PHP - Is My Sql Statement Wrong

Hi,
I am no PHP expert. I can poke about, do a little cut and paste.
Dreamweaver is telling me I have a syntax issue with my if statement. I have tried a few things without success.
Dreamweaver says the error is on the else line, that may not be true. please show me what I am doing wrong.
Thanks Mark
Code: [Select]
<div class="entry-content tec-event-entry">
<?php /** Get the "cft_tinymce_1" custom field */
 $block_1 = get_custom_field('cft_tinymce_1');
if( $block_1 ) { ?>
<?php echo $block_1; ?>
<?php } ?>
<?php else { ?>
<?php the_content(); ?>
<?php } ?>
</div> <!-- End tec-event-entry -->

Hi, Im just having some trouble with this...maybe a fresh pair of eyes can help? 

Im getting a "Warning: mysqli_stmt::bind_param() [mysqli-stmt.bind-param]: Number of elements in type definition string doesn't match number of bind variables" error when I try run this:

Code: [Select]
$date = date("Y-m-d");
        $header = $_POST['header'];
        $summary = $_POST['summary'];
        $content = $_POST['content'];
 
        $query = "INSERT INTO articles (pubdate, title, summary, content) VALUES(?, ?, ?, ?)";
        $stmt = $mysqli->stmt_init();
       
        if ($stmt->prepare($query)){
           
            $stmt->bind_param('i,s,s,s', $date, $header, $summary, $content);
 
            $stmt->execute();
            $stmt->close();
        }
        else {
            echo "ERROR: SQL statement failure!";
            echo "<a href='addnews.php'> -> OK</a>";
        }
        $mysqli->close();

It looks fine to me, just can't see whats wrong lol!

(Please ignore HTML formatting)

Code: [Select]
if (is_null($RESULT['PBS_ACCOUNT_ID']))    {

echo "<font size=2 color=#000000 face=arial>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<</font>";
echo "<font size=2 color=#000000 face=arial>PBS_ACCOUNT_ID</font>";
echo "<font size=2 color=#000000 face=arial>></font>";
echo "<font size=2 color=#000000 face=arial>HELLO</font>";


echo "<font size=2 color=#000000 face=arial><</font>";
echo "<font size=2 color=#000000 face=arial>/PBS_ACCOUNT_ID</font>";
echo "<font size=2 color=#000000 face=arial>></font>";


}

else

{

echo "<font size=2 color=#000000 face=arial>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<</font>";
echo "<font size=2 color=#000000 face=arial>PBS_ACCOUNT_ID</font>";
echo "<font size=2 color=#000000 face=arial>></font>";

echo "<B>";
echo $RESULT['PBS_ACCOUNT_ID'];
echo "</B>";

echo "<font size=2 color=#000000 face=arial><</font>";
echo "<font size=2 color=#000000 face=arial>/PBS_ACCOUNT_ID</font>";
echo "<font size=2 color=#000000 face=arial>></font>";
echo "<BR>";

}
If the PBS_ACCOUNT_ID field is empty, it just shows blank. Why doesn't it echo "HELLO?" Or should I be using "IS_EMPTY?"

I am querying...

$sql  = "SELECT `messages_inbox`.`message_id`, `users`.`firstname`, `users`.`lastname`, `users`.`username` AS `from`, '${user_info['username']}' AS `to`, `subject`, LENGTH(`files`) AS `len`, 'inbox' AS `box`, DATE_FORMAT(`messages_inbox`.`time` ,'%T %D-%M-%Y') AS `time` ";
   
$sql .= "FROM `messages_inbox` INNER JOIN `users` ON `messages_inbox`.`from_id` = `users`.`id` WHERE `to_id` = ${user_info['uid']} AND `messages_inbox`.`deleted` = 0 ORDER BY `messages_inbox`.`message_id` DESC";

and I am trying to output

$displayName = ucwords("${message['firstname']} ${message['lastname']}");

by using

$messages = pm_fetch_all($_GET['box']);

I know my fetch works but for some reason firstname and lastname are only returning the logged in users first name and last name, not the person who sent the message.

