Странная работа скрипта

[The SCS]

Уже стопицот раз перепроверил. Упорно не проверяет на пустоту переменные, и добавляет пустую запись в файл.

<? if (!DEFINED('FROMINDEX')){echo "Terminal: You dont have rights to access this page."; exit;} ?>
<p><h2>WormNET1 quitters black list</h2></p>
<?
	if (isset($_POST['submit']))
	{	
		$player = /*preg_replace("/[^a-z0-9]/i", "", */$_POST['player']/*)*/;
		$reason = /*preg_replace("/[^a-z0-9]/i", "", */$_POST['reason']/*)*/;
		if ($player="" && $reason="")
		{ 
			echo "Fill all fields!"; 
			include "themes/$theme/footer.php"; 
			unset($_POST['submit']);
			exit;
		}
	
		$f = fopen("pages/blacklist.txt", "at");
		fputs($f, "$player - $reason (\$replaylink)<br/>\n");
		fclose($f);
 
		unset($_POST['submit']);
		unset($_POST['player']);
		unset($_POST['reason']);
		header("Location: /blacklist");
		exit;
	}
?>

<p><i>Please do not download many files, this creates a burden on Internet connection.<br />
Otherwise, your network address will be automatically temporarily banned.</i></p>
<p>You can <a href="#add"/>add</a> you own record.</p>
<!-- extracting from database.. -->
<? include "pages/blacklist.txt" ?>

<hr/>
<a name="add"></a>
<form action="" method="POST">
	<p>Player name <br/><input type="text" maxlength=10 size=15 name="player" /></p>
	<p>Reason <br/><input type="text" maxlength=200 size=75 name="reason" /></p>
	<p>Replay <br/><input type="file" name="replay" /></p>
	<p><input type="submit" name="submit" value="Service temporarily unavailable" /></p>
	<p>In fields allowed only numerics and latin symbols. Dont try to cheating with replay, all replays are verifying.</p>
</form>

[The SCS]

я переделал скрипт полностью, теперь работает =)

<? if (!DEFINED('FROMINDEX')){echo "Terminal: You dont have rights to access this page."; exit;} ?>
<p><h2>WormNET1 quitters black list</h2></p>
<?
if (isset($_POST['submit']))
{
	if ($_POST['player'] != '') {$player = preg_replace("/[^a-z0-9]/i", "", $_POST['player']);} else {unset($_POST['player']);}
	if ($_POST['submit'] != '') {$submit = preg_replace("/[^a-z0-9]/i", "", $_POST['submit']);} else {unset($_POST['submit']);}
	if ($_POST['reason'] != '') {$reason = preg_replace("/[^a-z0-9]/i", "", $_POST['reason']);} else {unset($_POST['reason']);}
	
	if (isset($player) && isset($submit) && isset($reason))
	{
		trim($player); trim($reason);
		$f = fopen("pages/blacklist.txt", "at");
		fputs($f, "$player - $reason (\$replaylink)<br/>\n");
		fclose($f);
		header("Location: /blacklist");
		exit;
	} 
	else 
	{
		echo "ERROR: fill all fields.."; 
		include "themes/$theme/footer.php";
		exit();
	}
}
?>

<p><i>Please do not download many files, this creates a burden on Internet connection.<br />
Otherwise, your network address will be automatically temporarily banned.</i></p>
<p>You can <a href="#add"/>add</a> you own record.</p>
<!-- extracting from database.. -->
<? include "pages/blacklist.txt" ?>

<hr/>
<a name="add"></a>
<form action="" method="POST">
	<p>Player name <br/><input type="text" maxlength=10 size=15 name="player" /></p>
	<p>Reason <br/><input type="text" maxlength=200 size=75 name="reason" /></p>
	<p>Replay <br/><input type="file" name="replay" /></p>
	<p><input type="submit" disabled name="submit" value="Service temporarily unavailable" /></p>
	<p>All fields required. <br/>In fields allowed only numerics and latin symbols. Dont try to cheating with replay, all replays are verifying.</p>
</form>

[ADSoft]

убей себя из форума