PHP - Mysql - I Need Help With A Check List For Multiple Accounts!

Im wanting to not allow people to post any links in the comments section of a form (spammers) and have created a comma delimited list of essentially of every known domain name extension.

To apply the filter I have the following code:

Code: [Select]
$WordAllowed = true;
$BannedWords = explode(",", ReadDB($Options["ban_words"]));
if (count($BannedWords)>0) {
  $checkComment = strtolower($_REQUEST["comment"]);
  for($i=0;$i<count($BannedWords);$i++){
  $banWord = trim($BannedWords[$i]);
  if (trim($BannedWords[$i])<>'') {
  if(preg_match("/".$banWord."/i", $checkComment)){
  $WordAllowed = false;
  break;
  }
  }
  }
}
if($WordAllowed==false) {
$SysMessage =  $OptionsLang["Banned_word_used"];
} else { Insert into my table

I could have sworn this was working last time I was in this code but recently checking it again it is blocking pretty much everything claiming a banned word is used.  The only thing I can get to post is 'lol'.  Trying funny phrases like: first! or Great information, thanks, this is a test of the comment section, etc....they all get flagged 

Can anyone with fresh eyes assist?  Im weary and frustrated and its been forever since I wrapped my head around this. 

My banned word list:
Code: [Select]
www,http,com,org,.aero,.asia,.biz,.com,.coop,.edu,.gov,.info,.int,.jobs,.mil,.mobi,.museum,.name,.net,.org,
.pro,.tel,.travel,.xxx,.a,.bitnet,.ac,.ad,.ae,.af,.ag,.ai,.al,.am,.an,.ao,.aq,.ar,.as,.at,.au,.aw,.az,.ba,.bb,.bd,.be,.bf,.bg
,.bh,.bi,.bj,.bm,.bn,.bo,.br,.bs,.bt,.bv,.bw,.by,.bz,.ca,.cc,.cf,.cg,.ch,.ci,.ck,.cl,.cm,.cn,.co,.com,.cr,.cs,.cu,.cv,.cx,.cy,.cz
,.de,.dj,.dk,.dm,.do,.dz,.ec,.edu,.ee,.eg,.eh,.er,.es,.et,.fi,.fj,.fk,.fm,.fo,.fr,.fx,.ga,.gb,.gd,.ge,.gf,.gh,.gi,.gl,.gm,.gn
,.gov,.gp,.gq,.gr,.gs,.gt,.gu,.gw,.gy,.hk,.hm,.hn,.hr,.ht,.hu,.id,.ie,.il,.in,.io,.iq,.ir,.is,.it,.jm,.jo,.jp,.ke,.kg,.kh,.ki,.km
,.kn,.kp,.kr,.kw,.ky,.kz,.la,.lb,.lc,.li,.lk,.lr,.ls,.lt,.lu,.lv,.ly,.ma,.mc,.md,.mg,.mh,.mil,.mk,.ml,.mm,.mn,.mo,.mp,.mq,.mr,
.ms,.mt,.mu,.mv,.mw,.mx,.my,.mz,.na,.nc,.ne,.net,.nf,.ng,.ni,.nl,.no,.np,.nr,.nt,.nu,.nz,.om,.org,.pa,.pe,.pf,.pg,.ph,
.pk,.pl,.pm,.pn,.pr,.pt,.pw,.py,.qa,.re,.ro,.ru,.rw,.sa,.sb,.sc,.sd,.se,.sg,.sh,.si,.sj,.sk,.sl,.sm,.sn,.so,.sr,.st,.su,.sv,
.sy,.sz,.tc,.td,.tf,.tg,.th,.tj,.tk,.tm,.tn,.to,.tp,.tr,.tt,.tv,.tw,.tz,.ua,.ug,.uk,.um,.us,.uy,.uz,.va,.vc,.ve,.vg,.vi,.vn,.vu,.wf,
.ws,.ye,.yt,.yu,.za,.zm,.zr,.zw
Thanks in advance for any help

Is it possible to have multiple check boxes on a single form and a single submit button tp post the values into different rows of DB

Kenny

Hi,

How can i check if a string is a multiple of 0.1 without anything being left over?

like 1.6 = true, 1.46 = false

I have a form with multiple options to fill out (its a admin form) i want to make sure only one of the of the options are set, so im checking if the variable is empty with

if ($variable1 != NULL) {
$new_variable = "yep, this option was filled out";
}

so if the form sent anything from the form with the value 'variable1' it then sets a new variable ($new_variable)

Problem is i have multiple fields so i need to make sure if it finds a a variable is not empty, then too check if the others have anything in them too. If it does find another (meaning more than one has been filled out) echo an error (echo "you must only complete one option..")

