Saving $_POST data to a new page

[a-ok]

Hi folks,

Okay this is a bit of an odd one to explain so if you need to email please do at rich.g.cook(at)gmail.com and I'll happily pay a fee for any solutions if needed.

I'm building a simple cart/checkout setup and on submission at the checkout the form action, on a static test, was submission.php and on this .php file it got the $_POST data from the form, parsed it using twig, and items and pushed it using swift mail to the seller and the buyer.

This all works fine statically, but the issue is now it's on a CMS the $_POST data isn't getting saved across so upon submission all the fields (first name, address etc) are just returning blank.

If I hard link the form submission to the templates folder to submission.php then it works but in the URL you have the weird .php whereas if I add it as a page and template in the CMS it drops the .php which is nicer but it doesn't seem to save any of the data this way.

I know this is a bit confusing, but hopefully I've made some sense and you guys could help.

Thanks,

R

[adrian]

Hi Richard - this should all be very easy to solve.

You say that linking directly to submission.php in the templates folder works - that is weird, because the htaccess rules that come with PW prevent calling php files from the templates folder directly You should get a forbidden error. If you want to call the file directly, you should place it in a folder outside the site folder. This is pretty common practice when processing forms, or calling ajax scripts. You can redirect ($session->redirect) back to a page after the submission, so the user won't even see the .php file in their browser.

That said, there should also be no problem processing a form from a page that has the submission.php template if you'd prefer. I think we need to see your code so we can help - should be an easy fix! 

[a-ok]

Hi @adrian,

Many thanks for the reply, and the encouragement!

Yep, linking directly to the submission.php file works, but only if I remove the htaccess rules I did so as a test to make sure that worked... but of course changed back. I do get a forbidden error if I add the rules back in.

Okay, below is my submission.php file... you can see generally what it is doing. Taking the $_POST data, storing them, then passing them into a few email templates, sending those on, and then echo'ing out an order summary (order-summary.php) page.

<?php

require_once 'ecommerce/swiftmailer/lib/swift_required.php';
require_once 'ecommerce/twig/lib/Twig/Autoloader.php';
Twig_Autoloader::register();

$loader = new Twig_Loader_Filesystem('./');

$twig = new Twig_Environment($loader, array(
'cache' => 'cache/',
));

$twig->clearCacheFiles();

$data['firstname'] = $_POST['firstname'];
$data['lastname'] = $_POST['lastname'];
$data['email'] = $_POST['email'];
$data['telephone'] = $_POST['telephone'];
$data['street0'] = $_POST['street0'];
$data['street1'] = $_POST['street1'];
$data['street2'] = $_POST['street2'];
$data['city'] = $_POST['city'];
$data['state'] = $_POST['state'];
$data['zip'] = $_POST['zip'];
$data['countrycode'] = $_POST['countrycode'];

if (isset($_POST['shipping'])) {
$data['shipping']             = $_POST['shipping'];
$data['shipping_firstname']   = $_POST['shipping_firstname'];
$data['shipping_lastname']    = $_POST['shipping_lastname'];
$data['shipping_email']       = $_POST['shipping_email'];
$data['shipping_telephone']   = $_POST['shipping_telephone'];
$data['shipping_street0']     = $_POST['shipping_street0'];
$data['shipping_street1']     = $_POST['shipping_street1'];
$data['shipping_street2']     = $_POST['shipping_street2'];
$data['shipping_city']        = $_POST['shipping_city'];
$data['shipping_state']       = $_POST['shipping_state'];
$data['shipping_zip']         = $_POST['shipping_zip'];
$data['shipping_countrycode'] = $_POST['shipping_countrycode'];
}

//Check the prices againts you DD
$products = (array) json_decode($_POST['cart']);

// Check this against your DB and get the correct discount
$discount = $_POST['discount'];
$discount_amount = $discount == 'TEST123' ? 50 : 0;

// Check the shipping price
$shipping_price = 0;

foreach ($products as $value)
{
if (property_exists($value, 'size'))
{
if ($value->size > $shipping_price)
{
$shipping_price = $value->size;
}
}
}

switch($shipping_price)
{
case 1:
$shipping_price = 5;
break;
case 2:
$shipping_price = 10;
break;
case 3:
$shipping_price = 15;
break;
};

$total = 0;

foreach ($products as $product)
{
$total += $product->price; 
}

$total -= $discount_amount;

$total += $shipping_price;

$body = $twig->render('order-email.php', array(
'data'            => $data,
'products'        => $products,
'discount_amount' => $discount_amount,
'shipping_price'  => $shipping_price,
'total'           => $total
));

$summary = $twig->render('order-summary.php', array(
'data'            => $data,
'products'        => $products,
'discount_amount' => $discount_amount,
'shipping_price'  => $shipping_price,
'total'           => $total
));

// Show confirmation/summary template
echo $summary;

//$transport = Swift_MailTransport::newInstance();
$transport = Swift_SmtpTransport::newInstance('tls://smtp.gmail.com', 465)
  ->setUsername('rich.g.cook@gmail.com')
  ->setPassword('_______'); // Removed for example

$mailer = Swift_Mailer::newInstance($transport);

$seller_email = Swift_Message::newInstance()
->setSubject('Invoice - Admin')
->setFrom(array('rich@rdck.co' => 'Admin')) // To change
->setTo(array('rich.g.cook@gmail.com' => 'You')) // To change
->setBody($body, 'text/html');

$customer_email = Swift_Message::newInstance()
->setSubject('Invoice - Customer')
->setFrom(array('rich@rdck.co' => 'Admin')) // To change
->setTo(array($_POST['email'] => 'Customer'))
->setBody($body, 'text/html');

$mailer->send($seller_email);
$mailer->send($customer_email);

[adrian]

Yep, linking directly to the submission.php file works, but only if I remove the htaccess rules   I did so as a test to make sure that worked... but of course changed back. I do get a forbidden error if I add the rules back in.

 

Ok - that makes sense - you had me confused there for a minute

 

Firstly, it's not important, but the PW way of handling post data is to use: $input->post->firstname etc.

 

Secondly, teppo has a great SwiftMailer module for PW - works great unless you need to get into batch sending and want access to the throttler and decoration plugins etc. You should try that instead of calling swift manually.

 

 

Now onto the problem at hand - I am not sure at this point

 

Do you have debug mode turned on so you are seeing all PHP errors?

I am wondering if those require_once paths are correct - is the ecommerce folder inside your templates directory?

Have you tried just directly echoing out $_POST['firstname'] with nothing else in the template file? 

Can the page return any content at all, like: echo 'test'; ?