PHP - Exit Script From Showing

I'm new to php and I created a user registration form. But whenever I submit the form, part of my page doesn't load. I see the "successful registration" message, but I don't see my right sidebar, footer, or my wrapper div. After searching the internet all day, I concluded it was the exit() function. But if I leave in the exit function and submit the form, all of my page loads, but the original registration form is still shown below my "successful registration" message. Can someone please help?

Code: [Select]
<?php
            require_once('_includes/connectvars.php');

            if (isset($_POST['submitted'])) {
            $firstname = mysql_real_escape_string(trim($_POST['firstname']));
            $lastname = mysql_real_escape_string(trim($_POST['lastname']));
            $email = mysql_real_escape_string(trim($_POST['email']));
            $birthdate = mysql_real_escape_string(trim($_POST['birthdate']));
            $zipcode = mysql_real_escape_string(trim($_POST['zipcode']));
            $gender = $_POST['gender'];
            $username = mysql_real_escape_string(trim($_POST['username']));
            $password1 = mysql_real_escape_string(trim($_POST['password1']));
            $password2 = mysql_real_escape_string(trim($_POST['password2']));
            $terms = $_POST['terms'];
            $newsletter = $_POST['newsletter'];
            $activationkey = mt_rand() . mt_rand() . mt_rand() . mt_rand() . mt_rand();

            $captchchk = 1;
            require_once('_includes/recaptchalib.php');
            $privatekey = "some#";
            $resp = recaptcha_check_answer ($privatekey,
            $_SERVER["REMOTE_ADDR"],
            $_POST["recaptcha_challenge_field"],
            $_POST["recaptcha_response_field"]);

            if (preg_match ('%^[A-Za-z\.\' \-]{2,15}$%', stripslashes(trim($_POST['firstname'])))) {
            $firstname = escape_data($_POST['firstname']);
            } else {
                $firstname = FALSE;
                echo '<p class="error">Please enter a valid first name!</p>';
                }

            if (preg_match ('%^[A-Za-z\.\' \-]{2,30}$%', stripslashes(trim($_POST['lastname'])))) {
                $lastname = escape_data($_POST['lastname']);
                } else {
                    $lastname = FALSE;
                    echo '<p class="error">Please enter a valid last name!</p>';
                    }
            if (preg_match('%^(0?[1-9]|1[012])[/](0?[1-9]|[12][0-9]|3[01])[/](19|20)?[0-9]{2}$%', stripslashes(trim($_POST['birthdate'])))) {
                $birthdate = escape_data($_POST['birthdate']);
                } else {
                    $birthdate = FALSE;
                    echo '<p class="error">Please enter a valid date of birth in the format of MM/DD/YYYY</p>'; 
                    }

            if (preg_match ('%^[0-9]{5}$%', stripslashes(trim($_POST['zipcode'])))) {
                $zipcode = escape_data($_POST['zipcode']);
                } else {
                    $zipcode = FALSE;
                    echo '<p class="error">Please enter a valid 5 digit zip code!</p>';
                    }

            if ($gender !== 'M') {
                if ($gender !== 'F') {
                    echo '<p class="error">Please select your gender!</p>';
                    }
                }

            if (preg_match ('%^[A-Za-z][A-Za-z0-9]*(?:_[A-Za-z0-9]+)*(\S{4,75})$%', stripslashes(trim($_POST['username'])))) { 
                $username = escape_data($_POST['username']);
                } else {
                    $username = FALSE;
                    echo '<p class="error">Please enter a valid username!</p>';
                    }

            if (preg_match ('%^[A-Za-z0-9]{6,15}$%', stripslashes(trim($_POST['password1'])))) {
                $password1 = escape_data($_POST['password1']);
                if (($_POST['password1'] == $_POST['password2']) && ($_POST['password1'] != $_POST['username'])) {
                     $password1 = escape_data($_POST['password1']);
                     } elseif ($_POST['password1'] == $_POST['username']) {
                         $password1 = FALSE;
                         echo '<p class="error">Your password cannot be the same as the username!</p>';
                         } else {
                             $password1 = FALSE;
                             echo '<p class="error">Your password did not match the confirmed password!</p>';
                             }
                             } else {
                                 $password1 = FALSE;
                                 echo '<p class="error">Please enter a valid password!</p>';
                                 }

