PHP - Not Allowing Apostrophies In Mysql Fields

This topic has been moved to MySQL Help.

http://www.phpfreaks.com/forums/index.php?topic=320026.0

Now, here's what I'm trying to do: First, I have a file filled with data like such: title tag 1 2 Title Description Etc Next, I upload that file to my site which then proceeds to make an array with said data and then inserts it into my database. But this is not the intended behavior. Right now, if I upload the same file again, it will re-insert everything and duplicate all entries. What I want to do is check if the data in the file has already been added, do nothing. If it's been modified, I want to update the database where changes have been made and not duplicate anything. Currently, my code does all that except one thing whre I'm really stuck: it won't update the changes from the file to the database. I've tried echoing everything and it's to be working except for the query so I take it the error is in there but I can't find it... I'm still learning PHP and MySQL so I thought maybe somebody could help indicate where or what I'm doing wrong in the query. Thanks in advance ! Here's my attempt at doing so:

$register_ep_data = array(
			'show' => $name,
			'season' => $srNum,
			'ep' => $epNum,
			'app_name' => $epName,
			'tag' => $tag,
			'app_about' => $desc,
			'app_website' => $imdb,
			'app_release' => $release,
			'type' => $type,
			'app_code' => $Frame 
			);

array_walk($register_ep_data, 'array_fu');

$fields = '`' . implode('`, `', array_keys($register_ep_data)) . '`';
$data = '\'' . implode('\', \'', $register_ep_data) . '\'';

$epFound = false;
$id = 0;
	 
while ($ep_list_data = mysql_fetch_array($turtle)) {

     $id = $ep_list_data['app_id'];

     $currentNAME = $ep_list_data['app_name'];
     $SERIES = $ep_list_data['show'];

     if ($SERIES == $name) {

        if ($currentNAME == $epName) {
              $epFound = true;
              break;
	}

      }

   }

   if ($epFound) {
      mysql_query("UPDATE `games` SET ($fields) VALUES ($data) WHERE `app_id` = '$id'");
   } else {
      mysql_query("INSERT INTO `games` ($fields) VALUES ($data)");
   }

A few explanations:   $fields would equal to something like: `show`, `season`, `ep`, etc... and $data to 'example', '1', '2', 'etc'

Hi Guys,

I have stuck with my problem and i am nothing to php, i already posted this to another php script forum, but haven't solve, so i wondering if anyone here help me and many thanks.

this is all about game scores from .xml file
inside the xml file itself as:
Code: [Select]
<gesmes:Envelope>
<gesmes:subject>Reference Scores</gesmes:subject>
-
<gesmes:Sender>
<gesmes:name>Game Information Scores</gesmes:name>
</gesmes:Sender>
-
<Cube>
-
<Cube time="2010-10-13">
<Cube scores="GameA1" value="1.5803"/>
<Cube scores="GameA2" value="21.35"/>
............etc
<Cube scores="GameA15" value="135"/>
</Cube>
</Cube>
</gesmes:Envelope>
then i got php script that can save all data of .xml above to mysql, look like

<?php
 
class Scores_Converter {
   
   var $xml_file = "http://192.168.1.112/gamescores/scores-daily.xml";
   var $mysql_host, $mysql_user, $mysql_pass, $mysql_db, $mysql_table;
   var $scores_values = array();
 
   //Load convertion scores
   function Scores_Converter($host,$user,$pass,$db,$tb) {
      $this->mysql_host = $host;
      $this->mysql_user = $user;
      $this->mysql_pass = $pass;
      $this->mysql_db = $db;
      $this->mysql_table = $tb;
 
      $this->checkLastUpdated();
 
      $conn = mysql_connect($this->mysql_host,$this->mysql_user,$this->mysql_pass);
 
      $rs = mysql_select_db($this->mysql_db,$conn);
 
      $sql = "SELECT * FROM ".$this->mysql_table;
 
      $rs =  mysql_query($sql,$conn);
   
      while($row = mysql_fetch_array($rs)) {
         $this->scores_values[$row['scores']] = $row['value'];         
      }
   }
 
   /* Perform the actual conversion, defaults to 1.00 GameA1 to GameA3 */
   function convert($amount=1,$from="GameA1",$to="GameA3",$decimals=2) {
      return(number_format(($amount/$this->scores_values[$from])*$this->scores_values[$to],$decimals));
   }
 
