回答編集履歴

修正

2017/03/10 04:54

投稿

s8_chu

スコア14731

test CHANGED Viewed

@@ -508,13 +508,13 @@
         <ul>
-            <li><?= h($name) ?>:<?= h($_SESSION["name"]) ?></li>
+            <li><?= h($_SESSION["name"]) ?></li>
-            <li><?= h($gender) ?>:<?= h($_SESSION["gender"]) ?></li>
+            <li><?= h($_SESSION["gender"]) ?></li>
-            <li><?= h($age) ?>代:<?= h($_SESSION["age"]) ?></li>
+            <li><?= h($_SESSION["age"]) ?></li>
-            <li><?= h($message) ?>:<?= h($_SESSION["message"]) ?></li>
+            <li><?= h($_SESSION["message"]) ?></li>
         </ul>

追記

2017/03/10 04:54

投稿

s8_chu

スコア14731

test CHANGED Viewed

@@ -299,3 +299,335 @@
 </html>
 ```
+追記
+---
+```PHP
+<?php
+if (session_status() !== PHP_SESSION_ACTIVE) {
+    session_cache_expire(0);
+    session_cache_limiter('private_no_expire');
+    session_start();
+}
+if (!isset($_SESSION["token"])) {
+    $_SESSION["token"] = "";
+}
+$errorm = "";
+$state = "";
+function h($str)
+{
+    return htmlspecialchars($str, ENT_QUOTES, "UTF-8");
+}
+function getToken()
+{
+    $token = null;
+    if (is_null($token)) {
+        $token = hash("sha256", uniqid());
+    }
+    $_SESSION["token"] = $token;
+    return $token;
+}
+function checkToken($str)
+{
+    return (isset($_SESSION["token"]) && $_SESSION["token"] === $str);
+}
+foreach (["name", "gender", "age", "message"] as $value) {
+    $$value = "";
+}
+if (filter_input(INPUT_POST, "submit")) {
+    if (checkToken(filter_input(INPUT_POST, "token"))) {
+        $state = "submit";
+        unset($_SESSION["token"]);
+        foreach (["name", "gender", "age", "message"] as $value) {
+            if (empty(filter_input(INPUT_POST, $value))) {
+                $errorm = "未入力箇所があります。";
+                $state = "";
+                break;
+            } else {
+                $_SESSION[$value] = filter_input(INPUT_POST, $value);
+            }
+        }
+    } else {
+        $state = "";
+        foreach (["name", "gender", "age", "message"] as $value) {
+            $$value = filter_input(INPUT_POST, $value);
+        }
+    }
+} else if (filter_input(INPUT_POST, "confirm")) {
+    if (checkToken(filter_input(INPUT_POST, "token"))) {
+        $state = "confirm";
+        unset($_SESSION["token"]);
+        foreach (["name", "gender", "age", "message"] as $value) {
+            if (empty(filter_input(INPUT_POST, $value))) {
+                $errorm = "未入力箇所があります。";
+                $state = "";
+                break;
+            } else {
+                if ((!isset($_SESSION[$value])) || $_SESSION[$value] !== filter_input(INPUT_POST, $value)) {
+                    $state = "";
+                }
+            }
+        }
+    } else {
+        $state = "";
+    }
+    //送られてきた内容の保存などの処理は省略。
+}
+?>
+<!DOCTYPE html>
+<html lang="ja">
+<head>
+    <meta charset="utf-8">
+    <title>タイトル</title>
+    <style type="text/css">
+        * {
+            margin: 0;
+            padding: 0;
+        }
+        label {
+            display: block;
+        }
+    </style>
+</head>
+<body>
+<?php if (!empty($errorm)): ?>
+    <strong><?= $errorm ?></strong>
+<?php endif; ?>
+<?php if ($state === "submit"): ?>
+    <form action="" method="post">
+        <ul>
+            <li><?= h($name) ?>:<?= h($_SESSION["name"]) ?></li>
+            <li><?= h($gender) ?>:<?= h($_SESSION["gender"]) ?></li>
+            <li><?= h($age) ?>代:<?= h($_SESSION["age"]) ?></li>
+            <li><?= h($message) ?>:<?= h($_SESSION["message"]) ?></li>
+        </ul>
+        <input type="hidden" name="name" value="<?= h($_SESSION["name"]) ?>">
+        <input type="hidden" name="gender" value="<?= h($_SESSION["gender"]) ?>">
+        <input type="hidden" name="age" value="<?= h($_SESSION["age"]) ?>">
+        <input type="hidden" name="message" value="<?= h($_SESSION["message"]) ?>">
+        <input type="hidden" name="token" value="<?= h(getToken()) ?>">
+        <input type="submit" name="confirm">
+    </form>
+<?php elseif ($state === "confirm"): ?>
+    <p>送信完了。</p>
+<?php else: ?>
+    <form action="" method="post">
+        <label>お名前:
+            <input type="text" name="name" value="<?= h($name) ?>">
+        </label>
+        <span>性別</span>
+        <label>男性:
+            <input type="radio" name="gender" value="男性" <?php if ($gender === "男性") echo "checked"; ?>>
+        </label>
+        <label>女性:
+            <input type="radio" name="gender" value="女性" <?php if ($gender === "女性") echo "checked"; ?>>
+        </label>
+        <label>その他:
+            <input type="radio" name="gender" value="その他" <?php if ($gender === "その他") echo "checked"; ?>>
+        </label>
+        <label>年齢:
+            <select name="age"><?= $age ?>
+                <?php foreach (["10", "20", "30", "40", "50", "60"] as $value): ?>
+                    <?php if ($age === $value): ?>
+                        <?php if ($value === "10"): ?>
+                            <option value="<?= $value ?>" selected><?= $value ?>代未満</option>
+                        <?php elseif ($value === "60"): ?>
+                            <option value="<?= $value ?>" selected><?= $value ?>代以上</option>
+                        <?php else: ?>
+                            <option value="<?= $value ?>" selected><?= $value ?>代</option>
+                        <?php endif; ?>
+                    <?php else: ?>
+                        <?php if ($value === "10"): ?>
+                            <option value="<?= $value ?>"><?= $value ?>代未満</option>
+                        <?php elseif ($value === "60"): ?>
+                            <option value="<?= $value ?>"><?= $value ?>代以上</option>
+                        <?php else: ?>
+                            <option value="<?= $value ?>"><?= $value ?>代</option>
+                        <?php endif; ?>
+                    <?php endif; ?>
+                <?php endforeach; ?>
+            </select>
+        </label>
+        <label>メッセージ（お問い合わせ内容）:
+            <textarea name="message" rows="5" cols="50"><?= h($message) ?></textarea>
+        </label>
+        <input type="hidden" name="token" value="<?= h(getToken()) ?>">
+        <input type="submit" name="submit">
+    </form>
+<?php endif; ?>
+</body>
+</html>
+```