I'm having issues with the following:

Code: [Select]
<?php
session_start();
$_SESSION['username']=$_POST['username'];
$_SESSION['password']=$_POST['password'];
if($_SESSION['username']=="username" && $_SESSION['password']=="password"){
if($_GET['product']=="add"){
$content.='
<p><label>Product Name:</label> <input type="text" name="product_name" size="30" />
<label>Product Price:</label> <input type="text" name="product_price" size="5" />
</p>
<p><label>Product Category:</label> <input type="text" name="product_category" size="30" /></p>
<p><label>Product Link:</label> <input type="text" name="product_link" size="30" /></p>
<p><label>Product Image:</label> <input type="text" name="product_image" size="30" /></p>
<p><label>Product Tag:</label> <input type="text" name="product_tag" size="30" /></p>
<p><label>Product Keywords:</label> <input type="text" name="keyword" size="30" /></p>
<p><label>Product Features:</label><br />
<textarea name="product_features" rows="10" cols="60"></textarea>
</p>
<p><label>Product Pros:</label><br />
<textarea name="product_pros" rows="5" cols="30"></textarea>
</p>
<p><label>Product Cons:</label><br />
<textarea name="product_cons" rows="5" cols="30"></textarea>
</p>
<p><label>Product Description:</label><br />
<textarea name="product_description" rows="10" cols="60"></textarea>
</p>
<p><label>Product Notes:</label><br />
<textarea name="product_notes" rows="5" cols="30"></textarea>
</p>
';
$logout='<div><a href="./acp_admincp.php?log-out">Log-Out</a></div>';
}
elseif($_GET['product']=="view"){
}
else{
$content.='
<a href="./admincp.php?product=add">Add New Product</a>
<br />
<a href="./admincp.php?product=view">View Products</a>
';
}
}
elseif(isset($_GET['log-out'])){
session_start();
session_unset();
session_destroy();
header("Location: ./admincp.php");
}
else{
$content='
<form action="./admincp.php" method="post">
<p><label>Username:</label> <input type="text" name="username" size="30" />';
$content.='</p>
<p><label>Password:</label> <input type="password" name="password" /></p>';
$content.='<p><input type="submit" value="Submit" name="Submit" /></p>
</form>';
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>
<base href="http://ghosthuntersportal.com/" />
<title>Ghost Hunter's Portal - Admin Control Panel</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<meta name="verify-v1" content="" />
<meta name="keywords" content="ghost, hunters, hunter, ghosts, spirit, spirits, paranormal, investigation, investigator, investigators, k2, emf, meter, kii" />
<meta name="description" content="Ghost Hunters Potal. Parnormal research equipment store." />
<meta name="author" content="Andrew McCarrick" />
<meta name="robots" content="index, follow"
<link rel="stylesheet" type="text/css" href="style.css" />
</head>
<body>
<img src="./logo.png" alt="Ghost Hunter's Portal Admin Control Panel" />
<br />
<div style="color: #AA44AA; font-size: 26px; margin-top: -30px; margin-left: 125px;">Admin Control Panel</div>
<?php
echo $logout;
echo $content;
?>
</body>
</html>

I can log-in, and get to the page with the two links on it. However, once I click one of the links it falls back to the log-in page, and it ends up being a never ending loop.

It's doing this:
Log-In --> Page with links ---> Log-In page again

Should be doing this:
Log-In --> Page with links --> Add Product page or View Products page

I can never get into the the actual sub page.

Just to be clear, the address bar actually shows product=add or product=view, but it still shows the log-in page.

Hello Everyone,
I have to change the if statements to a switch statement, in this game. Can anyone help? Thanks.

var checkKeyPressed = function (e) {
// Press key A or key D to make dog run to the left or right
// The running speed is specified by the step variable, 10 by default.
// If you replace 10 with a larger integer, the dog will run faster.

    //press A, dog runs left
    if (e.keyCode == "65") {
        if (prex[0] > 5) {
            prex[0] = prex[0] - step;
        }
    }
    //press D, dog runs right
    if (e.keyCode == "68") {
        if (prex[0] < right) {
            prex[0] = prex[0] + step;
        }
    }
};

Here is code I have, I can't seem to figure this error out,  I bet it is obvious, but I clearly am not seeing it.....  Here is error:
Problem with the query:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 3

(not really that good of an error, but maybe help getting started?)