What is the best way to check if more than one variable exists? Sorry if i explained it complicated.
Thank you

Hello need some help

keep getting Code: [Select]
[function.readfile]: failed to open stream: No such file or directory in

code im use

Code: [Select]
// Ziper
function zipFilesAndDownload($file_names,$archive_file_name,$file_path){
$zip = new ZipArchive();
//create the file and throw the error if unsuccessful
if ($zip->open($archive_file_name, ZIPARCHIVE::CREATE )!==TRUE) {
    exit("cannot open <$archive_file_name>\n");
}
//add each files of $file_name array to archive
foreach($file_names as $files) {
  $zip->addFile($file_path.$files,$files);
}
$zip->close();
$zipped_size = filesize($archive_file_name);
header("Content-Description: File Transfer");
header("Content-type: application/zip");
header("Content-Type: application/force-download");// some browsers need this
header("Content-Disposition: attachment; filename=$archive_file_name");
header('Expires: 0');
header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
header('Pragma: public');
header("Content-Length:". " $zipped_size");
ob_clean();
flush();
readfile($archive_file_name);
unlink($archive_file_name); // Now delete the temp file (some servers need this option)
    exit;
  }
if(isset($_POST['formSubmit'])) {
//$file_names=$_POST['items'];// Always sanitize your submitted data!!!!!!
//$file_names = filter_var_array($_POST['items']);//works but it's the wrong method
$filter = filter_input_array(INPUT_POST, FILTER_SANITIZE_SPECIAL_CHARS) ;
$file_names = $filter['items'] ;
//Archive name
$archive_file_name = 'images.zip';
//Download Files path
$file_path= getcwd(). ''.$baseurl.'/cinema/';
//cal the function
zipFilesAndDownload($file_names,$archive_file_name,$file_path);
}

html
Code: [Select]
<form method="post">
 <input type="checkbox" name="items[]" value=" href="{$baseurl}/data/images/s/{$filename}"/>
</form>

Please help

Hi all, i've got a string ($currentcatid) which contains one number which changes dependant on which page the visitor is on.. ie  it may be perhaps "23" or "17" .

I need to do a check against this string to see if it contains any of the following values .. 31,32, 1, 24 . I cant remember how i did it before but i think it was with pipes..

something along the lines of
if ($currentcatid =="31"||"32"||"1"||"24") { action }

can anyone help?

Thanks

Hi, 
I have multiple table 
Table -1 
order_no name 
1 raj 

table -2 
order_no name 
1 raj 

table 3 
order_no name 
1 raj 

table 4 
order_no name 
1 raj 

table 5 
order_no name 
1 raj 

I want a query to check if the id (one) is present in all tables or not, 
i create this. 


select order_no from prepress, press, postpress, qc, binding, dispatch where order_no=prepress.order_no AND order_no=press.order_no AND order_no=postpress.order_no AND order_no=qc.order_no AND order_no=binding.order_no AND order_no=dispatch.order_no 
but the ambiguous error for order_no. 

how to achieve this can anyone suggest me? 
thanks

Hey guys,

Really dumb question, but I want to check if a bunch of variables are all not empty. Then, if they aren't, I want to execute a mySQL query. Right now I have this which I know is wrong because it doesn't work the right way:

Code: [Select]
if($album != null || $artist != null || $year != null || $genre != null) {
// stuff here...
}

Obviously I want all of those variables to be checked if they are empty or not. I did a quick Google and found that checking if the variables are null wouldn't be the correct way of solving this situation because an "empty string" is still not null?

