PHP - Social Network (after Log In, Redirected To The Profile Page)

I'm attempting to implement a simple social networking system but at the moment am confused about how to create a multiple query which will display a certain user's friends list.

The database contains four tables, the two tables that I'm using at the moment at 'usersTable' and 'friendshipsTable' are detailed below.


usersTable           | Table that stores all the user data

UserID         | Default primary key
Forename              |
Surname         |
Username           |
Password              |
Email Address      |


friendshipTable   | Table that stores information about friendships between users

FriendshipID      |  Default primary key
userID_1                |  UserID
userID_2         |  UserID
Status         |  Either Pending or Confirmed.

The user's id is parsed into the url, and then saved into a variable.

blah.com/userprofile.php?id=6

$id = $_GET['id']; 

I am familiar with creating simple queries, but can't quite work out how to set up multiple table queries.

What the query needs to do is to check the userID that is parsed with the url, and then check the friendshipsTable by checking if either the userID_1 or userID_2 field  matches the userID to grab the records from the table where there is a match.

The next step is to check to see if the friendship is 'Confirmed' or 'Pending' and if it is 'Pending' to ignore it. Once the records have then been chosen I need the query to then check the value in either userID_1 or userID_2 that doesn't match userID and then pull the user's username and name from the usersTable so it can be displayed on a webpage.

I've no idea hoe much I may or may not be overcomplicating this, an example of the code that I've got so far for this query can be found below, but that's as far as I've got at the moment.

$displayFriends = mysql_query("SELECT * FROM friendshipTable, usersTable WHERE friendshipTable.userID_1='$id' OR friendshipTable.userID_2='$id' ");

Cheers for any help.

Not sure where to start, and it may not be entirely PHP.

I am helping a friend with a small social network (5,000 users). They want to add a feature where each user gets given their own email account in the format username@domain.com with domain.com being the domain of the social network.

Is this too much? I've never thought of anything like this before.

How would we create the email accounts? Can PHP do it? Would it be an API through the web host / email space provider?

Hi all,

I am currently facing a problem, if you look at 'viewprofile.jpg' attachment, you can see that there is an uploaded profile picture.

However when I click to edit the profile, the picture is missing (editprofile.jpg), I am just wondering what went wrong? Can someone guide me in troubleshooting this problem?


Code: [Select]
<?php
if (isset($_POST['submit'])) {
  
    // Validate and move the uploaded picture file, if necessary
if (!empty($new_picture)) {
      if ((($new_picture_type == 'image/gif') || ($new_picture_type == 'image/jpeg') || ($new_picture_type == 'image/pjpeg') ||
        ($new_picture_type == 'image/png')) && ($new_picture_size > 0) && ($new_picture_size <= CT_MAXFILESIZE)) {
        //0 indicates a success, other values indicate failure
if ($_FILES['file']['error'] == 0) {
          // Move the file to the target upload folder
          $target = CT_UPLOADPATH . basename($new_picture);
          if (move_uploaded_file($_FILES['new_picture']['tmp_name'], $target)) {
            // The new picture file move was successful, now make sure any old picture is deleted
            if (!empty($old_picture) && ($old_picture != $new_picture)) {
              @unlink(CT_UPLOADPATH . $old_picture);
            }
          }
          else {
            // The new picture file move failed, so delete the temporary file and set the error flag
            @unlink($_FILES['new_picture']['tmp_name']);
            $error = true;
            echo '<p class="error">Sorry, there was a problem uploading your picture.</p>';
          }
        }
      }
      else {
        // The new picture file is not valid, so delete the temporary file and set the error flag
        @unlink($_FILES['new_picture']['tmp_name']);
        $error = true;
        echo '<p class="error">Your picture must be a GIF, JPEG, or PNG image file no greater than ' . (CT_MAXFILESIZE / 1024). '</p>';
      }
    }


// Grab the profile data from the POST
    $name = mysqli_real_escape_string($dbc, trim($_POST['name']));
    $nric = mysqli_real_escape_string($dbc, trim($_POST['nric']));
    $gender = mysqli_real_escape_string($dbc, trim($_POST['gender']));
    

    $old_picture = mysqli_real_escape_string($dbc, trim($_POST['old_picture']));
    $new_picture = mysqli_real_escape_string($dbc, trim($_FILES['new_picture']['name']));
    $new_picture_type = $_FILES['new_picture']['type'];
    $new_picture_size = $_FILES['new_picture']['size']; 
    list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);


    $error = false;

    

    // Update the profile data in the database
    if (!$error) {
      if (!empty($name) && !empty($nric) && !empty($gender)) {
        
