在提交表单前加入一页

Question

我有一个test.php用户可以填写表格来更新限制。 提交后，该页面将被重定向到example.php，用户将不得不输入一次性密码。如果成功，页面将重定向到doTest.php更新限制，如果输入错误的OTP，用户将不得不在test.php中重新填写表单。

如何将页面从test.php重定向到example.php到doTest.php？

需要注意的是：在我的形式test.php，输入将POST到doTest.php。

在test.php的

  <form method="POST" action=""> 
       <table id="table"> 
        <tr> 
         <td class="alt">Existing Daily Limit</td> 
         <td>S$ <?php echo $dailylimit; ?> </td> 
         <input type="hidden" name="dailylimit" value="<?php echo $dailylimit ?>"/> 
        </tr> 
        <tr> 
         <td class="alt"><label for="newdailylimit">New Daily Limit</label></td> 
         <td>$ <select name="newdailylimit"> 
           <option value="100.00">100.00</option> 
           <option value="500.00">500.00</option> 
           <option value="1000.00">1000.00</option> 
           <option value="5000.00">5000.00</option> 
          </select></td> 
        </tr> 
        <tr> 
         <td class="alt">Amount Debited Today</td> 
         <td>S$ <?php echo $debited_today; ?></td> 
        </tr> 
        <tr> 
         <td class="alt">Amount Debited Left</td> 
         <td>S$ <?php echo ($dailylimit - $debited_today); ?> </td> 
        </tr> 
       </table> 
       <br/> 
       <input type="submit" name="submit" value="Submit"> 
      </form> 

在doTest.php

，

<?php 
      if(isset($_POST['submit'])){ 
       $dailylimit = $_POST['dailylimit']; 
       $newdailylimit = $_POST['newdailylimit']; 

       if ($dailylimit != $newdailylimit){ 
        $query = "UPDATE user SET daily_limit='$newdailylimit' WHERE user_id='$user_id'"; 
        $result = mysqli_query($link, $query) or die(mysqli_error($link)); 
        echo "<script>alert('You have successfully updated your daily limit');</script>"; 
        echo '<meta http-equiv="refresh" content="0">'; 

        } 
        elseif ($dailylimit == $newdailylimit){ 
         echo "<script>alert('You have selected the same daily limit as your previous one. Please choose a different one. ');</script>"; 

         } 
         else{ 

         }   

         } 
      ?> 

在使用example.php

，

  <center> 

     <form method="POST" action="" onSubmit="return validate(this)" > 
      <input type="button" value="Click for OTP" onclick="openotp()" /> <br/> <br/> 

       <table id="table"> 
        <tr> 
         <td class="alt"><label for="otp">Enter the 6-digit iBanking OTP </label></td> 
         <td><input type="password" name="otp" maxlength="6"></td> 
        </tr> 
       </table> 
      <br/> 
      <input type="submit" name="submit" value="Click to submit OTP"> 
     </form> 
      </center> 

      <?php 
      $user_id = $_SESSION['user_id']; 
     if(isset($_POST['submit'])){ 
      $otp = $_POST['otp']; 

      $query = "SELECT otp FROM user where user_id='$user_id'"; 
      $result = mysqli_query($link, $query) or die(mysqli_error($link)); 
      $row = mysqli_fetch_array($result); 
      $rand = $row['otp']; 

if ($otp == $rand) { 
$query = "SELECT * FROM user WHERE user_id='$user_id' AND otp='$otp'"; 
$result = mysqli_query($link, $query) or die(mysqli_error($link)); 
echo "<script>location.href='doDailyLimit.php'</script>"; 


} else { 
    echo "<script>alert('You have keyed in an invalid OTP. Please try again.'); location.href='example.php';</script>"; 
} 

     } 

     ?> 

Answer 1

首先将数据保存在test.php的会话中。只有在检查otp是否正确之后，才将它们添加到数据库中。

在test.php的添加以下代码，并设置行动=“test.php的”

这样你就不需要第三个文件的开头。

if(isset($_POST['submit'])){ //form has been submitted 
    if($_POST['dailylimit'] == $_POST['newdailylimit']){ 
     echo "<script>alert('You have selected the same daily limit as your previous one. Please choose a different one. ');</script>"; 
    } else { 
     //you can store 'dailylimit' the same way, but i suppose you won't be needing it anymore. 
     $_SESSION['newdailylimit'] = $_POST['newdailylimit']; 
     header("Location : example.php"); //this will take you to example.php 
    } 
} 

在example.php中，您需要检查otp是否正确。因此，设置action =“example.php”并将下面的代码添加到example.php开头

if(isset($_POST['submit'])){ // form has been submitted. 
    $otp = $_POST['otp']; 
    //now check $otp against your database to see if its correct. 
    //your database code goes here. 
    if(//otp is right){ 
     $newdailylimit = $_SESSION['newdailylimit']; //it was stored in test.php 
     //similarly store your user_id from session. 
     //insert newdailylimit into database. 
    } else { // which means otp is wrong 
     header("Location : test.php?otp=0"); 
     /* by seding otp=0 you can let the user in test.php know that you were redirected back because your otp was wrong. 
     you can add the following code in the beginning of test.php , which will show the message that otp was wrong. 
     and they have to go through the whole process again. 

     if(isset($_GET['otp'])){ 
      if($_GET['otp']==0){ 
       echo "<script>alert('You have provided wrong otp. blah bla...');</script>"; 
      } 
     } 
     */ 
    } 
} 

Answer 2

保存你的数据在$_SESSION，走，使用header('Location: next-page.php')，到下一页检查密码，如果密码正确并且会话数据可用，则保存数据，否则保存数据收听会话并重定向到第一页。