Anyway, any help would be appreciated. I'm pretty sure it's really simple :p.

I have displayed check box values(ugroup field) from ugroups table.now what i want to do is,when user select multiple check boxes and submit it should be insert into relavent feild in table.now it's insert check boxes values.but not in relevant field.this is my code.Please help me.

//select ugroup's from group table.
<?php
$result = "SELECT id,ugroup FROM group";
$res_result = db::getInstance()->query($result);
?>

<form action="db_sql/db_add_page.php" method="get">
Tittle :<input type="text" size="100" name="tittle" />
Description :<textarea cols="80" id="editor1" name="description" rows="10"></textarea>

//Display ugroups in textboxes and checkboxes
       <?php 
while( $line=$res_result->fetch(PDO::FETCH_ASSOC)) {
echo '<input type="checkbox" name="group[]" value=" '. $line['ugroup'] .'" />';
echo'<input type="text" name="ugroup" disabled="disabled" value=" '. $line['ugroup'] .'" size="7" "/>';
echo ' ';
}
?><input type="submit" value="Submit">
</form>

db_add_page.php

if(isset($_POST))
{


$tittle = $_POST['tittle'];
$description = $_POST['description'];
$ugroup = $_POST['group'];
$acc_status = "INSERT INTO add_services (id,tittle,description,g1,g2,g3,g4,g5,g6,g7,g8)
 VALUES(NULL,'".$tittle."','".$description."','".$ugroup[0]."','".$ugroup[1]."','".$ugroup[2]."','
".$ugroup[3]."','".$ugroup[4]."','".$ugroup[5]."','".$ugroup[6]."','".$ugroup[7]."')";
$rate = db::getInstance()->exec($acc_status); 
if(!$rate){
echo '<script type="text/javascript">alert("Update Error !");</script>';
}else{
header('Location:../add_page.php');
echo '<script type="text/javascript">alert("Successfuly Updated User Group !");</script>'; 



}

}

Attached Files  group.jpg   22.14KB   0 downloads  add_services.jpg   21.36KB   0 downloads

Hi, I need help to check multiple rows for many columns, so that the script won't re-insert a duplicate entry. For eg:


$isRowExist=mysql_query("SELECT (field1,field2) from table1 WHERE field1='$f1' AND field2='$f2' ");

if(mysql_num_rows($isRowExist)==1)
   print "already in table1!";
else
   //proceed to insert into table table1


*BUT I tried this and it says mysql_num_rows expects resource, and this warning only shows when I have multipel columns I want to compare (it works just fine with one column in the WHERE clause above)

Please help!

hi,

As the title says, how can i check if multiple arrays exist inside an array or not?

Any help is greatly appreciated!

 

I have a form that has a section where you can pick multiple check boxes and when the info is returned to me it has the word Array at the end of it.

There are 2 check boxes on the form one fo Steve and one for Ben

Below is the code I am using in my PHP file

foreach($_POST['TestGroup'] as $val)
{
   echo $val . "\n";
}

The output from the PHP code is----Steve Ben Array.------

How do I keep Array from coming up?
 

I am attempting to submit a form that includes multiple check boxes for one data field. I have set it up the implode the data and make it a comma delimited array. I am able to echo the results, yet I have not been able to post the information to the database. I believe that I have just one simple thig to do, yet I am not being successful. Here is my code I have attached the .txt file also:

<?php require_once('Connections/rotarysantarosa.php'); ?>
<?php
   if (isset($_POST['submit']))
   {
      if (isset($_POST['currentClubPosition']))
      {
         $strcurrentClubPosition = implode(",", $_POST['currentClubPosition']);
      }
      else
      {
         $strcurrentClubPosition = "";
      }

   }
?>
 
 <?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
  if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  }