Code: [Select]
<?php
session_start(); // Must start session first thing
/* 
Created By Adam Khoury @ www.flashbuilding.com 
-----------------------June 20, 2008----------------------- 
*/
// Here we run a login check
if (!isset($_SESSION['id'])) { 
   echo 'Please <a href="login.php">log in</a> to access your account';
   exit(); 
}
//Connect to the database through our include 
include_once "connect_to_mysql.php";
// Place Session variable 'id' into local variable
$userid = $_SESSION['id'];
// Query member data from the database and ready it for display
$sql = mysql_query("SELECT * FROM members WHERE userid='$userid' LIMIT 1");
while($row = mysql_fetch_array($sql)){
$name = $row["name"];
$phone = $row["phone"];
$username = $row["username"];
$address = $row["address"];
$city = $row["city"];
$state = $row["state"];
$zip = $row["zip"];
$cell = $row["cell"];
$email = $row["email"];
$accounttype = $row["accounttype"];
$rank = $row["rank"];
$badges = $row["badges"];
}
// Set error message as blank upon arrival to page
$errorMsg = "";
// First we check to see if the form has been submitted 
if (isset($_POST['name'])){
$name = ereg_replace("[^A-Z a-z0-9]", "", $_POST['name']); // filter everything but numbers and letters
$phone = ereg_replace("[^A-Z a-z0-9]", "", $_POST['phone']); // filter everything but spaces, numbers, and letters
$username = ereg_replace("[^A-Z a-z0-9]", "", $_POST['username']); // filter everything but spaces, numbers, and letters
$address = ereg_replace("[^A-Z a-z0-9]", "", $_POST['address']); // filter everything but spaces, numbers, and letters
$city = ereg_replace("[^A-Za-z0-9]", "", $_POST['city']); // filter everything but lowercase letters
$state = ereg_replace("[^A-Za-z0-9]", "", $_POST['state']); // filter everything but lowercase letters
$zip = ereg_replace("[^A-Za-z0-9]", "", $_POST['zip']); // filter everything but lowercase letters
$cell = ereg_replace("[^A-Za-z0-9]", "", $_POST['cell']); // filter everything but lowercase letters
$accounttype = ereg_replace("[^A-Z a-z0-9]", "", $_POST['accounttype']); // filter everything but lowercase letters
$email = stripslashes($_POST['email']);
$email = strip_tags($email);
$email = mysql_real_escape_string($email);
$password = ereg_replace("[^A-Za-z0-9]", "", $_POST['password']); // filter everything but numbers and letters
// Check to see if the user filled all fields with
// the "Required"(*) symbol next to them in the join form
// and print out to them what they have forgotten to put in
if((!$name) || (!$username) || (!$password)){

$errorMsg = "You did not submit the following required information!<br /><br />";
if(!$name){
$errorMsg .= "--- Name";
} else if(!$username){ 
    $errorMsg .= "--- Username"; 
   } else if(!$Password){ 
       $errorMsg .= "--- Password";    
   }
} else {
// Database duplicate Fields Check
$sql_username_check = mysql_query("SELECT userid FROM members WHERE username='$username' LIMIT 1");
$username_check = mysql_num_rows($sql_username_check); 
if ($username_check > 0){ 
$errorMsg = "<u>ERROR:</u><br />Your User Name is already in use inside our system. Please try another.";
} else {
// Add MD5 Hash to the password variable
       $hashedPass = md5($password); 
// Add user info into the database table, claim your fields then values 
$sql = mysql_query("INSERT INTO members (name, phone, username, address, city, state, zip, cell, email, accounttype, password ) 

VALUES('$name','$phone','$username','$address','$city','$state','$zip','$cell','$email','$accounttype','$hashedPass'") or die ("Problem with the query: $sql<br>" . mysql_error());
 printf("Records updated: %d\n", mysql_affected_rows());
echo mysql_error();

 echo '<meta HTTP-EQUIV="REFRESH" content="3; url=http://final.net46.net/success.php">';

exit(); // Exit so the form and page does not display, just this success message
} // Close else after database duplicate field value checks
  } // Close else after missing vars check
 //Close if $_POST
}
 
?>

What an Earth is wrong with this code?

Code: [Select]
$query = "select sizes from products where id='$id'"; $result = mysql_query($query); $row = mysql_fetch_array($result); if ($row == 0) {echo "";} else {echo "Small - $row['sizes']";}
PHP Parse error:  syntax error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING

$result3 = mysql_query("SELECT User_ID FROM leaderboards WHERE User_ID = '$user'");

if(mysql_num_rows($result3) == 0){

$query1 = "INSERT INTO leaderboards (User_ID, CollegeFootballPoints) VALUES ('$user','$points')";
$result1 = mysql_query($query1);

}else{

$query2 = "UPDATE leaderboards SET  CollegeFootballPoints='$points' WHERE User_ID='$user'";
$result2 = mysql_query($query2);
}

I keep getting this error...'

Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in update_collegeFBpoints_points.php on line 40

And the script is not working!

