PHP - Moved: Importing Contacts From A User's Email Account

I am working on a web form in PHP which accepts a Paypal Email address from the user.

I need to authenticate (validate or check) if the Paypal email address entered is a valid Paypal email account.

Please reply.

All comments and feedback are welcomed.

Thank you!

This code logs the user in with the correct user_email, user_pwd, and active=1.
A '0' is inserted into the active column of the users table during registration.
I need help checking if active=0 then flash_warning('User account not activated').

login_user.php
Code: [Select]
<?php
 include(MODEL_PATH.'user.php');

 switch ($route['view']){

 case "login_user":
if(login($params['user']['user_email'], $params['user']['user_pwd']))
{
flash_notice('You are logged in!');
redirect_to('');
}
else
{
flash_warning('Username or password is invalid!');
$route['view'] = 'login';
}
 break;
}user.php
Code: [Select]
<?php
 session_start();

 function login($username, $password)
 {
db_connect_posts();

$query = sprintf("SELECT * FROM users
WHERE 
user_email = '%s' AND
user_pwd = '%s' AND 
active = '1'"
, mysql_real_escape_string($username),
md5($password)
);

$result = mysql_query($query);

$number_of_posts = mysql_num_rows($result);

if($number_of_posts == 0)
{
return false;
}

$row = mysql_fetch_array($result);

$_SESSION['user'] = $row;

return true;
 }
?>Login form
Code: [Select]
<form action="<?php echo '/'.APP_ROOT.'/'; ?>sessions/login_user" method="post">
 <fieldset>
  <legend>Login</legend>
  <div>
    <label>E-mail</label>
    <input name="user[user_email]" size="40" type="text" />
  </div>
 
  <div>
    <label>Password</label>
    <input name="user[user_pwd]" size="40" type="password" />
  </div>
  <input type="submit" value="Login" />
 </fieldset>
</form>

Hi I am currently making a site where users can upload second hand books for sale, I have everything working as i wish apart from i am having trouble creating a account page where users can review the books they have posted.

so far i use the following code to bring view a the data associated with an uploaded book based on its id

Code: [Select]
  public static function getById( $id ) {
    $conn = new PDO( DB_DSN, DB_USERNAME, DB_PASSWORD );
    $sql = "SELECT * FROM books WHERE id = :id";
    $st = $conn->prepare( $sql );
    $st->bindValue( ":id", $id, PDO::PARAM_INT );
    $st->execute();
    $row = $st->fetch();
    $conn = null;
    if ( $row ) return new Book( $row );
  }

I think i can use a similar function for my user account however, each book entered by a user has their member id attached to it, which is gained from there id in the members table which in turn is stored in $_SESSION['id']. My question is, is there a way to rework the code above to have something like select * where member_id = $_SESSION['id']. I have tried a few things and get stuck manly due to the fact i dont know what to replace the current :id with.

Thanks in advance, i hope i explained it well enough for you lot to understand.

Ian

Hi all

I need some help with displaying user account details i am currently able to show only the email address and i would like to show the name school name and yeargroup

heres my code for myaccount.php
<?php require_once('Connections/isn_1.php'); ?>
<?php
if (!isset($_SESSION)) {
  session_start();
}
$MM_authorizedUsers = "1,2,3,4";
$MM_donotCheckaccess = "false";

// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) { 
  // For security, start by assuming the visitor is NOT authorized. 
  $isValid = False; 

  // When a visitor has logged into this site, the Session variable MM_Username set equal to their username. 
  // Therefore, we know that a user is NOT logged in if that Session variable is blank. 
  if (!empty($UserName)) { 
    // Besides being logged in, you may restrict access to only certain users based on an ID established when they login. 
    // Parse the strings into arrays. 
    $arrUsers = Explode(",", $strUsers); 
    $arrGroups = Explode(",", $strGroups); 
    if (in_array($UserName, $arrUsers)) { 
      $isValid = true; 
    } 
    // Or, you may restrict access to only certain users based on their username. 
    if (in_array($UserGroup, $arrGroups)) { 
      $isValid = true; 
    } 
    if (($strUsers == "") && false) { 
      $isValid = true; 
    } 
  } 
  return $isValid; 
}

