'; function inc($x){ $x=$x+1; return $x; } function filterString($field){ //sanitize string $field = filter_var(trim($field),FILTER_SANITIZE_STRING); if(!empty($field)){ return $field; } else{ return false; } } function filterImage($img){ //check if image was uploaded without errors if(isset($_FILES['photo']) && $_FILES['photo']['error']==0){ $allowed = array("jpg"=>"image/jpg","jpeg"=>"image/jpeg","png"=>"image/png","gif"=>"image/gif"); $filename = $_FILES['formBanner']['name']; $filetype = $_FILES['formBanner']['type']; $filesize = $_FILES['formBanner']['size']; //verify file extension $ext = pathinfo($filenme,PATHINFO_EXTENSION); if (!array_key_exists($ext, $allowed)) { $bannerMsg = "please select a valid file format."; return false; } //verify filesize - 5mb maximum $maxsize = 5*1024*1024; if ($filesize>$maxsize) { $bannerMsg = "Filesize is higher than allowed limit."; return false; } //verify MYME type of the file if (in_array($filetype,$allowed)) { if (file_exists('img/'.$filename)) { $bannerMsg=""; } else{ move_uploaded_file($_FILES["photo"]["tmp_name"], "img/".$filename); } } else{ $bannerMsg = "There was a problem uploading your photo. Please try again."; return false; } } else{ $bannerMsg = $_FILES['formBanner']['error']; return false; } } if ($_SERVER['REQUEST_METHOD']=="POST") { $formTitle = $_POST['title']; $submitButtonValue = $_POST['submitValue']; $pageTitle = $_POST['pageTitle']; //validating banner if (empty($POST['formBanner'])) { // code... } else{ filterImage($FILES['formBanner']); $banner = "img/".$_FILES['formBanner']['name']; } //validating labels foreach ($_POST as $key => $value) { echo $key; echo $value; if (stripos($key,'label')!==false) { $label[$a] = $value; $a = inc($a); } if (stripos($key,"text")!==false) { $text[$b] = $value; $b = inc($b); } if (stripos($key,"password")!==false) { $password[$d] = $value; $d = inc($d); } } foreach($text as $key){ $fieldRow[$c] = '

'.$label[$c].'

'; $c = inc($c); } foreach($password as $key){ $fieldRow[$c] = '

'.$label[$c].'

'; $c = inc($c); } foreach($fieldRow as $val) { $formRows .= $val; } $submitRow = '

'; if (empty($bannerMsg)) { $handle = fopen($pageTitle.".html", 'w'); $content = $head.$formTitle.''.$formRows.$submitRow.$close; fwrite($handle, $content); } } ?>

'; $close = '