   /* Check to see how long since the data was last updated */
   function checkLastUpdated() {
      $conn = mysql_connect($this->mysql_host,$this->mysql_user,$this->mysql_pass);
 
      $rs = mysql_select_db($this->mysql_db,$conn);
 
      $sql = "SHOW TABLE STATUS FROM ".$this->mysql_db." LIKE '".$this->mysql_table."'";
 
      $rs =  mysql_query($sql,$conn);
 
      if(mysql_num_rows($rs) == 0 ) {
         $this->createTable();
      } else {
         $row = mysql_fetch_array($rs);
         if(time() > (strtotime($row["Update_time"])+(12*60*60)) ) {
            $this->downloadValueScores();         
         }
      }
   }
 
   /* Download xml file, extract exchange values and store values in database */
   function downloadValueScores() {
      $scores_domain = substr($this->xml_file,0,strpos($this->xml_file,"/"));
      $scores_file = substr($this->xml_file,strpos($this->xml_file,"/"));
      $fp = @fsockopen($scores_domain, 80, $errno, $errstr, 10);
      if($fp) {
         $out = "GET ".$scores_file." HTTP/1.1\r\n";
         $out .= "Host: ".$scores_domain."\r\n";
         $out .= "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5\r\n";
         $out .= "Connection: Close\r\n\r\n";
         fwrite($fp, $out);
         while (!feof($fp)) {
            $buffer .= fgets($fp, 128);
         }
         fclose($fp);
 
         $pattern = "{<Cube\s*scores='(\w*)'\s*value='([\d\.]*)'/>}is";
         preg_match_all($pattern,$buffer,$xml_values);
         array_shift($xml_values);
 
         for($i=0;$i<count($xml_values[0]);$i++) {
            $exchange_value[$xml_values[0][$i]] = $xml_values[1][$i];
         }
 
         $conn = mysql_connect($this->mysql_host,$this->mysql_user,$this->mysql_pass);
 
         $rs = mysql_select_db($this->mysql_db,$conn);
            
         foreach($exchange_value as $scores=>$value) {
            if((is_numeric($value)) && ($value != 0)) {
               $sql = "SELECT * FROM ".$this->mysql_table." WHERE scores='".$scores."'";
               $rs =  mysql_query($sql,$conn) or die(mysql_error());
               if(mysql_num_rows($rs) > 0) {
                  $sql = "UPDATE ".$this->mysql_table." SET value=".$value." WHERE scores='".$scores."'";
               } else {
                  $sql = "INSERT INTO ".$this->mysql_table." VALUES('".$scores."',".$value.")";
               }
               $rs =  mysql_query($sql,$conn) or die(mysql_error());
            }
         }   
      }
   }
 
   /* Create the scores table */
   function createTable() {
      $conn = mysql_connect($this->mysql_host,$this->mysql_user,$this->mysql_pass);
 
      $rs = mysql_select_db($this->mysql_db,$conn);
 
      $sql = "CREATE TABLE ".$this->mysql_table." ( scores char(3) NOT NULL default '', value float NOT NULL default '0', PRIMARY KEY(scores) ) ENGINE=MyISAM";
      
      $rs =  mysql_query($sql,$conn) or die(mysql_error());
 
      $sql = "INSERT INTO ".$this->mysql_table." VALUES('GameA0',1)";
 
      $rs =  mysql_query($sql,$conn) or die(mysql_error());
      
      $this->downloadValueScores();   
   }
 
}
?>

but that php script above just create table of mysql below

CREATE TABLE IF NOT EXISTS `scrore_table` (
  `scores` char(3) NOT NULL default '',
  `value` float NOT NULL default '0',
  PRIMARY KEY  (`scores`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

INSERT INTO `scrore_table` (`scores`, `value`) VALUES
('GameA0', 1),
('GameA1', 1.5651),
......etc
('GameA15', 95.572);

while of my existing database table look like:

