Now, I am creating something, something special, but I have run into a spot of bother. I want to send data from a Plus! script to a form online, which will then add data to a database. Problem is, this is something I really do not understand and I want it secure. I am confused about sending data from a script into <input> fields online. So if anyone has any basic examples or any tips to make sure it is secure it would really help .

Thanks .

take a look at this
http://shoutbox.menthix.net/showthread.php?tid=63...d=694150#pid694150

its a bit more complex than you want... but its still an example of POST'ing data

You can't send the data to <input> fields, you have to send it to the php whatever script directly, using preferably POST.

code:

---

var http = new ActiveXObject("Microsoft.XMLHTTP");
http.open ("POST", postaddress, true);
http.send (postdata);

---

Well Ezra, a real example would help a lot, just something to point to a script online and send a PostAddress variable to it. I then can work my way into things by myself .

Well, that one kinda worked already...

code:

---

var http = new ActiveXObject("Microsoft.XMLHTTP");
http.open ("POST", "http://www.absorbation.com/script.php", true);
http.send ("The data you want to sent...");

---

code:

---

var http = new ActiveXObject("Microsoft.XMLHTTP");
http.open ("POST", "http://www.absorbation.com/script.php", true);
http.send ("?name=absorbation&status=online");

---

quote:

---

Originally posted by Ezra

code:

---

var http = new ActiveXObject("Microsoft.XMLHTTP");
http.open ("POST", "http://www.absorbation.com/script.php", true);
http.send ("?name=absorbation&status=online");

---

---

I am having some slight trouble, what is wrong here?

My index.php file: ($con varible is missing for obvious reasons)

code:

---

$value= mysql_real_escape_string($_POST['value']);
mysql_query("insert into personalmessages values('','1','$value','time')");
mysql_close($con);

---

code:

---

function OnEvent_MyPsmChange(NewPsm)
{
var http = new ActiveXObject("Microsoft.XMLHTTP");
http.open ("POST", "http://bananaphone.absorbation.com/index.php", true);
http.send ("?username=absorbation?password=password?feild=psm?value=testing");
}

---

quote:

---

Originally posted by absorbation

I know it is sending something, as every time I change my personal message the database has a value added to it. The problem is, it is not adding the $value variable, any ideas why?

---

quote:

---

Originally posted by absorbation

code:

---

function OnEvent_MyPsmChange(NewPsm)
{
var http = new ActiveXObject("Microsoft.XMLHTTP");
http.open ("POST", "http://bananaphone.absorbation.com/index.php", true);
http.send ("?username=absorbation?password=password?feild=psm?value=testing");
}

---

---

code:

---

?username=absorbation&password=password&feild=psm&value=testing

---

code:

---

username=absorbation&password=password&feild=psm&value=testing

---

quote:

---

Originally posted by Dempsey
Could it be because you have
http.send ("?username=absorbation?password=password?feild=psm?value=testing");
And the script is expecting field?

---

quote:

---

Originally posted by Ezra

Only the first variable should have a question mark the next should have an ampersand

---

code:

---

http.send ("?username=absorbation&password=password&feild=psm&value=testing");

---

Remove the first ? as Ezra already said, and it should work...

quote:

---

Originally posted by J-Thread
Remove the first ? as Ezra already said, and it should work...

---

I found out why it works with RAW and not with the $_POST variables. PHP doesn't know the encoding type.

So you have to set the requestheader

code:

---

function OnEvent_MyPsmChange(NewPsm)
{
  var http = new ActiveXObject("Microsoft.XMLHTTP");
  http.open ("POST", "http://www.absorbation.com/whatever.php", true);
  http.setRequestHeader ("Content-Type", "application/x-www-form-urlencoded");
  http.send ("username=absorbation&password=pass&field=psm&value=" + NewPsm);
 
}

---

Thanks, it finally works, thank you, thank you .

quote:

---

Originally posted by Ezra
I found out why it works with RAW and not with the $_POST variables. PHP doesn't know the encoding type.

So you have to set the requestheader

code:

---

function OnEvent_MyPsmChange(NewPsm)
{
  var http = new ActiveXObject("Microsoft.XMLHTTP");
  http.open ("POST", "http://www.absorbation.com/whatever.php", true);
  http.setRequestHeader ("Content-Type", "application/x-www-form-urlencoded");
  http.send ("username=absorbation&password=pass&field=psm&value=" + escape(NewPsm));
}

---

---

The escape(NewPsm) isn't needed at all... That isn't needed to append the value onto another command/string, and is only needed when you are gonna return a different PSM due to the value in the other PSM.

Cloudy

I think you meant encodeURI(NewPsm)...it is a good practice to encode the variable values with this function, it helps eliminate some errors.