='http://')$_POST['homepage']='';
		sql_insert("guestbook", "ip, time, name, homepage, email, text", "'".getenv("REMOTE_ADDR")."', '".time()."','".strip_tags($_POST['name'])."', '".strip_tags($_POST['homepage'])."', '".strip_tags($_POST['mail'])."', '".$_POST['content']."'", "023");
		sql_insert("ip_save", "ip, time", "'".getenv("REMOTE_ADDR")."', '".time()."'", "024");
		?>
		<p class="work">Eintrag hinzugef&uuml;gt</p>
		<meta http-equiv="refresh" content="1; URL=index.php?site=gaestebuch">
		<?php
	}
}else{
	?>
	<form method="post" action="" name="post" onsubmit="return chkFormular()">
	<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
		<tr>
			<td>
				Name: *<br /><input type="text" value="" name="name" />
			</td>
			<td>
				E-Mail-Adresse: <br /><input type="text" value="" name="mail" />
			</td>
			<td>
				Homepage: <br /><input type="text" value="http://" name="homepage" />
			</td>
		</tr>
		<tr>
			<td>
				Sicherheitscode: *
			</td>
			<td>
				<img src="capt/mccapt.php" alt="Dosnt work." />
			</td>
			<td>
				<input type="text" value="" name="captcha" />
			</td>
		</tr>
	</table>
	<br />
	Nachricht: * <br />
	<textarea name="content" cols="80" rows="15"></textarea>
	<input type="submit" name="write" value="Eintrag schreiben." />
	</form>
<?php
}
?>
<!-- Anzeige -->
<hr />
<?php
	$max_seiten = 5;
	$mposts = sql_get("COUNT(gbid) AS count", "guestbook", "", "20");
	$seiten = $mposts['count']/$max_seiten;
	$i = 1;
	$j = 0;

	if (!isset($_GET['page']))
	{
	    $sql = "SELECT * FROM guestbook ORDER BY gbid DESC LIMIT 0 ,".$max_seiten.";";
	}
	else
	{
	    $abeintrag = ($_GET['page'] * $max_seiten) - $max_seiten;
	    $sql = "SELECT * FROM guestbook ORDER BY gbid DESC LIMIT ".$abeintrag.",".$max_seiten.";";
	}
	$result = mysql_query($sql) OR die(error("021"));

	echo 'Seite: ';
	for($i = 1; $i - 1< $seiten; $i++)
		{
			if ($i!=1){echo ' | ';}
		    echo '<a href="index.php?site=gaestebuch&amp;page='.$i.'">'.$i.'</a>';
		}
	echo "<br /><br />";

	while($row = mysql_fetch_assoc($result))
	{
			$j = $j+1;
		?>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<colgroup>
				<col width="300" />
				<col width="220" />
				<col width="220" />
			</colgroup>
			<tr>
				<td align="left"><a class="name"><?php echo $row['name']; ?></a></td>
				<td align="right"><a href="mailto:<?php echo $row['email']; ?>"><?php echo $row['email']; ?></a></td>
				<td align="right"><a href="<?php echo $row['homepage'] ?>"><?php echo $row['homepage'] ?></a></td>
			</tr>
		</table>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<tr>
				<td align="right">
					<?php
						$time = getdate($row['time']);
						echo $time['mday'].'.'.$time['mon'].'.'.$time['year'].' - '.$time['hours'].':'.$time['minutes'].' Uhr';

					?>
				</td>
			</tr>
		</table>
		<?php echo str_replace('<br>', '<br />',$row['text']);
		if($j<$max_seiten)
		{?>
		<div class="center">
			<table width="400" border="0" cellpadding="0" cellspacing="0" summary="">
				<tr>
					<td>
						<hr />
					</td>
				</tr>
			</table>
		</div>
		<br />
		<?php
		}
	}
?>

Sven Mintel · 7. August 2008

PHP-Code ist eher wenig hilfreich, der von PHP erzeugte Output wäre hilfreich, denn dieser ist es, mit dem JS arbeitet(Browser->Quelltext)

Zack · 7. August 2008

HTML:

<!DOCTYPE html
     PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  	<title>Waldwirtschaft Goehler</title>
	<link rel="stylesheet" type="text/css" href="style1.css" />
	<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
	<meta http-equiv="content-language" content="de" />
	<meta name="description" content="Waldwirtschaft Knut G&ouml;hler Schmiedeberg Waldbewirtschaftung Gartenbau Landschaftsbau Baumpflege Baumf&auml;llung Mobiles S&auml;gewerk Holzbearbeitung" />
	<meta name="keywords" content="waldwirtschaft, knut, g&ouml;hler, schmiedeberg, waldbewirtschaftung, gartenbau, landschaftsbau, baumpflege, baumf&auml;llung, mobiles, s&auml;gewerk, holzbearbeitung, altenberg, dippoldiswalde, dresden, tharandt, reichenau, frauenstein, chemnitz, freiberg, brand-erbisdorf, sebnitz, bad schandau, elbe, wei&szlig;eritz, glash&uuml;tte, sachsen, osterzgebirge, seiffen, erzgebirge" />
	<meta name="generator" content="(c) Frank Kubis" />
	<script language="javascript" type="text/javascript" src="jscripts/tiny_mce/tiny_mce.js"></script>
	<script language="JavaScript" type="text/javascript">
			<!--
			function chkFormular() {
				if(document.post.name.value == "") {
					alert("Sie müssen einen Namen angeben.");
					document.post.name.focus();
			   		return false;
				}

