如何使用gmail对PHP联系人表单进行身份验证?
这是我工作的代码;然而,我想合并一种使用我的gmail帐户进行smtp身份验证的方法,但我想不出来…帮助如何使用gmail对PHP联系人表单进行身份验证?,php,forms,smtp,gmail,smtp-auth,Php,Forms,Smtp,Gmail,Smtp Auth,这是我工作的代码;然而,我想合并一种使用我的gmail帐户进行smtp身份验证的方法,但我想不出来…帮助 <?php if(isset($_POST['email'])) { $email_to = "jfk003@lvc.edu"; $email_subject = "Website Inquire"; function died($error) { echo "We are very sorry, but there were error
<?php
if(isset($_POST['email'])) {
$email_to = "jfk003@lvc.edu";
$email_subject = "Website Inquire";
function died($error) {
echo "We are very sorry, but there were error(s) found with the form you submitted. ";
echo "These errors appear below.<br /><br />";
echo $error."<br /><br />";
echo "Please go back and fix these errors.<br /><br />";
die();
}
// validation expected data exists
if(!isset($_POST['first_name']) ||
!isset($_POST['last_name']) ||
!isset($_POST['email']) ||
!isset($_POST['telephone']) ||
!isset($_POST['comments'])) {
died('We are sorry, but there appears to be a problem with the form you submitted.');
}
$first_name = $_POST['first_name']; // required
$last_name = $_POST['last_name']; // required
$email_from = $_POST['email']; // required
$telephone = $_POST['telephone']; // not required
$comments = $_POST['comments']; // required
$error_message = "";
$email_exp = "/^[^0-9][A-z0-9_]+([.][A-z0-9_]+)*[@][A-z0-9_]+([.][A-z0-9_]+)*[.][A-z]{2,4}$/";
if (preg_match($email_exp, $email_from)) {
echo "Email address is valid.";
}
else
{
echo "Email address is <u>not</u> valid.";
}
$string_exp = "/^[a-zA-Z .'-]+$/";
if(!preg_match($string_exp,$first_name)) {
$error_message .= 'The First Name you entered does not appear to be valid.<br />';
}
if(!preg_match($string_exp,$last_name)) {
$error_message .= 'The Last Name you entered does not appear to be valid.<br />';
}
if(strlen($comments) < 2) {
$error_message .= 'The Comments you entered do not appear to be valid.<br />';
}
if(strlen($error_message) > 0) {
died($error_message);
}
$email_message = "Form details below.\n\n";
function clean_string($string) {
$bad = array("content-type","bcc:","to:","cc:","href");
return str_replace($bad,"",$string);
}
$email_message .= "First Name: ".clean_string($first_name)."\n";
$email_message .= "Last Name: ".clean_string($last_name)."\n";
$email_message .= "Email: ".clean_string($email_from)."\n";
$email_message .= "Telephone: ".clean_string($telephone)."\n";
$email_message .= "Comments: ".clean_string($comments)."\n";
$headers = 'From: '.$email_from."\n".
'Reply-To: '.$email_from."\n".
'X-Mailer: PHP/'.phpversion();
@mail($email_to, $email_subject, $email_message, $headers);
}
?>
您希望使用现代的PHP邮件库,比如支持SMTP身份验证的邮件库 在和上签出和SwiftMailer的文档 在更新代码以使用SwiftMailer时,您应该抛弃这种讨厌的电子邮件验证正则表达式,它排除了许多完全有效的本地部分和域。你的代码中的其他大部分潜在问题都会被“理智的笔直”保护套解决,比如奇怪的
clean_string
函数——你不需要它(我不知道你认为它在这里做什么,但它并不能真的,呃,让字符串更安全)。你可以使用PHPMailer,下面是你如何使用GMail发送电子邮件,但HTML和CSS在这里帮不了你多少忙
function email($to, $subject, $body){
require_once("class.phpmailer.php");
$mail = new PHPMailer();
$mail->SMTPAuth = true;
$mail->SMTPSecure = "ssl";
$mail->Host = "smtp.gmail.com";
$mail->Port = 465;
$mail->Username = "name@example";
$mail->Password = "123456";
$mail->SetFrom("name@example.com", "Name Example");
$mail->Subject = $subject;
$mail->Body = $body;
$mail->AddAddress($to);
$mail->Send();
unset($mail);
}
我认为使用gmail;google更改了这些身份验证方法,我能够首先按照以下步骤成功进行身份验证: 这是允许外部应用的两步流程 您需要生成一个应用程序密码 然后将该密码用于PHP应用程序。
这是一个完整的工作示例。
This is a complete working example.