CREATE TABLE IF NOT EXISTS `scrore_table` (
  `scrore_id` int(11) NOT NULL auto_increment,
  `scrore_title` varchar(32) collate utf8_bin NOT NULL default '',
  `scores` varchar(3) collate utf8_bin NOT NULL default '',
  `decimal_place` char(1) collate utf8_bin NOT NULL,
  `value` float(15,8) NOT NULL,
  `date_updated` datetime NOT NULL default '0000-00-00 00:00:00',
  PRIMARY KEY  (`currency_id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1; ;

INSERT INTO `scrore_table` (`scrore_id`, `scrore_title`, `scores`, `decimal_place`, `value`, `date_updated`) VALUES
(1, 'Game Class A0', 'GameA0', '2', 1.00000000, '2010-04-06 22:00:54'),
(2, 'Game Class A1', 'GameA1', '2', 1.52600002,  '2010-04-06 22:00:54'),
..............................etc
(14, 'Game Class A15', 'GameA15', '2', 1.13999999,  '2010-04-06 22:00:54');

as i said i newbie to php then i dont know how to modify the php code above able to automatically create the table and insert/update new fields e.g. scrore_id, scrore_title,decimal_place, date_updated also all values to my existing database

i looking for some helps and thanks in advance..

I have problem that only last text field  is updated, how should I fix this?

Here's the code
<?php
if(isset($_POST["update"])){
mysql_query("UPDATE categories SET name_category = '".$_POST['category']."'  WHERE ID= ".$_POST['currentCat']." ") or die(mysql_error());
mysql_query("UPDATE podkategorije SET name_subcategory = '".$_POST['subcategory']."'  WHERE id_subCat= ".$_POST['currentSubCat']." ") or die(mysql_error());
 }
?>
<form action="" method="post" >
<?php

//creating texfields from db

$query = "SELECT k.ID, k.name_category, pk.name_subcategory, pk.id_subCat
          FROM `categories` AS k
          JOIN `subcategories` AS pk ON pk.id_mainCat = k.ID";

$result = mysql_query($query) or die(mysql_error());

$currentCat = false;
while($row = mysql_fetch_array($result))
{
    //so it doesn't repeat itself
    if($currentCat != $row['ID'])
    {
        //display of main Categories

?>

<ul>

<li>

<br/><input name="categories" type="text" value="<?php  echo $row['name_category']; ?>" />

</li>

</ul>

<?

$currentCat = $row['ID'];

    }
    //display subcategories

?>

<input name="subcategories" type="text" value="<?php  echo $row['name_category']; ?>" /><br/>

<input type="hidden" name="currentCat" value="<?php echo $row['ID']; ?>" />

<input type="hidden" name="currentSubCat" value="<?php echo $row['id_subCat']; ?>" />

<?
}
?>
<br />
<input type="button" value="Back" onClick="history.go(-1);return true;">
<input type="submit" value="Update" name="update"/>
</form>

I have the following PHP script to update two time/date fields in the database.

When i run this the fields are not updated.

Can anyone see where i m going wrong.

<?php
$con = mysql_connect("localhost","dbname","dbpassword");
if (!$con)
{
die('Could not connect: ' . mysql_error());
}

echo 'Connected successfully';

mysql_select_db("my_db", $con);

mysql_query("UPDATE msm_content SET created = '2011-01-02 00:00:00', modified = '2011-01-01 00:00:00'");

echo 'Query Updated successfully';

mysql_close($con);
?>

Your guidance is much appreciated.

I am trying to simplify my coding work for my website and wanting to make it operate more professionally (as part of my training to better my programming skills, which I know will take a lot of time to do). One of the things I`d like to improve on it is to create tables and fields in my mysql database, but not have to go into phpmyadmin to do it. I know open source programs like Drupal can do this easily so that when you add modules, the user does not have to access the database to set it up. But looking at the codes, I`m unable to figure out how it works.

How will I be able to program my code to do something like, I`ll have a form where I enter in what I want the new table to be called, what fields to add in and their specifications, where I could do this by just going into my website as the admin?

I'm using PHP and MySQL. I have an application where I'd like to keep certain database (character) fields encrypted when added to the database and stored, but when I need to display them at the appropriate time, I can call a function and quickly decrypt them for display.

Does anyone know of a simple way to do this?

Thanks!

I want to have a search product feature, but I would like members to be able to search multiple fields in one go i.e.  product_code, Product_name in one MySQL query.