$MM_restrictGoTo = "login.php?login=false";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {   
  $MM_qsChar = "?";
  $MM_referrer = $_SERVER['PHP_SELF'];
  if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
  if (isset($_SERVER['QUERY_STRING']) && strlen($_SERVER['QUERY_STRING']) > 0) 
  $MM_referrer .= "?" . $_SERVER['QUERY_STRING'];
  $MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
  header("Location: ". $MM_restrictGoTo); 
  exit;
}
?>
<!DOCTYPE HTML>
<html>
<head>
<title>My Account - <?php echo($_SESSION['MM_Username']); ?></title>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css">
@import url("style.css");
</style>
</head>
<body class="about">
<!-- Start NavBar -->
<div id="topnavbar">
<dl>
<dt id="home"><a href="index.php">Home</a></dt>
        <dt id="about"><a href="about.php">About</a></dt>
        <dt id="account"><a href="myaccount.php">Account</a></dt>
        <dt id="login"><a href="login.php">Login</a></dt>
        </dl>
    <dl id="rightnavbar">
     <dt id="ISN"><a href="index.php">ISN</a></dt>
    </dl>
</div>
<!-- End NavBar -->
<div id="page-container"> 

<div id="header"> 
</div> 
    
<div id="sidebar-a"></div> 

<div id="content"> 
<div class="padding">
  <center>
    <table width="631" border="0">
      <tr>
        <td colspan="2">Personal Details</td>
          </tr>
      <tr>
        <td width="229">&nbsp;</td>
        <td width="648"></td>
          </tr>
      <tr>
        <td>Name</td>
        <td></td>
          </tr>
      <tr>
        <td>Email</td>
        <td><?php echo($_SESSION['MM_Username']); ?></td>
          </tr>
      <tr>
        <td>School Name</td>
        <td></td>
          </tr>
      <tr>
        <td>Year Group</td>
        <td></td>
          </tr>
      <tr>
        <td>DOB</td>
        <td></td>
          </tr>
      <tr>
        <td>&nbsp;</td>
        <td><a href="updateprofile.php">Modify my details</a></td>
          </tr>
        </table>
    <a href="logout.php">Logout?</a>
      </center>
</div> 
</div> 

<div id="footer"> 
<div id="altnav"> 
<a href="index.php">Home</a> - 
<a href="login.php">Login</a> - 
<a href="register.php">Register</a> - 
<a href="about.php">About</a> -
        <a href="terms.php">Terms & Conditions</a>
</div> 
<div id="copyright">&copy; 2011 InterSchoolsNetwork, All Rights Reserved - A <a href="http://jordansmithsolutions.co.uk">Jordan Smith Solutions</a> &amp; <a href="http://www.joecocorp.webs.com/">JoeCo Corp Production</a><br /> 
</div> 
</div> 
</div> 
</body>
</html>
<?php
mysql_free_result($rsUpdateUser);
?>


If you need any other code to help answer it for me then let me no please

How would I go about creating a new user email account that can be accessed via my cpanel mail scripts (RoundCube, SquirrelMail, etc.), in PHP.

I am developing a CMS for my clients where the login to administrate their website is through my own website. This unified back-end allows me to develop the functionality and user experience without the issue of updating each site manually with the new files or running a complicated macro etc and then uploading them all individually too.

I would also like to combine as much of the "client side" CMS code too, i.e. as many of the php files that are stored on the clients website as possible.

All of the websites (and the backend website) are located on the same VPS, running PHP V5.3, allow_url_include is not available, I could have it turned on but this causes security issues if I understand correctly?

I figure my main options a

- Turn on allow_url_include and just include via IP/Domain.