            if ($terms !== 'Y') {
                echo '<p class="error">You must agree to the terms of use!</p>';
                }

            if (!$resp->is_valid) {
                echo '<p class="error">The CAPTCHA Code wasn\'t entered correctly!</p>';
                $captchchk = 0;
                }

                if ($firstname && $lastname && $email && $birthdate && $zipcode && $gender && $username && $password1 &&
                  $terms && $captchchk) {
                      $query = "SELECT * FROM members WHERE username = '$username'";
                      $result = mysql_query($query) or trigger_error(mysql_error().$query);
                      if(mysql_num_rows($result) == 1) {
                          echo '<br><br><p class="error">An account already exists for this username. Please select a different
                          username.</p>';
                          $username = "";
                          } else {
                              if(mysql_num_rows($result) == 0) {
                                  $query = "INSERT INTO members (first_name, last_name, email, dob, zip_code, gender, username,     password, join_date, newsletter, active, terms, status) VALUES ('$firstname', '$lastname', '$email', STR_TO_DATE('$birthdate', '%m/%d/%Y'), '$zipcode', '$gender', '$username', SHA('$password1'), NOW(), '$newsletter', '$activationkey', '$terms', 'verify')";
                                  $result = mysql_query($query) or trigger_error(mysql_error().$query);
                                  if (mysql_affected_rows() == 1) {
                                      $to = $_POST['email'];
                                      $subject = "Registration";
                                      $message = "Welcome to Mysite.com!\n\nYou, or someone using your email address, has completed registration at Mysite.com. You can complete registration by clicking the following link:\n\nhttp://www.mysite.com/verify.php?$activationkey\n\nIf this is an error, ignore this email and you will be removed from our mailing list.\n\nRegards,\n\nThe Mysite.com Team";
                                      $headers = 'From: noreply@ Mysite.com' . "\r\n" .
                                      'Reply-To: noreply@ Mysite.com' . "\r\n" .
                                      'X-Mailer: PHP/' . phpversion();
                                      mail($to, $subject, $message, $headers);
                                      echo '<br /><br /><p>Thank you for registering! A confirmation email has been sent to your email. Please click on the link in that email in order to activate your account.</p>';
                                      } else {
                                          $queryString = $_SERVER['QUERY_STRING'];
                                          $query = "SELECT * FROM members";
                                          $result = mysql_query($query) or trigger_error(mysql_error().$query);
                                          while($row = mysql_fetch_array($result)){
                                              if ($queryString == $row["active"]){
                                                  echo "Congratulations!" . $row["username"] . " is now a member of Mysite.com!";
                                                   $query="UPDATE members SET active = '', status='activated' WHERE (user_id =
                                                   $row[user_id])";
                                                   if (!mysql_query($query)) {
                                                       die('Error: ' . mysql_error());
                                                       }
                                              }
                                          }
                                      }
                              }
                          }
                  }
                  exit();
                  mysql_close();
            }

hi guys..

im not sure if im in the right section but.

i have this script below and it exits BUT i would like it to exit After it applies the CSS to my Error.

i want it to display nothing except the error if there is an error.. the php is being included on the index.php page which links to the css.

this works IF i put the include after the CSS link but wondering if theres a better way.


PHP
<?php


$host = 'localhost';
$user = 'user';
$pass = 'password';
$db = 'upload';
$link = @mysqli_connect( $host, $user, $pass, $db);

if(!$link){?> 
<div id='conn_error'> <?php
echo 'There was an Error Connecting to the Server';
?>
</div><?php 

}

?>


Css
Code: [Select]
#conn_error{
background: red;
font-size: 24px;
font-family: arial;
color: white;
width: 500px;
text-align: center;
border: solid 2px black;
position: absolute;
top: 150px;
left: 30%;
padding: 2px;

}

The code seems to cear debug until I attempt to exit after doing a while loop.