The thing is, members have to be logged on, so the query must also only show results relating to that specific member, via the session[member_ID], my current query for listing products for that specific member is :

Code: [Select]
$sql = "SELECT productId, productCode, image, name, price, stock_level FROM product_inventory WHERE memberr_ID = '" . $_SESSION['SESS_mem_ID'] . ";
How would I change the above into a search query to search for productcode, productname and still only show results beloging to this member using the session data ? 

all help appreciated

In brief, I'm attempting to capture the form data from a dynamic form to a mysql database.

From he

To He

The post data looks like this from the form -
DATA SUBMITTED:

Array(

...
[petlist] => [{"Pet Name":"Hal","Pet Type":"Dog","Breed":"Lab","DOB":"02/10/2013","Gender":"Male","Special Needs":"No"},
{"Pet Name":"Bill","Pet Type":"Dog","Breed":"Golden","DOB":"03/20/2015","Gender":"Male","Special Needs":"No"}]
...

)

PHP CODE:

...
$_POST['petlist'];
...

As a non-php or mysql developer, I'm learning on the fly.  This is a section of the php file that I was using to post the form data to mySQL.  This worked great up to the point I added the dynamic form widget.

<?php
// This function will run within each post array including multi-dimensional arrays
function ExtendedAddslash(&$params)
{
        foreach ($params as &$var) {
            // check if $var is an array. If yes, it will start another ExtendedAddslash() function to loop to each key inside.
            is_array($var) ? ExtendedAddslash($var) : $var=addslashes($var);
            unset($var);
        }
}

// Initialize ExtendedAddslash() function for every $_POST variable
ExtendedAddslash($_POST);     

$submission_id = $_POST['submission_id'];
$formID =$_POST['formID'];
$ip =$_POST['ip'];
$fname =$_POST['fname'];
$lname =$_POST['lname'];
$spousename =$_POST['spousename'];
$address =$_POST['address'][0]." ".$_POST['address'][1]." ".$_POST['address'][2]." ".$_POST['address'][3]." ".$_POST['address'][4]." ".$_POST['address'][5];
... 

$db_host = 'localhost';
$db_username = 'xxxxx';
$db_password = 'xxxxx';
$db_name = 'xxxxx';

mysql_connect( $db_host, $db_username, $db_password) or die(mysql_error());
mysql_select_db($db_name);

// search submission ID

$query = "SELECT * FROM `tableName` WHERE `submission_id` = '$submission_id'";
$sqlsearch = mysql_query($query);
$resultcount = mysql_numrows($sqlsearch);

if ($resultcount > 0) {
 
    mysql_query("UPDATE `tableName` SET
                                `fname` = '$fname',
                                `lname` = '$lname',
                                `spousename` = '$spousename',
                                `address` = '$address',
                                 
                                 WHERE `submission_id` = '$submission_id'")
     or die(mysql_error());
   
} else {

    mysql_query("INSERT INTO `tableName` (submission_id, formID, IP, fname, lname, spousename, address)
                               VALUES ('$submission_id', '$formID', '$ip', '$fname', '$lname', '$spousename', '$address') ")
    or die(mysql_error()); 

}
?>

It has been suggested that I explore using the PHP Explode() function.  It's possible that may work, but can't get my head around how to apply the function to the PETLIST Array.

Looking for suggestions or direction to find a solution for this challenge.  Looking forward to any replies.

hi, i'm new to php. i've got a problem.
I've 3 tables and table has following content

table 1
id  name  email   address   phone   execution_date   executor_name   web_address


table 2
id  name  email   address   phone   execution_date   executor_name   project_title


table 3
id  name  email   address   phone   execution_date   executor_name   reviewer

I want to export these table to and spreadsheet (.xls) with some criteria

a form will assign which data will published at the spreadsheet with these criteria
#all data can be exported from three tables
#some column can be selected from three tables
#some or all data can be selected from individual table

i've implement a script for this but it didn't meet my requirements. Can anyone help?