- Use a FTP system similar to the way Wordpress allows remote install of plugins and system updates.

or

- Include the files using a different /home/username/cmsincludes/ path? Is it possible to use another VPS account to include from? I have tested and it gives me a "failed to open stream" error.
Example:

Client xyz Website
Website located: /home/xyz/public_html/
CMS Included: /home/mainsite/cms/

Client 123 Website
Website located: /home/123/public_html/
CMS Included: /home/mainsite/cms/

Client xxx Website
Website located: /home/xxx/public_html/
CMS Included: /home/mainsite/cms/

Hey guys, Just lately I have been trying to start a specific project for myself. I started off by designing the pages etc on HTML, and then a friend of mine helped me convert them to PHP.   At the moment, when a user registers to the site, they only require to enter a Username and Password. I would like to add their email to it too, due to adding slightly extra security. It would also be used for future reasons such as sending emails out etc.   I'm not sure about adding this, I know that most likely it is going to be VERY similar to how it already is, but I couldn't seem to get it to work when I tried.   Ill give the coding which I am using for this below (the documents which I believe would need editing) :   Register.php

<?php

require($_SERVER['DOCUMENT_ROOT'] . '/TruckWorld/includes/config.php');

$sOutput .= '<div id="register-body">';

if (isset($_GET['action'])) {
	switch (strtolower($_GET['action'])) {
		case 'register':
			// If the form was submitted lets try to create the account.
			if (isset($_POST['username']) && isset($_POST['password'])) {
				if (createAccount($_POST['username'], $_POST['password'])) {
					$sOutput .= '<h1>Account Created</h1><br />Your account has been created. 
								You can now login <a href="login.php">here</a>.';
				}else {
					// unset the action to display the registration form.
					unset($_GET['action']);
				}				
			}else {
				$_SESSION['error'] = "Username and or Password was not supplied.";
				unset($_GET['action']);
			}
		break;
	}
}

// If the user is logged in display them a message.
if (loggedIn()) {
	$sOutput .= '<h2>Already Registered</h2>
				You have already registered and are currently logged in as: ' . $_SESSION['username'] . '.
				<h4>Would you like to <a href="login.php?action=logout">logout</a>?</h4>
				<h4>Would you like to go to <a href="index.php">site index</a>?</h4>';
				
// If the action is not set, we want to display the registration form
}elseif (!isset($_GET['action'])) {
	// incase there was an error 
	// see if we have a previous username
	$sUsername = "";
	if (isset($_POST['username'])) {
		$sUsername = $_POST['username'];
	}
	
	$sError = "";
	if (isset($_SESSION['error'])) {
		$sError = '<span id="error">' . $_SESSION['error'] . '</span><br />';
	}
	
	$sOutput .= '<!DOCTYPE html>
	<html>
	
	<head>
	
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
	
    <title>Truck World - Register</title>
	
    <!-- Core CSS - Include with every page -->
    <link href="css/bootstrap.min.css" rel="stylesheet">
    <link href="font-awesome/css/font-awesome.css" rel="stylesheet">
	
    <!-- SB Admin CSS - Include with every page -->
    <link href="css/sb-admin.css" rel="stylesheet">
	
	
	</head>
	
	<body>
	
	<div align=center><img src="images/logintitle.png" alt="LoginTitle" /></div>
	
    <div class="container">
	<div class="row">
	<div class="col-md-4 col-md-offset-4">
	<div class="login-panel panel panel-default">
	<div class="panel-heading">
	<h3 class="panel-title">Register To Join Truck World!</h3>
	</div>
	<div class="panel-body">
		' . $sError . '
		<form name="register" method="post" action="' . $_SERVER['PHP_SELF'] . '?action=register">
			<fieldset>
			<div class="form-group">
				<input class="form-control" placeholder="Username" name="username" type="username" autofocus="">
			</div>
			<div class="form-group">
				<input class="form-control" placeholder="Password" name="password" type="password" value="">
			</div>
			<div class="form-group">
				<input class="form-control" placeholder="Email" name="email" type="email" value="">
			</div>
			<!-- Change this to a button or input when using this as a form -->
			<input type="submit" class="btn btn-lg btn-success btn-block" name="submit" value="Register" />
			<a href="login.php"class="btn btn-lg btn-success btn-block">Login</a>
		</fieldset>';
}