$query = "UPDATE tutor_profile SET name = '$name', nric = '$nric', gender = '$gender' WHERE tutor_id = '" . $_GET['tutor_id'] . "'";

mysqli_query($dbc, $query)
or die(mysqli_error($dbc));

        // Confirm success with the user
        echo '<p>Your profile has been successfully updated. Would you like to <a href="viewprofile.php?tutor_id=' . $_GET['tutor_id'] . '">view your profile</a>?</p>';

        mysqli_close($dbc);
        exit();
      }
      else {
        echo '<p class="error">You must enter all of the profile data (the picture is optional).</p>';
      }
    }
  } // End of check for form submission
  else {
    // Grab the profile data from the database
    $query = "SELECT name, nric, gender FROM tutor_profile WHERE tutor_id = '" . $_GET['tutor_id'] . "'";
    
$data = mysqli_query($dbc, $query)
or die(mysqli_error($dbc));

// The user row was found so display the user data
if (mysqli_num_rows($data) == 1) {
$row = mysqli_fetch_array($data);

    if ($row != NULL) {
      $name = $row['name'];
      $nric = $row['nric'];
      $gender = $row['gender'];
    }
    else {
      echo '<p class="error">There was a problem accessing your profile.</p>';
    }
  }
  }

  mysqli_close($dbc);
?>

  <form enctype="multipart/form-data" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
    <input type="hidden" name="MAX_FILE_SIZE" value="<?php echo CT_MAXFILESIZE; ?>" />

<ul id="tabSet_ep">
<li><a href="#panel1">Personal Profile</a></li>
<li><a href="#panel2">Qualifications</a></li>
<li><a href="#panel3">Tutor\'s Comments/Commitment</a></li>
<li><a href="#panel4">Tutoring Levels/Subjects</a></li>
</ul>

<!--Personal Profile-->
<div id="panel1">
      <label for="new_picture">Pictu </label>
      <input type="file" id="new_picture" name="new_picture" />
      <?php if (!empty($old_picture)) {
        echo '<img class="profile" src="' . CT_UPLOADPATH . $old_picture . '" alt="Profile Picture" />';
      } ?><br />
  <label for="firstname">First name:</label>
      <input type="text" id="firstname" name="firstname" value="<?php if (!empty($name)) echo $name; ?>" /><br />
      <label for="lastname">Last name:</label>
      <input type="text" id="lastname" name="lastname" value="<?php if (!empty($nric)) echo $nric; ?>" /><br />
      <label for="gender">Gender:</label>
      <select id="gender" name="gender">
        <option value="M" <?php if (!empty($gender) && $gender == 'M') echo 'selected = "selected"'; ?>>Male</option>
        <option value="F" <?php if (!empty($gender) && $gender == 'F') echo 'selected = "selected"'; ?>>Female</option>
      </select><br />
    </div>

    <input type="submit" value="Save Profile" name="submit" />
  </form>

Hello

I use this code to display popup login when user to clicked on a "proceed to checkout" button in the cart page (woocomerce)

<?php
function woocommerce_button_proceed_to_checkout() {
       $checkout_url = WC()->cart->get_checkout_url();
       ?>
       <div <?php echo mf_get_option( 'login_reg_popup' ) ? 'data-toggle="modal" data-target="#login-modal"' : null; ?>>
       <a class="checkout-button button alt wc-forward" href="<?php echo ! mf_get_option( 'login_reg_popup' ) ? wc_get_page_permalink( 'myaccount' ) : '#'; ?>" class="checkout-button button alt wc-forward"><?php _e( 'اقدام به پرداخت', 'woocommerce' ); ?></a>
       <?php
}

 

But after login, I want the user to be redirected to the "checkout" page if it is on the cart page
Otherwise redirect to your current page wherever you are logged in

I found the following code but I couldn't put it in the code above
Thank you for helping me with your kindness

<?php

//redirect to your "current" page
wp_redirect( $_SERVER["HTTP_REFERER"] );


// redirect to the "checkout" page
function wpse_131562_redirect() {
    if (! is_user_logged_in()
        && (is_woocommerce() || is_cart())
    ) {
        // feel free to customize the following line to suit your needs
        wp_redirect(site_url('checkout/'));
        exit;
    }
}
add_action('template_redirect', 'wpse_131562_redirect');

 

Hello,

I'm a new member and i want to say a compliment to the php coders.

Well, in the profile page i want to insert to box.
The first can be modified by the user and by the staff
And the second can be inserted comments only by the staff..
We don't have a profile page to modify the date but, is possible insert only that?
How can i do that?
Naturally the staff comments can be modifed by the staff area.
Thanks

Hello.