here is my script

<?php

$DB_Server = "localhost"; //your MySQL Server 
$DB_Username = "root";  //your MySQL User Name 
$DB_Password = "pass"; //your MySQL Password 
$DB_DBName = "mydb"; //your MySQL Database Name 
$search_from_date = $_POST['start_date'];
$search_to_date = $_POST['end_date'];
$Connect = @mysql_connect($DB_Server, $DB_Username, $DB_Password)
or die("Couldn't connect to MySQL:<br>" . mysql_error() . "<br>" . mysql_errno());
$Db = @mysql_select_db($DB_DBName, $Connect)
or die("Couldn't select database:<br>" . mysql_error(). "<br>" . mysql_errno());
$now_date = date('m-d-Y H:i');

if(($_POST['typer_of_report'] == 'rrc_report')  || ($_POST['typer_of_report'] ==  'all_report'))
{
$DB_TBLName = 'rrc_record';
}

if(($_POST['typer_of_report'] == 'erc_report')  || ($_POST['typer_of_report'] ==  'all_report'))
{
$DB_TBLName2 = 'erc_record';
}

if(($_POST['typer_of_report'] == 'aeec_report')  || ($_POST['typer_of_report'] ==  'all_report'))
{
$DB_TBLName3 = 'aeec_record';
}



$file_type = "vnd.ms-excel";
$file_ending = "xls";
//}
header("Content-Type: application/$file_type");
header("Content-Disposition: attachment; filename=protocol_report.$file_ending");
header("Pragma: no-cache");
header("Expires: 0");

if($DB_TBLName)
{
$sql = "Select * from ".$DB_TBLName." where execution_date >= '".$search_from_date."' and 
execution_date <= '".$search_to_date."' order by execution_date desc";
$Use_Title = 1;


$title = "Report for $DB_TBLName on $now_date";
$result = @mysql_query($sql,$Connect)
or die("Couldn't execute query:<br>" . mysql_error(). "<br>" . mysql_errno());

if ($Use_Title == 1)
{
echo("$title\n");
}
$sep = "\t"; //tabbed character
for ($i = 0; $i < mysql_num_fields($result); $i++)
{
echo mysql_field_name($result,$i) . "\t";
}
print("\n");
while($row = mysql_fetch_row($result))
{
$schema_insert = "";
for($j=0; $j<mysql_num_fields($result);$j++)
{
if(!isset($row[$j]))
$schema_insert .= "NULL".$sep;
elseif ($row[$j] != "")
$schema_insert .= "$row[$j]".$sep;
else
$schema_insert .= "".$sep;
}
$schema_insert = str_replace($sep."$", "", $schema_insert);
$schema_insert = preg_replace("/\r\n|\n\r|\n|\r/", " ", $schema_insert);
$schema_insert .= "\t";
print(trim($schema_insert));
print "\n";
}
//}

echo "\n...\n";
}

if($DB_TBLName2)
{
$sql = "Select * from ".$DB_TBLName2." where execution_date >= '".$search_from_date."' and 
execution_date <= '".$search_to_date."' order by execution_date desc";
$result = @mysql_query($sql,$Connect)
or die("Couldn't execute query:<br>" . mysql_error(). "<br>" . mysql_errno());
$Use_Title = 1;
$title = "Report for $DB_TBLName2 on $now_date";
if ($Use_Title == 1)
{
echo("$title\n");
}
$sep = "\t"; //tabbed character
for ($i = 0; $i < mysql_num_fields($result); $i++)
{
echo mysql_field_name($result,$i) . "\t";
}
print("\n");
while($row = mysql_fetch_row($result))
{
$schema_insert = "";
for($j=0; $j<mysql_num_fields($result);$j++)
{
if(!isset($row[$j]))
$schema_insert .= "NULL".$sep;
elseif ($row[$j] != "")
$schema_insert .= "$row[$j]".$sep;
else
$schema_insert .= "".$sep;
}
$schema_insert = str_replace($sep."$", "", $schema_insert);
$schema_insert = preg_replace("/\r\n|\n\r|\n|\r/", " ", $schema_insert);
$schema_insert .= "\t";
print(trim($schema_insert));
print "\n";
}


