HTML to PHP to EXPECT formatting issue

Stuart07 · 04-13-2011, 09:55 AM

I'm new to PHP, so I may be missing something obvious or it could be something with the HTML. I wrote an expect script that tests user authentication against a RADIUS server. The username is an email address, including an @ sign. I recently wrote an HTML/PHP front end to allow others to input username/password into a form and then see the results when they hit submit.

Expect code that takes two args username, and password

Code:

expect "#"

send    "test aaa group radius [lindex $argv 0] [lindex $argv 1] new-code\r"

expect  "#"

This works fine as far as I can tell, the two input boxes pass the input to the php script

Code:

<html>
<head>
<title>Authentication Test</title>
</head>
<body>
<form method= "post" action= "authentication.php">
<font size = "5" color = "blue"><b><u>USER AUTHENTICATION TOOL</u></b></font><br /><br />
Username:
<input type="text" size="30" maxlength="50" name="unstring"/><br />
Password:
<input type="text" size="30" maxlength="50" name="pwstring"/><br /><br />

<input type="submit" value="submit" name="submit"/><br />
</form><br />
</body>
</html

>

This is the php

Code:

<?$uname = $_POST['unstring']?>

<?$passw = $_POST['pwstring']?>

<?$output = shell_exec("expect authentication1.exp {$uname} {$passw}")?>

<?echo "<pre>$output</pre>"?>

Every works as it's supposed to, except for the output of the script. When it displays on the webpage, it's segmented weirdly with all throughout. What I've found is when I remove the @ sign in the username input, it fixes it.

Is there any part of HTML or PHP that treats the @ as a special character? 1 more thing is that I have another HTML/PHP/EXP script that works fine with the @.

Thanks

carltm · 04-16-2011, 06:53 AM

I'll bet that you'll need to use addslashes() or stripslashes()
which will handle the escaping of special characters.

I suspect the problem is in the assignment of $passw. Try this
and see if it works.

Code:

<?$passw = addslashes($_POST['pwstring'])?>

Stuart07 · 04-18-2011, 03:46 PM

I tried wrapping the addslashes and stripslashes tags around the POST variables, but it did not seem to fix the problem. I could have been applying them wrong.

I figured out another way display the results I was looking for, so to solve the strange coding problem I just had the expect script echo something if a regexp were true, instead of the expect script just echo'ing the direct router output.

Code:

send    "test aaa group radius [lindex $argv 0] [lindex $argv 1] new-code\r"

                expect  "#"

                set output $expect_out(buffer)

                set hostindex [lindex $output end]

                set hostname [string trim $hostindex "#"]

                if { [regexp -all "User rejected" $output] == "1" } {

                        puts "$hostname = User Rejected\n"

                } elseif { [regexp -all "User successfully authenticated" $output]  == "1" } {

                        puts "$hostname = User successfully authenticated\n"

                } else {

                        puts "$hostname = Unknown Condition\n"
                }

Cheers