PHP form need required fields and anti spam security

[shush1]

Hi I have created a form that I want results sent to my email but i want it to have required fields and make the form secure from spam. My php looks like this: Can someone help me make the fields required and secure from spam please?

Thanx


[PHP
<?php

$result = "Beechwood Homes website enquiry form\r\n\r\n";
$result .= "Developments: " . $Developments . "\r\n";
$result .= "Name: " . $Fname . "\r\n";
$result .= "Last Name: " . $Lname . "\r\n";
$result .= "Email: " . $Email . "\r\n";
$result .= "Tel: " . $Phone . "\r\n";
$result .= "Address: " . $Address . "\r\n";
$result .= "Address2: " . $Address2 . "\r\n";
$result .= "Town: " . $Town . "\r\n";
$result .= "County: " . $County . "\r\n";
$result .= "Postcode: " . $Postcode . "\r\n";
$result .= "Country: " . $Country . "\r\n";
$result .= "Min property price: " . $Minprice . "\r\n";
$result .= "Max property price: " . $Maxprice . "\r\n";
$result .= "Do you have a house to sell?: " . $Selling . "\r\n";
$result .= "How did you find this Web Site?: " . $Source . "\r\n";
$result .= "Please tick the box if you would like to be added to our mailing list: " . $Mailinglist . "\r\n";


if ($Email) {
$headers = "From: $Fname <$Email>\r\n\r\n";
} else {
$headers = "From: No Name given <anonymous@yourserver.com>\r\n\r\n";
}

$sendit = mail("my@email.co.uk", "Website contact form", $result, $headers) or die("Something went wrong");

echo "<meta http-equiv='refresh' content='0; url=thank.htm'>";
die;

?>
][/PHP]

[codeexploiter]

You can validate your form fields using JavaScript and PHP (the PHP part is optional) before sending the mail.

The following page will give you a step by step explanation about various mail sending methods in PHP using the normal mode:

http://www.webcheatsheet.com/PHP/sen...attachment.php

PEAR PHP extension supports a mail class which contains various utilities and you can make use of that if you need that:

http://www.hudzilla.org/phpbook/read.php/15_5_2

For me when I've used the mail function of PHP sometimes it acted as spams and when I used the PEAR it worked for me.

[Master_script_maker]

i think you mean the other way around. the javascript is optional. php is mandatory. people could bypass the javascript by disabling it.

[alexjewell]

Master Script Maker is right: if validation is necessary, use javascript to make it easier but do not rely on that javascript.

[boogyman]

$sendit = mail("my@email.co.uk", "Website contact form", $result, $headers) or die("Something went wrong");

echo "<meta http-equiv='refresh' content='0; url=thank.htm'>";
die;

?> 

get rid of the html redirect, instead use

if(mail("my@email.co.uk", "Website contact form", $result, $headers))
{
     // sends the user to the good page
     header('thank.htm');
}
else
{
     // kills the processing and prints an error
     die('Could not send email');
}