Say i want to view another user profile. I click on user name and i see the profile page.
So how can i link user name to his profile?

I have tried linking it to $id (this is where user id is stored in the database), but no luck.

Thank you.

I was looking at various tutorials on the net to help me create an edit profile page for my site but the ones I tried wouldn't work...

What changes would I have to make to this: (register.php)

<?php 
include ('header.php');
?></center>
<div class=content>
<?php  
if(!empty($_POST['username']) && !empty($_POST['password']))  
{  
    $username = mysql_real_escape_string($_POST['username']);  
    $password = md5(mysql_real_escape_string($_POST['password']));  
    $email = mysql_real_escape_string($_POST['email']);
    $location = mysql_real_escape_string($_POST['location']);
    $website = mysql_real_escape_string($_POST['website']);
    $about = mysql_real_escape_string($_POST['about']);
  
     $checkusername = mysql_query("SELECT * FROM users WHERE Username = '".$username."'");  
  
     if(mysql_num_rows($checkusername) == 1)  
     {  
        echo "<b>Error</b>";  
        echo "Sorry, that username is taken. Please go back and try again.</p>";  
     }  
     else  
     {  
        $registerquery = mysql_query("INSERT INTO users (Username, Password, EmailAddress, Location, Website, About) VALUES('".$username."', '".$password."', '".$email."', '".$location."', '".$website."', '".$about."')");  
        if($registerquery)  
        {  
            echo "<b>Success!</b>";  
            echo "Your account was successfully created. Please click<a href=\"index.php\"> here </a>to login.";  
        }  
        else  
        {  
            echo "<b>Error</b>";  
            echo "<p>Sorry, your registration failed. Please go back and try again.</p>";  
        }  
     }  
}  
else  
{  
    ?>  
   <b>Register</b>  
  <br><br>
   Please enter your details below to register.  
  <br><br>
    <form method="post" action="register.php" name="registerform" id="registerform"> 
    <table width=700px border=0 cellspacing=10><tr><td valign=top><table border=0>
<b>Required Information:</b><br><br>
<tr><td>  
        <b>Username:</b>
</td><td>
        <input type="text" name="username" id="username" />
</td></tr><tr><td>
        <b>Password:</b>
</td><td>
        <input type="password" name="password" id="password" />
</td></tr><tr><td>  
        <b>Email Address:</b>
</td><td>
        <input type="text" name="email" id="email" />
</td></tr></table></td><td valign=top>
<table border=0>
<b>Optional Information:</b><br><br>
<tr><td>
     <b>Location:</b>
</td><td>
     <input type="text" name="location" id="location">
</td></tr><tr><td>
     <b>Your Website:</b>
</td><td>
     <input type="text" name="website" id="website">
</tr></td><tr><td valign=top>
     <b>Short About:</b>
</td><td>
     <textarea name="about" id="about" rows="10" cols="20"></textarea>
</td></tr></td>
</table> </td></tr> </table>
        <input type="submit" name="register" id="register" value="Register" class=btn />  
    </form>  
  
    <?php  
}  
?>  </div>
<?php
include ('footer.php'); 
?>

an edit profile page?

I use this as the template because its damn near the same script, just with a few alterations...

I know the obvious things the bit I struggle with is selecting the database then inserting new information?...I keep getting my variables/queries messed up when I rewrite it to create a edit profile page.

Cheers,

Hi,
I have to ask about profile page for each user like facebook and netlog. As u can see in netlog it is like this http://en.netlog.com/ElegantLeo and i have a site http://cyprussaver.com/merchant.php?id=64 and here each merchant profile can be viewed like this but i need to show them like this http://cyprussaver.com/rocksman please guide me what i have to do in order to achieve this result.

Thanks,
Hanan ALi

I've been working on a project and I have pretty much everything set up with a registration page, login and logout. After the user logs in it directs it to index.php. That's where it it ends. How do I start the page where it will display something like Hello, username! and than anything else the user has done in his or her account. Does anyone know a good tutorial? Thanks

This topic has been moved to Third Party PHP Scripts.

http://www.phpfreaks.com/forums/index.php?topic=347558.0

hi all,

i have a profile page which is a form that asks users to enter there personal details such as name, location, mobile number etc and saves this info with a mysql database, however when you return to the edit profile page the fields are blank and i want them to pull the details the user has entered (if any) and display it, so if a user entered there name as Lee, then returned to the edit profile page there name field would show lee instead of being empty.