$sOutput .= '</div>
</div>
</div>
</div>
</div>

<div align=center><h5><small>Copyright - Lewis Pickles 2014 - All Rights Reserved</small></h5></div>

<!-- Core Scripts - Include with every page -->
<script src="js/jquery-1.10.2.js"></script>
<script src="js/bootstrap.min.js"></script>
<script src="js/plugins/metisMenu/jquery.metisMenu.js"></script>

<!-- SB Admin Scripts - Include with every page -->
<script src="js/sb-admin.js"></script>

</body>

</html>
';

// display our output.
echo $sOutput;
?>

Functions.php (Not sure if this would need editing, I think it might, Correct me if I'm wrong)

<?php

function createAccount($pUsername, $pPassword) {
	// First check we have data passed in.
	if (!empty($pUsername) && !empty($pPassword)) {
		$uLen = strlen($pUsername);
		$pLen = strlen($pPassword);
		
		// escape the $pUsername to avoid SQL Injections
		$eUsername = mysql_real_escape_string($pUsername);
		$sql = "SELECT username FROM users WHERE username = '" . $eUsername . "' LIMIT 1";

		// Note the use of trigger_error instead of or die.
		$query = mysql_query($sql) or trigger_error("Query Failed: " . mysql_error());

		// Error checks (Should be explained with the error)
		if ($uLen <= 4 || $uLen >= 11) {
			$_SESSION['error'] = "Username must be between 4 and 11 characters.";
		}elseif ($pLen < 6) {
			$_SESSION['error'] = "Password must be longer then 6 characters.";
		}elseif (mysql_num_rows($query) == 1) {
			$_SESSION['error'] = "Username already exists.";
		}else {
			// All errors passed lets
			// Create our insert SQL by hashing the password and using the escaped Username.
			$sql = "INSERT INTO users (`username`, `password`) VALUES ('" . $eUsername . "', '" . hashPassword($pPassword, SALT1, SALT2) . "');";
			
			$query = mysql_query($sql) or trigger_error("Query Failed: " . mysql_error());
			
			if ($query) {
				return true;
			}	
		}
	}
	
	return false;
}

/***********
	string hashPassword (string $pPassword, string $pSalt1, string $pSalt2)
		This will create a SHA1 hash of the password
		using 2 salts that the user specifies.
************/
function hashPassword($pPassword, $pSalt1="2345#$%@3e", $pSalt2="taesa%#@2%^#") {
	return sha1(md5($pSalt2 . $pPassword . $pSalt1));
}

/***********
	bool loggedIn
		verifies that session data is in tack
		and the user is valid for this session.
************/
function loggedIn() {
	// check both loggedin and username to verify user.
	if (isset($_SESSION['loggedin']) && isset($_SESSION['username'])) {
		return true;
	}
	
	return false;
}

/***********
	bool logoutUser 
		Log out a user by unsetting the session variable.
************/
function logoutUser() {
	// using unset will remove the variable
	// and thus logging off the user.
	unset($_SESSION['username']);
	unset($_SESSION['loggedin']);
	
	return true;
}

/***********
	bool validateUser
		Attempt to verify that a username / password
		combination are valid. If they are it will set
		cookies and session data then return true. 
		If they are not valid it simply returns false. 
************/
function validateUser($pUsername, $pPassword) {
	// See if the username and password are valid.
	$sql = "SELECT username FROM users 
		WHERE username = '" . mysql_real_escape_string($pUsername) . "' AND password = '" . hashPassword($pPassword, SALT1, SALT2) . "' LIMIT 1";
	$query = mysql_query($sql) or trigger_error("Query Failed: " . mysql_error());
	
	// If one row was returned, the user was logged in!
	if (mysql_num_rows($query) == 1) {
		$row = mysql_fetch_assoc($query);
		$_SESSION['username'] = $row['username'];
		$_SESSION['loggedin'] = true;
			
		return true;
	}
	
	
	return false;
}
?>

The Database for the email is as follows:  
Edited by Lewis2212, 06 August 2014 - 10:20 AM.