<?php
// this is for troubleshooting errors
// set the 1 to 0 to turn off (must set to 0 when in production mode or when you run this live
error_reporting(E_ALL);
ini_set('display_errors', '1');
?><?php
if(isset($_POST['email'])) {
$email_to = $_POST['email'];
$email_subject = "E-mail from website visitor.";
// try adding a useful/relevent message to errors output to users
function died($error) {
echo "We are very sorry, but there were error(s) found with the form you submitted:\n\t ";
echo $error."<br /><br />";
echo "Please go back and fix these errors.<br /><br />";
die();
}
// validation expected data exists
// since all post are submit, check if they are empty or equal to an empty string
if(isset($_POST['email'])){
if($_POST['email'] == "" || $_POST['first_name'] == "" || $_POST['last_name'] == "" || $_POST['telephone'] == "" || $_POST['comments'] == ""){
died('Please fill out the entire form');
}
}
$first_name = $_POST['first_name']; // required
$last_name = $_POST['last_name']; // required
$email_from = $_POST['email']; // required
$telephone = $_POST['telephone']; // not required
$comments = $_POST['comments']; // required
$error_message = "";
$email_exp = '/^[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}$/';
$string_exp = "/^[A-Za-z .'-]+$/";
if(!preg_match($email_exp,$email_from))
$error_message .= 'The Email Address you entered does not appear to be valid.<br />';
if(!preg_match($string_exp,$first_name))
$error_message .= 'The First Name you entered does not appear to be valid.<br />';
if(!preg_match($string_exp,$last_name))
$error_message .= 'The Last Name you entered does not appear to be valid.<br />';
if(strlen($comments) < 2)
$error_message .= 'The Message you entered do not appear to be valid.<br />';
if(strlen($error_message) > 0)
died($error_message);
$email_message = "Form details below.\n\n";
function clean_string($string) {
$bad = array("content-type","bcc:","to:","cc:","href");
return str_replace($bad,"",$string);
}
$email_message .= "First Name: ".clean_string($first_name)."\n";
$email_message .= "Last Name: ".clean_string($last_name)."\n";
$email_message .= "Email: ".clean_string($email_from)."\n";
$email_message .= "Telephone: ".clean_string($telephone)."\n";
$email_message .= "Comments: ".clean_string($comments)."\n";
// create email headers
// changed up your email a bit
$headers = "From: $email_from\n";
$headers.= "MIME-Version: 1.0\n";
$headers .= "Content-type: text/html; charset=iso-8859-1\n";
mail($email_to, $email_subject, $email_message, $headers);
header('Location: http://www.cnn.com');
exit();
}
?>
<form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="post">
Firstname:<br>
<input type="text" name="first_name"><br>
Lastname:<br>
<input type="text" name="last_name"><br>
Email:<br>
<input type="text" name="email"><br>
Phone Number:<br>
<input type="text" name="telephone"><br>
Comments:<br>
<input type="textarea" name="comments"><br><br>
<input type="submit" value="Submit">
</form>
我想说的是,我认为这段代码包含有史以来构思的每一个PHP电子邮件反模式,但您缺少了标题注入。该死。它还涉及通过Gmail的SMTP服务器从PHP发送邮件。我不明白我该如何处理这些快捷邮件。我下载了,但我对php或与之相关的任何东西都不太了解。我只知道css和html。你可以更改标题,将用户重新定位到你的登录脚本或主页,而不是cnn。