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;   
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "frmMemberInsert")) {
  $insertSQL = sprintf("INSERT INTO members (firstName, lastName, photo, pastPresident, currentClubPosition, classification, workPosition, company, workAddress, workCity, workState, workZip, officePhone, fax, homePhone, cellPhone, email, website, homeAddress, homeCity, homeState, homeZip, birthdayMonth, birthdayDay, spouse, yearJoined) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['firstName'], "text"),
                       GetSQLValueString($_POST['lastName'], "text"),
                       GetSQLValueString($_POST['photo'], "text"),
                       GetSQLValueString($_POST['pastPresident'], "text"),
                       GetSQLValueString($_POST['currentClubPosition'], "text"),
                       GetSQLValueString($_POST['classification'], "text"),
                       GetSQLValueString($_POST['workPosition'], "text"),
                       GetSQLValueString($_POST['company'], "text"),
                       GetSQLValueString($_POST['workAddress'], "text"),
                       GetSQLValueString($_POST['workCity'], "text"),
                       GetSQLValueString($_POST['workState'], "text"),
                       GetSQLValueString($_POST['workZip'], "text"),
                       GetSQLValueString($_POST['officePhone'], "text"),
                       GetSQLValueString($_POST['fax'], "text"),
                       GetSQLValueString($_POST['homePhone'], "text"),
                       GetSQLValueString($_POST['cellPhone'], "text"),
                       GetSQLValueString($_POST['email'], "text"),
                       GetSQLValueString($_POST['website'], "text"),
                       GetSQLValueString($_POST['homeAddress'], "text"),
                       GetSQLValueString($_POST['homeCity'], "text"),
                       GetSQLValueString($_POST['homeState'], "text"),
                       GetSQLValueString($_POST['homeZip'], "text"),
                       GetSQLValueString($_POST['birthdayMonth'], "text"),
                       GetSQLValueString($_POST['birthdayDay'], "int"),
                       GetSQLValueString($_POST['spouse'], "text"),
                       GetSQLValueString($_POST['yearJoined'], "int"));

  mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
  $Result1 = mysql_query($insertSQL, $rotarysantarosa) or die(mysql_error());

  $insertGoTo = "members.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}

mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
$query_rsStates = "SELECT * FROM states ORDER BY stateName ASC";
$rsStates = mysql_query($query_rsStates, $rotarysantarosa) or die(mysql_error());
$row_rsStates = mysql_fetch_assoc($rsStates);
$totalRows_rsStates = mysql_num_rows($rsStates);

mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
$query_rsMemberInsert = "SELECT * FROM members ORDER BY lastName ASC";
$rsMemberInsert = mysql_query($query_rsMemberInsert, $rotarysantarosa) or die(mysql_error());
$row_rsMemberInsert = mysql_fetch_assoc($rsMemberInsert);
$totalRows_rsMemberInsert = mysql_num_rows($rsMemberInsert);

mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
$query_rsClubPosition = "SELECT * FROM clubpositions ORDER BY `Club Position` ASC";
$rsClubPosition = mysql_query($query_rsClubPosition, $rotarysantarosa) or die(mysql_error());
$row_rsClubPosition = mysql_fetch_assoc($rsClubPosition);
$totalRows_rsClubPosition = mysql_num_rows($rsClubPosition);

mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
$query_rsClassification = "SELECT * FROM classifications ORDER BY Classification ASC";
$rsClassification = mysql_query($query_rsClassification, $rotarysantarosa) or die(mysql_error());
$row_rsClassification = mysql_fetch_assoc($rsClassification);
$totalRows_rsClassification = mysql_num_rows($rsClassification);

mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
$query_rsBirthMonth = "SELECT * FROM birthdaymonth";
$rsBirthMonth = mysql_query($query_rsBirthMonth, $rotarysantarosa) or die(mysql_error());
$row_rsBirthMonth = mysql_fetch_assoc($rsBirthMonth);
$totalRows_rsBirthMonth = mysql_num_rows($rsBirthMonth);

mysql_select_db($database_rotarysantarosa, $rotarysantarosa);
$query_rsBirthDay = "SELECT * FROM birthdayday ORDER BY birthdayday ASC";
$rsBirthDay = mysql_query($query_rsBirthDay, $rotarysantarosa) or die(mysql_error());
$row_rsBirthDay = mysql_fetch_assoc($rsBirthDay);
$totalRows_rsBirthDay = mysql_num_rows($rsBirthDay);
?>