I am sitting behind a firewall which blocks the http access to all popular free email providers like

hotmail.com
gmail.com
....

The blocking is done by filtering out the domain names.

So I am searching for a way to access the mailbox by a third domain e.g. mydomain123.com (which is under my control).
I could imagine that there is a PHP code which can be setup on mydomain123.com which accesses the final hotmail.com
mailbox by using POP3 fetches and SMTP sends.

Is there such an PHP intermediate code?

Peter

Hi,
i have tried everything i can think of to get this to work correctly. What is below here, is what i have last tried to work with..:
basically the script allows the use to register an email account on a cpanel domain.

Everything works perfectly but then i added a option for banned words now i cant  get the script to work..
basically what happens is:
 the user creates an email account, if the account is not a banned word and does not exist, then the message echoes success, and the $_Post values are also entered into the database under the users name. and the email is also created with the $f fopen
if success the email form also does not show.. so only one email per user.. i just cant get it to work with the banned words included..
what to note::
this is a function in a function..



$bannedemailwords='customerinformation,custinfo,customerinfo,custtext,custsupport,customersupport,admin,accounts';
$bannedmail=explode(',', $bannedemailwords);
$bannedmail = array_unique($bannedmail);
sort($bannedmail);
foreach($bannedmail as $noemail)
//the selected username

if ($Config['enablemyemailapp_enable'] == '0' && $_POST['cfg_enablemyemailappaddress_enable'] !== $noemaill && $_POST['cfg_enablemyemailappaddressdomain_enable'] !== 'Select a domain'){
$cpuser = 'ausername'; 
$cppass = 'apassword'; 
$cpdomain = 'adomain'; 
$cpskin = 'askin';  
$epass = 'somepassword'; 
$equota = 'somequota';

$euser = $_POST['cfg_enablemyemailappaddress_enable'];
$epass = $_POST['emailspassword_enable'];
$edomain = $_POST['cfg_enablemyemailappaddressdomain_enable'];

if (!empty($euser) && $euser !=='nomail')
while(true) {
  $f = fopen ("http://$cpuser:$cppass@$cpdomain:2082/frontend/$cpskin/mail/doaddpop.html?email=$euser&domain=$edomain&password=$epass&quota=$equota", "r");
  if (!$f) {
$enablemyemailapp_enable = '0';
$enablemyemailappaddress_enable = 'Replace with a Name';
$enablemyemailappaddressdomain_enable = 'Select a domain';
    $msgemail = 'The email '.$euser.'@'.$edomain.' is a restricted email account.';
break;
  } 
$enablemyemailapp_enable = '1';
$enablemyemailappaddress_enable =  $_POST['cfg_enablemyemailappaddress_enable'];
$enablemyemailappaddressdomain_enable = $_POST['cfg_enablemyemailappaddressdomain_enable'];
        $msgemail ='<center><font color="#ff0033">Your Email '.$euser.'@'.$edomain.' has been created.</font></center>';
  
   
  while (!feof ($f)) {
    $line = fgets ($f, 1024);
    if (ereg ("already exists", $line, $out)) {
$enablemyemailapp_enable = '0';
$enablemyemailappaddress_enable = 'Replace with a Name';
$enablemyemailappaddressdomain_enable = 'Select a domain';
    $msgemail ='<center><font color="#ff0033">The email account '.$euser.'@'.$edomain.' already exists.</font></center><br><center>Please try again!</center>';
break;
    }
  }
  
 echo $msgemail;
 
 $_POST['cfg_enablemyemailapp_enable']= $enablemyemailapp_enable;
 $_POST['cfg_enablemyemailappaddress_enable']=$enablemyemailappaddress_enable;
 $_POST['cfg_enablemyemailappaddressdomain_enable']=$enablemyemailappaddressdomain_enable;
 
  @fclose($f);
break;
}
}

I need Delete Duplicate Email Records That Are Attached To One Account But Can Be Found In Multiple Accounts

I have a table, consumer_mgmt.  It collects consumer information from various forms.  These forms are available through different pages that are part of a business package.

