Can i be hacked if i public a file php in public folder in laravel 5 -


i have example.php , move public folder in laravel
example.php: 

<html> <body>  <form action="welcome.php" method="post"> name: <input type="text" name="name"><br> e-mail: <input type="text" name="email"><br> <input type="submit"> </form>  </body> </html>

and welcome.php: 

<?php $name = $_post['name']; $email = $_post['email'];  echo "your name: ".$name; echo "your email: ".$email; ?>

and result: 

your name: john email: john@gmail.com

so. safe or dangerous? thanks.

the way have set code out isn't how laravel should used.

for best usage of laravel need put form html views folder under own file example: form.blade.php.

you need make new controller php artisan make:controller formcontroller

i'd suggest making requests folder: php artisan make:request formrequest

within requests brand each of required html name= fields example:

public function rules()     {         return [             'name' => 'required',             'email' => 'required',         ];     }

within routes file you'd need add:

 route::post('/link', 'formcontroller@submitform');

within controller you'd do:

<?php use \app\http\requests\formrequest;  public function submitform(formrequest $formrequest)     {         // logic go in here. firstly fetch request          $fetchdata = $formrequest->get();     }

this basic break down of should doing. you'd need fill logic in.

ps within html have added requests check if they've been filled you'd add like:

@if ($errors->has('name'))     <span class="help-block">         <strong>{{ $errors->first('name') }}</strong>     </span> @endif

i hope gets on right tracks of laravel.

i'd suggest taking @ laracasts have great tutorials.


Comments

Post a Comment

Popular posts from this blog

PHP and MySQL WP -

i trying accomplish 2 things here code. writing php directly wp page using insert php plugin. 1) query mysql database , return results 1 column 4 columns. 2) make each result own hyperlink directs user new wp page runs new query on page. i able query show results , turn results dynamic hyperlink, cannot formatting down. right returns result 1 column. here have: [insert_php] $servername = "localhost"; $username = "login"; //edited privacy $password = "password"; //edited privacy $database = "database"; //edited privacy // create connection $conn = new mysqli($servername, $username, $password, $database); // check connection if ($conn->connect_error) { die("connection failed: " . $conn->connect_error); } echo "connected successfully"; //get results database $result = mysqli_query($conn,"select mine mines order mine"); $all_property = array(); //declare array saving property //showing proper...
Read more

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

go - golang pprof for c library code -

i have been trying profile golang application pprof, seems details of c code(linked static library) missed in output result. flame graph from frame graph can see c code time consuming reported within "runtime._externalcode", no details @ all. , sure static library compiled debug enable. so there way make pprof details(like stack trace) of 3rd party c code? or there other golang profiling tool this?
Read more