				if (tinyMCE.get('content').getContent() == "") {
				    alert("Keine Nachricht");
					tinyMCE.get('content').focus();
			   		return false;
				}

				if(document.post.captcha.value == "") {
					alert("Sie müssen den Sicherheitscode angeben!");
					document.post.captcha.focus();
			   		return false;
				}
			}
			-->
	</script>
</head>
<body>
	<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="Centrierung">
		<tr>
			<td align="center">
				<table width="900" border="0" cellpadding="0" cellspacing="0" summary="Breite defenieren">
					<tr>
						<td>
						
							<table class="header" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Header">
								<tr>
									<td></td>
								</tr>
							</table>
							<table class="content" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Men&uuml; + Content">
								<tr>
									<td id="menu" valign="top" align="left">
										<table class="menu" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Menu">
	<tr><td class="menu"><a href="index.php?site=startseite">Startseite</a></td></tr><tr><td class="menu"><a href="index.php?site=gaestebuch">Gästebuch</a></td></tr><tr><td class="menu"><a href="index.php?site=impressum">Impressum</a></td></tr><tr><td class="menu"><a href="index.php?site=test">TEST</a></td></tr>	<tr><td class="menu_fooder"></td></tr>
</table>
									</td>
									<td id="content" valign="top" align="left">
										<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="Content">
  <tr>
    <td>
      <h1>G&auml;stebuch</h1>
        <script type='text/javascript'>
          /* <![CDATA[ */
          tinyMCE.init({
            // General options
            mode : 'textareas',
            theme : 'advanced',
            language : 'de',
            oninit : 'myOnInit',
            plugins : 'safari,link,emotions,inlinepopups,searchreplace,contextmenu,paste,template',

            // Theme options
			            theme_advanced_buttons1 : 'cut,copy,paste,|,search,replace,|,undo,redo,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,|,bullist,numlist,|,forecolor,backcolor,|,fontselect,fontsizeselect',
			            theme_advanced_buttons2 : ' sub, sup, outdent,indent,blockquote,|,link,unlink,anchor,cleanup,|,charmap,emotions',
            theme_advanced_buttons3 : '',
            theme_advanced_toolbar_location : 'top',
            theme_advanced_toolbar_align : 'left',

            // Drop lists for link/image/media/template dialogs
            template_external_list_url : 'lists/template_list.js',
            external_link_list_url : 'lists/link_list.js',
            external_image_list_url : 'lists/image_list.js',
            media_external_list_url : 'lists/media_list.js',

