You can't just add things to the mail() function like that, as it expects only certain elements, including the email body contents where I added it. Add the collected data to the $email_body data instead. Using an array for the checkbox data is a good way to go, but I've done something simpler below. I'm not very good at this stuff, but I think something like this might suffice (changes in bold):
Code:
<?php
/*
This first bit sets the email address that you want the form to be submitted to.
You will need to change this value to a valid email address that you can access.
*/
$webmaster_email = "my@email.com";
/*
This bit sets the URLs of the supporting pages.
If you change the names of any of the pages, you will need to change the values here.
*/
$feedback_page = "questionnaire1.html";
$error_page = "error_message.html";
$thankyou_page = "thank_you.html";
/*
This next bit loads the form field data into variables.
If you add a form field, you will need to add it here.
*/
$email_address = $_REQUEST['email_address'] ;
$name = $_REQUEST['name'] ;
$telephone = $_REQUEST['telephone'] ;
$brand = $_REQUEST['brand'] ;
$target_demo = $_REQUEST['target_demo'] ;
$describe_product = $_REQUEST['describe_product'] ;
if (isset($_POST['check'])) {
$check_boxes = $_POST['check'];
}
$check_selections = implode(', ', $check_boxes);
/*
The following function checks for email injection.
Specifically, it checks for carriage returns - typically used by spammers to inject a CC list.
*/
function isInjected($str) {
$injections = array('(\n+)',
'(\r+)',
'(\t+)',
'(%0A+)',
'(%0D+)',
'(%08+)',
'(%09+)'
);
$inject = join('|', $injections);
$inject = "/$inject/i";
if(preg_match($inject,$str)) {
return true;
}
else {
return false;
}
}
$email_body =
"Name: $name\n\n" .
"-----------------------------------------------------------\n\n" .
"Brand: $brand\n\n" .
"-----------------------------------------------------------\n\n"
"Product Description: $describe_product" .
"-----------------------------------------------------------\n\n" .
"Target: $target_demo\n\n" .
"-----------------------------------------------------------\n\n" .
"Options checked: $check_selections\n\n" .
"-----------------------------------------------------------\n\n" .
"Telephone of sender: $telephone";
// If the user tries to access this script directly, redirect them to the feedback form,
if (!isset($_REQUEST['email_address'])) {
header( "Location: $feedback_page" );
}
// If the form fields are empty, redirect to the error page.
elseif (empty($email_address) || empty($target_demo) || empty($describe_product) || empty($telephone) || empty($brand) || empty($name)) {
header( "Location: $error_page" );
}
// If email injection is detected, redirect to the error page.
elseif ( isInjected($email_address) ) {
header( "Location: $error_page" );
}
// If we passed all previous tests, send the email then redirect to the thank you page.
else {
mail( "$webmaster_email", "Client Questionnaire",
$email_body, "From: $email_address" );
header( "Location: $thankyou_page" );
}
?>
Reply With Quote
Originally Posted by ralph.m
), that you do not have 
Bookmarks