Need some help!

Been away doing a big fibre job and heading off again tomorow so thought I would ask this before I go and I will hopfully pick up some replies next week when I'm back.

I have been using your tips and replies to good effect to get my review submission section of my site off the ground. Its fairly simple as I'm learning the php as I go and with help from other people wo have the same interest (guitars) they have now started to add some reviews.

I have been hit twice now by spam ie some sort of bot or something that has automatically added reviews with linke etc and I have to go to my database and delete them. Is there any simple code you code suggest to put some sort of chek before the reviewer hits submit on my form. my review section is at http://www.guitarandsong.com/links.htm and where I notice the added ones is at http://www.guitarandsong.com/user-reviews.php

Hope you can all help a newbie to php. I'm looking for something simple but effective. Even a suggested site where I could learn about this would help, thanks

I think what you're thinking of is a Captcha. This is the one I use: http://recaptcha.net/

Most simple and effective way to protect from bots is to add a hidden field with sensible name to your form which a bot will most likely fill with some random data and a human will not. Of course, this will not help against specialized bots customized for your site.

@Connelly73
You have a really bad bug with the register. I just managed to post a completely blank guitar review (sorry about that). But basically, You need to check the values before adding them to the database. The simplest way to do so without CAPTCHA, is either to create a function to check:

PHP Code:

<?php
    function clean($String){
        // This Is The Function That Is Going To Clean Your Strings
        $A = stripslashes($String); // Get Rid of PHP Killing Slashes
        $C = strip_tags($A); // Strip HTML Tags </>
        $B = mysql_real_escape_string($C); // Sanitize Overall
        return $B; // Give Back The SAFE String
    }
    $Submit_Button = $_POST['submit'];
    if($Submit_Button){
        // If They Press The Button:
        $Title = clean($_POST['Title']); // Get The Title
        $Brand = clean($_POST['Brand']); // Get The Brand
        $Build = clean($_POST['Build']); // Get The Build
        $Function = clean($_POST['Function']); // Get The Function
        if($Title&&$Brand&&$Build&&$Function){
            $Query = mysql_query("INSERT INTO....");
            if(!$Query){
                die("Sorry Somthing Went Wrong");
            }else{
                die("Your Data Has Been Sent And Inserted Into The Database");
            }
        }else{
            die("You Did Not Enter All Values"); // Kill Script
        }
    
    }
?>

Thanks Guys
Just back so will give these ideas a try over the weekend and post back if any problems.

Cheers

Thanks guys. Used the recaptcha link and it works a treat.

Cheers