PHP Parse error: syntax error, unexpected T_ELSE in C:\Users\Bob\Desktop\TAFT WEB\test\login.php on line 46

Here's the code:

<?php
/*
-----------------------NOVEMBER 2010--------------------
*/

// User has 3 trys to enter correct username and password
// increment by one
$num_log = ($num_logs + 1);

if ($_POST['username'])
{

//Connect to the database through our include
include_once "connect_to_mysql.php";
$username = stripslashes($_POST['username']);
$username = strip_tags($username);
$username = mysql_real_escape_string($username);

$password = ereg_replace("[^A-Za-z0-9]", "", $_POST['password']); // filter everything but numbers and letters
$password = md5($password);
}

// Make query and then register all database data that -
// cannot be changed by member into SESSION variables.
// Data that you want member to be able to change -
// should never be set into a SESSION variable.
$sql = mysql_query("SELECT * FROM register WHERE username='$username' AND password='$password'");
$login_check = mysql_num_rows($sql);
if($login_check > 0); {
    while($row = mysql_fetch_array($sql)){
        // Get member ID into a session variable
        $id = $row["id"];
        session_register('id');
        $_SESSION['id'] = $id;
        // Get member username into a session variable
    $username = $row["username"];
        session_register('username');
        $_SESSION['username'] = $username;
        // Update last_log_date field for this member now
        mysql_query("UPDATE user_log SET log_on=now() WHERE id='$id'");
        // Print success message here if all went well then exit the script
header("location: memPage.shtml php?id=$id");
exit();
    }
    // close while
ERROR --->    else {
             exit()
    }

    // Print login failure message to the user and link them back to your login page
       print '<br><br>
       <font color="#FF0000">
       No match was found in our member records, try again.
       </font>
       <br><br>
       <a href="login.php">Click here</a> to go back to the login page.';
       exit();
// close if post
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Login to your profile</title>

<script type="text/javascript">
<!-- Form Validation -->
function validate_form ( ) {
valid = true;
if ( document.logform.email.value == "" ) {
alert ( "Please enter your User Name" );
valid = false;
}
if ( document.logform.pass.value == "" ) {
alert ( "Please enter your password" );
valid = false;
}
return valid;
}
<!-- Form Validation -->
</script>

</head>

<body>
     <div align="center">
       <h3 style="test-align:center;font-weight:bold; color:blue;padding-top:25px;padding-bottom;15px;">
       Log in to your account here
       </h3>
     </div>

     <table align="center" cellpadding="5">
      <form action="login.php" method="post" enctype="multipart/form-data" name="logform" id="logform" onsubmit="return validate_form ( );">
        <tr>
          <td class="style7"><div align="right">Username:</div></td>
          <td><input name="username" type="varchar" id="username" size="30" maxlength="50" /></td>
        </tr>
        <tr>
          <td class="style7"><div align="right">Password:</div></td>
          <td><input name="password" type="password" id="password" size="50" maxlength="24" /></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
          <td><input name="Submit" type="submit" value="Login" /></td>
        </tr>
      </form>
    </table>
</body>
</html>

I have a script that allows a User to create a new password as part of a password re-set flow.

In my script, I store the $memberID in the Session so that when I redirect from "create_password.php" to "results.php" I still have the $memberID and can store it in the transaction log in my database.

The problem is that even though I have unset() after the redirect, it is somehow erasing the value in $_SESSION['memberID'] before the redirect, and thus I get "0" in the database when "results.php" runs?!


// Temp Password expires in 1 hour (3600 seconds).
if ((time() - $tempResetOn)>10){
// Temp Password Expired.
$_SESSION['resultsCode'] = 'PASSWORD_TEMP_PASSWORD_EXPIRED_2112';

// Set Error Source.
$_SESSION['errorPage'] = $_SERVER['SCRIPT_NAME'];

// Redirect to Outcome Page.
header("Location: " . BASE_URL . "/members/results.php");

unset($_SESSION['memberID']);

// End script.
exit();
}//End of CHECK FOR EXPIRED TEMP PASSWORD


How do I unset the Session variable - in the "create_password.php" script above - AFTER I successfully redirect and store the $memberID in the database?

Thanks,


Debbie

There is a function (that cannot be changed) which has an include:

<?php
function a() {
  include 'file.php';
  echo 'work';
}
?>
 
==file.php==
<?php
echo 'play';
## Need to leave a() now!
?>

The included file can be changed.   I would like a way for file.php to cause PHP to return out of the function a(). A return; statement in file.php has PHP pick up execution with the statement following include.   What is there in PHP that will allow returning out of a() at some point in file.php?