PHP注意：未定义索引：选择消息

Question

I get always this error:

PHP Notice: Undefined index: selecting-message in /content-protection.php on line 390" and I have tried for many hours to solve this.

I hope someone can help me.

Line 390 Code:

$message = $_POST['selecting-message'];
$update  = mysqli_query($connect, "UPDATE `$table` SET enabled='$enabled', alert='$alert', message='$message' WHERE id=14");

echo '<meta http-equiv="refresh" content="0;url=content-protection">';
}

Answer 1

The notice is telling you that the POST array does not contain an element with the key selecting-message. That could be an empty field on your form from the previous page, a typo or any number of other reasons WHY it doesn't exist.

Simply check for a value instead of assuming it is there:

if ( isset ( $_POST['selecting-message'] ) ) {
    $message = $_POST['selecting-message'];
    $update  = mysqli_query($connect, "UPDATE `$table` SET enabled='$enabled', alert='$alert', message='$message' WHERE id=14");

    echo '<meta http-equiv="refresh" content="0;url=content-protection">';
}

Answer 2

I find the 'unexpected end of file' error is usually caused by an unbalanced brace '{}'somewhere in the code. Check through it and see if there's a '{' somewhere without a corresponding '}'

kev.

Answer 3

You should maybe read something on SQL injections. Passing an POST value directly into a query without sanitizing will end in a hacked website.

Answer 4

It's a simple PHP web shell, as mentioned above allowing code execution on your web server. Better get rid of it and harden your application