(LINE 40 is

$result3 = mysql_query("SELECT User_ID FROM leaderboards WHERE User_ID = '$user'");   
   if(mysql_num_rows($result3) == 0){

specifically mysql_num_rows)

Code: [Select]
<?php
include('connection.php');

$test1=$_POST('firstname');
$test2=$_POST('lastname');
$test3=$_POST('username');

if (!eregi("([^A-Za-z0-9]"),$test1)){

if (!eregi("([^A-Za-z0-9]"),$test2)){
if (!eregi("([^A-Za-z0-9]"),$test3)){
$query="SELECT * FROM vendors WHERE username = '$_POST(username)'"
$result=mysql_query($query);
$num=mysql_num_rows($result);
if ($num == 0) {
$query1="SELECT * FROM vendors WHERE email = '$_POST(email)'"
$result1=mysql_query($query2);
$num1=mysql_num_rows($result1)
if ($num1 == 0) {
if (($_POST['password']==$_POST['password1'])&&($_POST['email']==$_POST['email1']))
{
$name=strip_tags($_POST['username']);
$first=strip_tags($_POST['firstname']);
$last=strip_tags($_POST['lastname']);
$pass=strip_tags($_POST['password']);
$country=strip_tags($_POST['country']);
$address=strip_tags($_POST['address']);
$email=strip_tags($_POST['email']);
$city=strip_tags($_POST['city']);
$zip=strip_tags($_POST['zipcode']);
$state=strip_tags($_POST['state']);
$phone=strip_tags($_POST['phonenumber']);
$aql="INSERT INTO vendors SET username='$name', firstname='$first', lastname='$last', email='$email', Country='$country', zipcode='$zip', password='$pass', city='$city', state='$state', phonenumber='$phone', address='$address'"
$result=mysql_query($sql)
if ($result){
header(location:http://www.digitaldesignersmall.com/ffx.html)
}
else {
header(location:http://www.digitaldesignersmall.com/fff.html)
}

}
else(
header(location:http://www.digitaldesingersmall.com/afx.html)
}

}
else {
Header(location:http://www.digitaldesingersmall.com/afx.html)
}

}
else{
header("location:http://www.digitaldesignersmall.com/cxs.html")
}

}

else{

header("location:http://www.digitaldesignersmall.com/cxs.html")

}
}
else{
header("location:http://www.digitaldesignersmall.com/cxs.html")
}


?>

Ok I have this code.. it logs into my myspace accounts and grabs some info.. it is supposed to log into each account and write the info to a file.. what it does is logs into the first account and writes the info to the file then when it signs into the second account it doesnt write the info on the new line it just overwrites the info from the previous account..

here is some of the code
for($i=0; $i!=count($account_data); $i++){
  echo "\n::: ".strtoupper($account_data[$i][0])." :::\n";
  if($account_data[$i][1] != "" && stristr($account_data[$i][0], "@") && stristr($account_data[$i][0], ".")){
    list($place[0],$place[1],$place[2],$place[3]) = authorize($account_data[$i], $game_link);
    if($place[2] > 1 && strlen($place[3]) == 40){
  $filename = 'auth-keys.txt';
  $fp = file($filename,'a+');
  $data = $place[2]." ".$place[3]."\r\n";
  file_put_contents($filename, $data);
  echo $data;}}}
sleep(10000);

heres a pic



Any help would be greatly appreciated

Hello all,
I'm having trouble with the following code, it's supposed to go like this, you search for a hotel, choose a room, then it takes you to confirmation page before the paypal, but the problem is, in the confirmation page, it shows everything right, the number of nights, the number of guests, all except the number of rooms, it always give me 0 rooms

It's seperated into 3 files, hotelsmanager.php, bookingmanager.php, and book.php

here are the codes

Code: [Select]
while($row = @mysql_fetch_array($result))
{
echo "<tr>";
echo "<td class=\"text\" align=center>".$row['room_type']."</td>";
echo "<td class=\"text\" align=center>".$row['price_per_day']."</td>";
echo "<td class=\"text\" align=center>".$row['people']." People</td>";
echo "<td class=\"text\" align=center>";

?>

                        <select name="nrooms" id="nrooms" onchange="
                        //alert('<?php echo $row['id'] ; ?>');
                        //alert(this.value);
                        var exist = 0;
                        if(roomids.length > 0)
                        {
for(var hh = 0;hh < roomids.length; hh++)
{

if(roomids[hh] == <?php echo $row['id'] ; ?>)
{
exist = 1;
//alert(hh);
roomnumar[hh] = this.value;


}
}
if(exist == 0)
{
roomids.push(<?php echo $row['id'] ; ?>);
roomnumar.push(this.value);
}
                        }
                        else
                        {
                        roomids.push(<?php echo $row['id'] ; ?>);
                        roomnumar.push(this.value);
                        }
                       