heres my profiles page code, any help would be great

Code: [Select]
<?PHP

session_start();

if (!(isset($_SESSION['username']) && $_SESSION['username'] != '')) {
header ("Location: login.php");
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!--
Author: Reality Software
Website: http://www.realitysoftware.ca
Note: This is a free template released under the Creative Commons Attribution 3.0 license,
which means you can use it in any way you want provided you keep the link to the author intact.
-->
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title></title>
<link href="style.css" rel="stylesheet" type="text/css" />
<style type="text/css">
.auto-style2 {
font-size: 25px;
}
</style>
</head>
<body>
<div id="container">
<!-- header -->
    <div id="header">
    <div id="logo"><a href="#"><span class="orange">SouthWest</span> LAN's</a></div>
        <div id="menu">
        <ul>
            <li><a href="index.php">home</a></li>
            <li><a href="register.php">Register</a></li>
            <li><a href="account.php">My Account</a></li>
            <li><a href="forum.php">Forums</a></li>
            <li><a href="faq.php">FAQ</a></li>
            </ul>
        </div>
    </div>
    <!--end header -->
    <!-- main -->
    <div id="main">
        <div id="content">
        <div id="head_image">
        <div id="slogan"><strong><span class="auto-style2">Organising LAN Parties in the SouthWest</span></strong><br /></div>
            <div id="under_slogan_text"></div>
        </div>
        <div id="text">
        <h1>Edit Profile</h1>
        <br />
        <form name="register" method="post" action="process_p.php">
<table border="0" width="225" align="center">
    <tr>
        <td width="219" bgcolor="#999999">
            <p align="center"><font color="white"><span style="font-size:12pt;">Please fill out as much as possible</span></font></p>
        </td>
    </tr>
    <tr>
        <td width="219">
            <table border="0" width="282" align="center">
                    <tr>
                        <td width="116"><span style="font-size:10pt;">Username: </span></td>
                        <td width="156"><?php echo $_SESSION['username']; ?></td>
                    </tr>
                    <tr>
                        <td width="116"><span style="font-size:10pt;">Email: </span></td>
                        <td width="156"><input type="text" name="email" maxlength="30"></td>
                    </tr>
                <tr>
                    <td width="116"><span style="font-size:10pt;">Real Name: </span></td>
                    <td width="156"><input type="text" name="real_name"></td>
                </tr>
                <tr>
                    <td width="116"><span style="font-size:10pt;">Location: </span></td>
                    <td width="156"><input type="text" name="location"></td>
                </tr>
                <tr>
                    <td width="116"><span style="font-size:10pt;">Mobile Number: </span></td>
                    <td width="156"><input type="text" name="mobile_number"></td>
                </tr>
                <tr>
                    <td width="116"><span style="font-size:10pt;">Instant Messager: </span></td>
                    <td width="156"><input type="text" name="instant_messaging"></td>
                </tr>
                <tr>
                    <td width="116">&nbsp;</td>
                        <td width="156">
                            <p align="right"><input type="submit" name="update" value="Update Profile"></p>
                        </td>
                </tr>
            </table>

I'm trying to set up a very simple (WIP) members page that you can click registered users to see their profile page that will display basic information.

I'm having trouble with the sessions and retrieving this info from my database. I'm very new to this so it's all pretty amateur.

I've been looking at this code for several hours trying to fix things but I start to make some progress, then change stuff, and go backwards. I had a members page that displayed the registered users in my database, but after a while of altering to try to get the profiles to work, I messed it up :mad:. I have basic login and register pages.

I need some seperate eyes to take a look. Any help is so much appreciated. Thanks!


members.php
Code: [Select]
<?php
session_start();
require 'mysql-connect.php';
$auser=$_SESSION['user'];


if(isset($auser)){
$Members = mysql_query("SELECT * FROM user WHERE username='$username'") or die(mysql_error());
$numRowsMembers = mysql_num_rows($Members);

?>

<table border="1">

<?php
for($count = 1; $count <= $numRowsMembers; $count++)
{
    $name = mysql_fetch_array($Members);
    ?>
   
    <tr>
    <?php
    echo '<td><a href="member_profile.php?username=' . $name['username'] . '">' . $name['username'] . '</a></td>';
}
}
   ?>
 
    </tr>
</table>

member_profile.php
Code: [Select]
<?php
session_start();
require 'mysql-connect.php';
$auser=$_SESSION['user'];

if(isset($auser)){

$username = $_GET['username'];
$user = mysql_query("SELECT * FROM user WHERE username = '$username'");
echo $user;
$user=mysql_fetch_assoc($user);


echo "<h1>User Info</h1>";

echo "<b>Username:".$user['username']."<br>";

echo "<br>";
  echo '<form name="backlistfrm" method="post" action="members.php">';
echo '<input type="submit" value="Back to The List">';
echo '</form>';
echo "<br>";
}
?>

my login handler
Code: [Select]
<?php
include 'mysql-connect.php';