echo "\n...\n";
}

if($DB_TBLName3)
{
$sql = "Select * from ".$DB_TBLName3." where execution_date >= '".$search_from_date."' and 
execution_date <= '".$search_to_date."' order by execution_date desc";
$result = @mysql_query($sql,$Connect)
or die("Couldn't execute query:<br>" . mysql_error(). "<br>" . mysql_errno());
$Use_Title = 1;
$title = "Report for $DB_TBLName3 on $now_date";
if ($Use_Title == 1)
{
echo("$title\n");
}
$sep = "\t"; //tabbed character
for ($i = 0; $i < mysql_num_fields($result); $i++)
{
echo mysql_field_name($result,$i) . "\t";
}
print("\n");
while($row = mysql_fetch_row($result))
{
$schema_insert = "";
for($j=0; $j<mysql_num_fields($result);$j++)
{
if(!isset($row[$j]))
$schema_insert .= "NULL".$sep;
elseif ($row[$j] != "")
$schema_insert .= "$row[$j]".$sep;
else
$schema_insert .= "".$sep;
}
$schema_insert = str_replace($sep."$", "", $schema_insert);
$schema_insert = preg_replace("/\r\n|\n\r|\n|\r/", " ", $schema_insert);
$schema_insert .= "\t";
print(trim($schema_insert));
print "\n";
}
}

?>

have anyone any idea?

I can not get the values from the javascript add row to go dynamically as a row into MySql only the form values show up as the form below as one row. I made it as an array, but no such luck, I have tried this code around a multitude of ways. I don't know what I am doing wrong, kindly write out the correct way.      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR...ransitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml">
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 <title>Dynamic Fields js/php to MySql need to submit dynamically to the database</title>
 <?php
 require ('database.php');
 ?>
  <script type="text/javascript">
  var counter     =     1;
  var collector     =     "";
 
  function addfields(indx)
  {
   var tbl = document.getElementById('table_id');
   var newtr = document.createElement('tr');
   counter = counter + indx;
 
   newtr.setAttribute('id','tr'+counter);
 
   newtr.innerHTML = '<td><input type="checkbox" name="checkb'+counter+'" id="checkb'+counter+'" value="'+counter+'" onclick="checkme('+counter+')"></td><td><input type="text" name="text1[]"></td><td><textarea name="textarea1[]"></textarea></td>';
 
   tbl.appendChild(newtr);
  }
 
  function checkme(dx)
 {
    collector += dx+",";
 }
 
  function deletetherow(indx)
  {
   var col = collector.split(",");
 
   for (var i = 0; i < col.length; i++)
   {
    var remvelem = document.getElementById('tr'+col[i]);
    var chckbx = document.getElementById("checkb"+col[i]);
    if(remvelem && chckbx.checked)
    {
     var tbl = document.getElementById('table_id');
    tbl.removeChild(remvelem);
   }
   }
  }
 </script>
 </head>
 <body>
 <form enctype="multipart/form-data" id="1" style="background-color:#ffffff;" action="<?php echo $_SERVER['PHP_SELF']; ?>"></form>
 <table id="table_id" >
   <tr id="tr1" class="trmain">
   <td>
   </td>
    <td>
    <input type="text" name="text1[]">
  </td>
    <td>
   <textarea name="textarea1[]"></textarea>
     </td> 
   </tr>
  </table>
 <input type="button" value="Add" onClick="addfields(1);" />&nbsp;
 <input type="button" value="Delete" onClick="deletetherow()" />
 <input type="submit" value="Send" id="submit"  name="submit"/>
 
 <?php
 if(isset($_POST['submit'])) {
 for ($i=0; $i < count($_POST['text1']); $i++ )
 {
 $ced = stripslashes($_POST['text1'][$i]);
 $erg = stripslashes($_POST['textarea1'][$i]);
 }
 
 
 $bnt = mysql_query("INSERT INTO tablename (first, second) VALUES ('$ced', '$erg')")or die('Error: '. mysql_error() );
 $result = mysql_query($bnt);
 }
 
 ?>
 
 </body>
 </html>

I was wondering if there was a way to allow users to input there own HTML and CSS in like a members only site using PHP? If so, how would it be done?

I've set up a staging server with Ubuntu 14.04, Apache, PHP, and MySQL, and I'm having a configuration issue that I need to resolve.   index.html uses a server side include.  I was required to change the shtml file it references to a php file, but it's not working properly.   When my webpage uses the code: <?php include ("footer.shtml"); ?> then the page loads correctly   However, when I change it to: <?php include ("footer.php"); ?> then I instead see a message stating, "This attachment was removed because it contains data that could pose a security risk."   I can't determine which configuration file I need to change, and what the change needs to be.