<?php
include('includes/header.php');
// code
error_reporting(E_ALL); // set error reporting to all
echo('<h1>Andrew\'s Square Calculator</h1>');
// Note the variables being passed via the POST ternary operators.
$step = isset($_POST['step']) ? $_POST['step'] : 0;
$square = isset($_POST['square']) ? $_POST['square'] : '';
// filter all input taken from the Browser
$step = htmlentities($step);
$square = htmlentities($square);
if ($step == 0) // first time into this form
{
?>
<form action="square_form.php" method="POST">
<label for="name">Number to square, i.e. x^(2)</label>
<input type="text" size="16" id="name" name="square" value="">
<br><br>
<input type="hidden" name="step" value="1">
<input type="submit" name="submit" value="Submit">
</form>
<?php
} else // else show what the form gathered
{
echo('<p>The following is what the form gathered</p>');
echo('<p>Please note: The POST array has not been scrubbed</p>');
echo('<p>Thus, it is open to javascript insertion.</p>');
echo('<pre>');
print_r($_POST); // note this dumps the entire contents of the $_POST array
echo('</pre>');
$result = $square * $square;
echo("<h3>Your number squared = $result</h3>");
// provide a form to try again
?>
<form action="square_form.php" method="POST">
<input type="hidden" name="step" value="0">
<input type="submit" name="submit" value="Try Again">
</form>
<?php
}
include('includes/footer.php');