$username = $_POST['user'];
$password = $_POST['pass'];
$query1 = mysql_query("SELECT * FROM user WHERE username='$username'");
$result = mysql_num_rows($query1);
if($result == 0)
{
echo '<h1>Error!</h1>The username you specified does not exist!';
}
else
{

$checkuser = mysql_query("SELECT * FROM user WHERE username='$username'");

                        $row = mysql_fetch_array($checkuser);
                                                        $password2 = $row['password'];
                                                        //$status = $row['status'];
                                if ($password == $password2)
                                        {
                                 echo "Hi $username.";
 include("index.php"); 
                                        }
                                else
                                        {
                                        echo '<h1>Error!</h1>The username and password combination you entered does not match the ones we have in the database.';
                                        }

}
?>
mysql-connect.php
Code: [Select]
<?php

$host = "localhost";
    $username = "root";
    $password = "";
    $database = "ug54";
    $link = mysql_connect($host, $username, $password);//Connects to database with host, username, and password
    $select = mysql_select_db($database);
?>
and my simple database
Code: [Select]
CREATE TABLE IF NOT EXISTS `user` (
  `id` int(4) unsigned NOT NULL AUTO_INCREMENT,
  `username` varchar(32) NOT NULL,
  `password` varchar(32) NOT NULL,
  `firstname` varchar(20) NOT NULL,
  `lastname` varchar(20) NOT NULL,
  `email` varchar(30) NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=7 ;

--
-- Dumping data for table `user`
--

INSERT INTO `user` (`id`, `username`, `password`, `firstname`, `lastname`, `email`) VALUES
(1, '', '', '', '', '0'),
(2, 'abc', '123', '', '', '0'),
(3, 'a', 'b', 'c', 'd', '0'),
(4, 'hfg', 'rgfdg', 'gdfg', 'dfgdf', '0'),
(5, '999', '999', '999', '999', '999');

Hi, I have a "user profile" page and it has a profile image upload form. I have it so that the old profile  image is deleted, and the new image is uploaded and the new image is echoed out using the name of the new file from the database. The problem is, when I click submit to add the new image, the old image still stays there and the new image does not show up. Only when I manually click refresh on my browser does the new image show up.

That is going to be bad for my users. Please if anyone can help, I'd greatly appreciate it.  Below is the code I am using to delete the old image, and code to upload the image as well, when the photo upload form is used.

Code: [Select]
if(isset($_POST['photoUpload']))

{

if(file_exists("images/".$currentUser.".jpg")){
    unlink("images/".$currentUser.".jpg");
    clearstatcache();

}
//reads the name of the file the user submitted for uploading
$image=$_FILES['image']['name'];
//if it is not empty
if ($image)
{
//get the original name of the file from the clients machine
$filename = stripslashes($_FILES['image']['name']);
//get the extension of the file in a lower case format
$extension = getExtension($filename);
$extension = strtolower($extension);
//if it is not a known extension, we will suppose it is an error and will not upload the file,
//otherwise we will do more tests
if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif"))
{
//print error message
echo '<h1>Unknown extension!</h1>';
$errors=1;
}
}
//end if here
//was else here

//get the size of the image in bytes
//$_FILES['image']['tmp_name'] is the temporary filename of the file
//in which the uploaded file was stored on the server
$size=filesize($_FILES['image']['tmp_name']);

//compare the size with the maxim size we defined and print error if bigger
if ($size > MAX_SIZE*1024)
{
echo '<h1>You have exceeded the size limit!</h1>';
$errors=1;
}

//we will give an unique name, for example the time in unix time format
$image_name= $currentUser .'.'.$extension;
//$image_name=time().'.'.$extension;
//the new name will be containing the full path where will be stored (images folder)
$newname=$image_name;
//"images/".
// Connects to your Database
mysql_connect("host", "user", "pass") or die(mysql_error());
mysql_select_db("database") or die(mysql_error()) ;



//we verify if the image has been uploaded, and print error instead
$copied = copy($_FILES['image']['tmp_name'], "images/".$newname);
// update the photo name in the database
$result = mysql_query("UPDATE users SET profilePhoto='$newname'  WHERE                                                username='$currentUser'")
or die(mysql_error()); 

if (!$copied)
{
echo '<h1>Copy unsuccessful!</h1>';
$errors=1;
}
else{
$dir="images/";

echo "<p>Profile Picture Change Successful!</p>";

echo "<img src='{$dir}{$newname}' alt='{$newname}' height='200' width='200' />";
echo "<p></p>";

}

}