            // Replace values for the template plugin
            template_replace_values : {
              username : 'Some User',
              staffid : '991234'
            }
          });
          /* ]]> */
        </script>
<hr />
<!-- Eintrag schreiben -->
		<p class="error">Der angegebene Sicherheitscode ist ung&uuml;tig</p>
		<form method="post" action="index.php?site=gaestebuch" name="post" onsubmit="return chkFormular()">
		<table width="400" border="0" cellpadding="1" cellspacing="1" summary="Gästebuch">
			<tr>
				<td>
					Name: *<br /><input type="text" value="123" name="name" />
				</td>
				<td>
					E-Mail-Adresse: <br /><input type="text" value="" name="mail" />
				</td>
				<td>
					Homepage: <br /><input type="text" value="http://" name="homepage" />
				</td>
			</tr>
			<tr>
				<td>
					Sicherheitscode: *
				</td>
				<td>
					<img src="capt/mccapt.php" />
				</td>
				<td>
					<input type="text" value="" name="captcha" />
				</td>
			</tr>
		</table>
		<br />
		Nachricht: * <br />
		<textarea name="content" cols="80" rows="15"><p>21323123</p></textarea>
		<input type="submit" name="write" value="Eintrag schreiben." />
		</form>
		<!-- Anzeige -->
<hr />
Seite: <a href="index.php?site=gaestebuch&amp;page=1">1</a> | <a href="index.php?site=gaestebuch&amp;page=2">2</a> | <a href="index.php?site=gaestebuch&amp;page=3">3</a><br /><br />		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<colgroup>
				<col width="300" />
				<col width="220" />
				<col width="220" />
			</colgroup>
			<tr>
				<td align="left"><a class="name">123</a></td>
				<td align="right"><a href="mailto:"></a></td>
				<td align="right"><a href=""></a></td>
			</tr>
		</table>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<tr>
				<td align="right">
					7.8.2008 - 12:39 Uhr				</td>
			</tr>
		</table>
		<p>tag</p>		<div class="center">
			<table width="400" border="0" cellpadding="0" cellspacing="0" summary="">
				<tr>
					<td>
						<hr />
					</td>
				</tr>
			</table>
		</div>
		<br />
				<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<colgroup>
				<col width="300" />
				<col width="220" />
				<col width="220" />
			</colgroup>
			<tr>
				<td align="left"><a class="name">test</a></td>
				<td align="right"><a href="mailto:"></a></td>
				<td align="right"><a href=""></a></td>
			</tr>
		</table>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<tr>
				<td align="right">
					7.8.2008 - 11:19 Uhr				</td>
			</tr>
		</table>
				<div class="center">
			<table width="400" border="0" cellpadding="0" cellspacing="0" summary="">
				<tr>
					<td>
						<hr />
					</td>
				</tr>
			</table>
		</div>
		<br />
				<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<colgroup>
				<col width="300" />
				<col width="220" />
				<col width="220" />
			</colgroup>
			<tr>
				<td align="left"><a class="name">Frank</a></td>
				<td align="right"><a href="mailto:"></a></td>
				<td align="right"><a href=""></a></td>
			</tr>
		</table>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<tr>
				<td align="right">
					7.8.2008 - 10:24 Uhr				</td>
			</tr>
		</table>
		<p>wwww.google.de</p>		<div class="center">
			<table width="400" border="0" cellpadding="0" cellspacing="0" summary="">
				<tr>
					<td>
						<hr />
					</td>
				</tr>
			</table>
		</div>
		<br />
				<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<colgroup>
				<col width="300" />
				<col width="220" />
				<col width="220" />
			</colgroup>
			<tr>
				<td align="left"><a class="name">Test2</a></td>
				<td align="right"><a href="mailto:"></a></td>
				<td align="right"><a href=""></a></td>
			</tr>
		</table>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<tr>
				<td align="right">
					7.8.2008 - 0:21 Uhr				</td>
			</tr>
		</table>
		<p>testtwgfhtes sgfdfggh</p>
<p>&nbsp;&lt;script&gt;alert('XSS')&lt;/script</p>
<p>&nbsp;</p>		<div class="center">
			<table width="400" border="0" cellpadding="0" cellspacing="0" summary="">
				<tr>
					<td>
						<hr />
					</td>
				</tr>
			</table>
		</div>
		<br />
				<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<colgroup>
				<col width="300" />
				<col width="220" />
				<col width="220" />
			</colgroup>
			<tr>
				<td align="left"><a class="name">test</a></td>
				<td align="right"><a href="mailto:test">test</a></td>
				<td align="right"><a href="http://">http://</a></td>
			</tr>
		</table>
		<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="">
			<tr>
				<td align="right">
					6.8.2008 - 23:52 Uhr				</td>
			</tr>
		</table>
		<p>test</p>    </td>
  </tr>
</table>
									</td>
								</tr>
							</table>
							<table class="copyright" width="100%" border="0" cellpadding="0" cellspacing="0" summary="Copyrights">
								<tr>
									<td align="center">
										<a href="admin/index.php">Seitenadministartion</a>											| All &copy; by Waldwirtschaft Goehler | Design &amp; Code created by <a href="mailto:admin@waldwirtschaft-goehler.de">Frank Kubis</a>
									</td>
								</tr>
							</table>
						</td>
					</tr>
				</table>
			</td>
		</tr>
	</table>
</body>
</html>

Sven Mintel · 7. August 2008

Du hast dort eine Tabellenzelle mit der ID "content" drinnen...ändere diese ID, diese erzeugt einen Konflikt mit der gleichlautenden ID des Editors.
Alternativ kannst d auch statt per tinyMCE.get('content') über

Code:

tinyMCE.activeEditor

....auf Selbigen zugreifen, da du ja nur einen davon verwendest.

Darüber hinaus hast du als option "oninit" eine Funktion "myOnInit" angegeben, welche nicht existiert...das verursacht zwar nicht den genannten Fehler, aber halt einen JS-Fehler, und solltest du daher besser herausnehmen.

Zack · 7. August 2008

Ah, danke. Jeztz geht es.

kuddeldaddeldu · 7. August 2008

Hi,

PHP-seitig solltest Du aber trotzdem zusätzlich prüfen. Sonst schaltet man einfach Javascript ab und umgeht Deine Pflichtfelder.

LG

✔ Pflichtfelder

Zack

cookies vader

Sven Mintel

Mitglied

Zack

cookies vader

Sven Mintel

Mitglied

Zack

cookies vader

Sven Mintel

Mitglied

Zack

cookies vader

kuddeldaddeldu

Erfahrenes Mitglied

Neue Beiträge