                        document.bookingform.roomid.value = roomids;
                        document.bookingform.roomnum.value = roomnumar;
                       
                       
                       
                        ">
                        <option value=0>  0  </option>
                        <?php
                        for($i = 0; $i < $row['available_rooms']; $i++)
                         {
                         $nr = $i+1;
                         $pr=$nr * $row['price_per_day'];
                         echo "<option value=$nr>$nr ($pr\$)</option>";
                         }
                        echo "</select>
                        </td>";
                        echo "<td align=center>
                        &nbsp;
                        </td>";
echo "</tr>";
echo "<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>";

}
echo "<tr class=\"rooms\">
<td colspan=\"4\">&nbsp;</td>

<td align=center><input type=\"submit\" value=\"book\" id=\"bookroom\" name=\"bookroom\"/></td>
</tr>";
echo "</table>";
echo "</form>";
print_r($_SESSION['order']);

$_SESSION['order']=0;
unset($_SESSION['order']);

}

}


?>
then booking info

Code: [Select]
<?php include("hotelsManager.php"); ?>
<?php include("config.php"); ?>
<?php include("textManager.php"); ?>
<?php
 function echoPostedData()
 {
   
   $dbo = new DB();
   $hotelObj = new hotelManager();
   $hotelID = $_POST['hotelid'];
   $datein = $_POST['datein'];
   $dateout = $_POST['dateout'];
   $roomid = $_POST['roomid'];
   $pr = $_POST['tp'];
   
   $_SESSION['hotelID'] = isset($_POST['hotelid']) ? $_POST['hotelid'] : $_SESSION['hotelID'];
   $_SESSION['datein'] = isset($_POST['datein']) ? $_POST['datein'] : $_SESSION['datein'];
   $_SESSION['dateout'] = isset($_POST['dateout']) ? $_POST['dateout'] : $_SESSION['dateout'];
         $_SESSION['roomid'] = isset($_POST['roomid']) ? $_POST['roomid'] : $_SESSION['roomid'];   
   
   
   $roomsarray = explode(",",$_POST['roomid']);
   $_SESSION['roomsarray'] = isset($_POST['roomid']) ? explode(",",$_POST['roomid']) : $_SESSION['roomsarray'];
   $roonsNo = $_POST['nrooms'];
   $_SESSION['nrooms'] = isset($_POST['roomnum']) ? explode(",",$_POST['roomnum']) : $_SESSION['nrooms']; 
Then the confirmation page is

Code: [Select]
   <?php
   echoPostedData();
  ?>
                  </td>
                </tr>
                <tr>
                  <td valign="top">&nbsp;</td>
                </tr>
              </table>
             
             
              </td>
            </tr>
            <tr>
              <td valign="top"><img src="images/spacer.gif" width="28" height="10" /></td>
            </tr>
            <tr>
              <td valign="top">
              <?php
if(isset($_POST['bookroom']))
  {?>

Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
<title>Send Data Form</title>
</head>

<body>
<?php

if(!$_POST) exit;

$email = $_POST['Email'];
$name = $_POST['Name'];
$telephone = $_POST['Telephone'];
$comments = $_POST['Comments'];

//$error[] = preg_match('/\b[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}\b/i', $_POST['email']) ? '' : 'INVALID EMAIL ADDRESS';
if(!eregi("^[a-z0-9]+([_\\.-][a-z0-9]+)*" ."@"."([a-z0-9]+([\.-][a-z0-9]+)*)+"."\\.[a-z]{2,}"."$",$email )){
   $errors=1;
}
if($errors==1) echo $error;
else{
   $values = array ('Name','Email','Telephone','Comments');
   $required = array('Name','Email','Telephone','Comments');
   

   $your_email = "****************";
   $email_subject = "Comment posted from website:";
   
   
   foreach($values as $key => $value){
     if(in_array($value,$required)){
      if ($key != 'Name' && $key != 'Comments' && $key != 'Telephone') {
        if( empty($_POST[$value]) ) { echo 'Please go back and complete all fields, thank you.'; exit; }
      }
      $email_content .= $value.': '.$_POST[$value]."\n";
     }
   }
    
}
   
$headers = "From: $email\r\n"."Reply-To: $email\r\n".'X-Mailer: PHP/' . phpversion();
   

mail($your_email, $email_subject, $email_content, $headers);

if($send_contact){
echo "Thank you for your submission";
}
else {
echo "ERROR, your comment was not sent";

?>
</body>

</html>

MOD EDIT: [code] . . . [/code] tags added.