A business can offer these signups to gather names and emails from consumers for various types of specials they may offer.  So a consumer my be in the consumer_mgmt table 5, 10, 15 times for that particular business.

But, that consumer may be in the consumer_mgmt table multiple times for a different business.  So multiple times for multiple businesses.

I need to remove duplicates for each business account so the consumer is only the consumer_mgmt only once for each business.

There are approximately 15,000 rows currently in the consumer_mgmt table.   I'm not sure where to begin on the logic.  Since there are multiple business accounts that the emails are attached to, would one have to build a case for each loop?

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=350218.0

Hi all,

Here i have a serious problem. I want to sought it out using PHP and MySQL only.
I have a form includes fields of customer id and Account type( stored in a jump menu and includes 6 different types of accounts)


<style type="text/css">
<!--
body,td,th {
font-size: 18px;
font-weight: bold;
}
-->
</style>
<p><img src="../images/mahapitiya 1.jpg" width="1024" height="139" /></p>
<form id="form1" name="form1" method="post" action="">
  <label>
    <input type="submit" name="button" id="button" value="Logout" />
  </label>
</form>
<p>&nbsp;</p>
<form action="" method="post" name="form2" id="form2" 
onsubmit="return Validate();">
  <fieldset>
    <legend class="cap">Create an Account</legend>
    <table width="75%" border="0" cellspacing="0" cellpadding="5" align="center">
      <tr>
        <td>&nbsp;</td>
        <td class="title02">&nbsp;</td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
      </tr>
      <tr height="30">
        <td width="10%">&nbsp;</td>
        <td width="25%" class="title02" align="left">Customer ID</td>
        <td width="55%" class="attribute1" align="left"><input type="text" name="customer_id" class="attribute1" /></td>
        <td width="10%">&nbsp;</td>
      </tr>
      <tr height="30">
        <td>&nbsp;</td>
        <td width="25%" class="title02" align="left">Account Type</td>
        <td width="55%" align="left" bgcolor="#FFFFFF" class="attribute1"><select name="account_type" id="jumpMenu" >
            <option selected="selected"></option>
            <option>Savings Investment</option>
            <option>Shakthi</option>
            <option>Surathal</option>
            <option>Abhimani Plus</option>
            <option>Yasasa Certificates</option>
            <option>Fixed Deposits</option>
          </select>&nbsp;</td>
        
        <td width="10%">&nbsp;</td>
      </tr>
    </table>
    <p align="center">&nbsp;</p>
    <p align="center">
      <input type="submit" onclick="return Validate();" name="submit" value="Submit" class="attribute1" />
      &nbsp;&nbsp;
      <input type="reset" name="reset" value="Reset" class="attribute1" />
      &nbsp;&nbsp;
      <label>
        <input type="submit" name="button2" id="button2" value="Help" />
      </label>
    </p>
  </fieldset>
  </td>
  <td width="5%">&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td align="center">&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td><font color="red" size="1" ></font></td>
    <td>&nbsp;</td>
  </tr>
  </table>
</form>
<p>&nbsp;</p>

<script language = "Javascript">
  
function Validate()
{
    if (document.form2.customer_id.value == '') 
    {
        alert('Please enter the valid customer id!');
        return false;
}
else if ( document.form2.account_type.selectedIndex == '' )
    {
        alert ( "Please select an account type!." );
        return false;
    }
return true;
}
</script>



There are 6 different types of tables exist in my database representing 6 different types of accounts.Each and every table there is a field called "account number" which is auto incremented.When user clicks on submit button i want account number to be opened based on selected account type.

How this could be done?

Thanks,
Heshan.

This topic has been moved to MySQL Help.

http://www.phpfreaks.com/forums/index.php?topic=308807.0

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=344720.0

This topic has been moved to PHP Applications.

http://www.phpfreaks.com/forums/index.php?topic=323073.0