PHP - Need Help Defining Query

Hi,
I my first problem is hashing passwords to md5.
My second problem is defining session on value from db.
There is my code but not working.
Code: [Select]
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

 
$username=$_POST['username'];
$password=$_POST['password'];
$hash = md5($password);


$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$sql="SELECT * FROM $tbl_name WHERE where username = '$username' and password = '$hash'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if($count==1){
$sql2="SELECT access FROM $tbl_name WHERE username='$username' and password='$password'";
$access=mysql_query("$sql2");
session_register("username");
session_register("password");
session_register("access");
$_SESSION["access"]=$access;
header("location:success.php");
}
else {
echo "Invalid Username or Password";Thanks for any answers.

I am trying to define a session variable where I can save it and use it as the user surfs the site.

I need the variable saved as $amano so I can use it in my select from/where statement and to echo within a table.

This is a test trying to capture and define the variable and works, but I can't get the variable $amano into the session. If I am then I don't know how to display it.


<?php>
session_start(); 
$id = $_POST['amano'];
$_SESSION['amano'] = '$amano';     
             
echo "Pageviews = ". $_SESSION['amano'];  // My effort to see what is happening.
echo "<br />";
echo "AMA # = ". $_POST['amano']; // I have it just like I want it here.
echo "<br />";
echo "Sessions AMA # = ".$_SESSION['amano']; 
?>

Is it possible to define a variable's type at the start of your code?

I believe you can "cast" a variable, but can I do something like this...

Code: [Select]
name     string;
age        integer;
gender   string;
children  array;
single:    boolean;

I know some people say PHP is better suited for the web because it is loosely-typed, but I'm anal-retentive and like my structure!!   



TomTees

// does the product exist ?
$sql = "SELECT pd_id, pd_qty
        FROM tbl_product
WHERE pd_id = $productId";
$result = dbQuery($sql);

if (dbNumRows($result) != 1) {
// the product doesn't exist
header('Location: cart.php');
} else {
// how many of this product we
// have in stock
$row = dbFetchAssoc($result);
$currentStock = $row['pd_qty'];

if ($currentStock == 0) {
// we no longer have this product in stock
// show the error message
setError('The product you requested is no longer in stock');
header('Location: cart.php');
exit;
}

}

// current session id
$sid = session_id();
session_register("size");
$size = $_SESSION['size'];
// check if the product is already
// in cart table for this session
$sql = "SELECT pd_id
        FROM tbl_cart
WHERE pd_id = $productId AND ct_session_id = '$sid'";
$result = dbQuery($sql);

if (dbNumRows($result) == 0) {
// put the product in cart table
$sql = "INSERT INTO tbl_cart (pd_id, ct_qty, size, ct_session_id, ct_date) " .
"VALUES ($productId, 1, '$size', '$sid', NOW())";
$result = dbQuery($sql);
} else {
// update product quantity in cart table
$sql = "UPDATE tbl_cart 
        SET ct_qty = ct_qty + 1
WHERE ct_session_id = '$sid' AND pd_id = $productId";

$result = dbQuery($sql);
}



This is just a piece of my cartfunctions.php (which is an include() once you add an item to the cart).
I've been trouble shooting this all day and finally got it to stop giving me error messages. Im trying to allow the user to pick a size between 4 options, after that it is added to the cart and I can easily find out what size shirt the customer wants before I ship it. but now it wont update the $size variable to the DB. Am I defining this wrong or maybe my whole approach is messed up? If you would like to see the setup you can go to rbcrime.com/newshop/newshop/ .

I have a search code for my site and I want to narrow the scope of the search with a drop down that will allow users to pick a state, ( the sql table includes a state field ) or set the script so that i will only search for results for a particular state.
In the sql select I have tried every way of using WHERE venue_state='NY' but it will not work.
I would really rather allow the users to select a state from a dropdown and then enter the search term - city, zip or venue name.
Thank you for looking

Code: [Select]
<?php
include('config.db.php');
$find  = trim($_GET['find']);
$field = $_GET['field'];


if($find && $field) { // we have search form submitted
   // check for values to prevent sql injection
   $valid_fields = array("venue_zip", "venue_city" , "show_name");
   if(!in_array($field, $valid_fields)) die("Error: Invalid field!");
   
   $rpp = 10; // results per page
   $adjacents = 4;
   
   $page = intval($_GET["page"]);
   if(!$page) $page = 1;
   
   $reload = $_SERVER['PHP_SELF'] . "?find=" . urlencode($find) . "&amp;field=" . urlencode($field);
   
   echo "<h4>Search Results for $find</h4>\n";
   
   
   $find = addslashes($find);
     $result = mysql_query("SELECT *, DATE_FORMAT(`start_date`, '%b %e, %Y') AS s_date FROM craft_shows WHERE $field LIKE '%$find%'");
   if(mysql_num_rows($result) == 0) {
      echo "<p>0 matches found.</p>";
   } else {
      echo "<table class='table7' cellpadding='2'>";
      echo "<tr><td>&nbsp;</td><td><strong>Date</strong></td><td><strong>Show Name</strong></td><td><strong>City</strong></td><td><strong>Attendance</strong></td></tr>";
      echo "<tr><td colspan='5'><hr class=\"hr2\"></td></tr>";
      
      // count total number of appropriate listings:
       $tcount = mysql_num_rows($result);
      
      // count number of pages:
      $tpages = ($tcount) ? ceil($tcount/$rpp) : 1; // total pages, last page number
      
      $count = 0;
      $i = ($page-1)*$rpp;
      while(($count<$rpp) && ($i<$tcount)) {
         mysql_data_seek($result,$i);
         $row = mysql_fetch_array($result);
         $id = $row['id'];
         echo "<tr><td>";
         echo "<a href=\"/show_submits/show_detail.php?id=$id\">Details</a>";
         echo "</td><td>";
         echo $row['s_date'];
         echo "</td><td>";
         echo $row['show_name'];
         echo "</td><td>";
         echo $row['venue_city'];
         echo "</td><td>";
         echo $row['venue_state'];
         echo "</td></tr>";
echo "<tr><td colspan='5'><hr class=\"hr3\"></td></tr>";
         $i++;
         $count++;
      }

      echo "</table><br>";
      
function paginate_one($reload, $page, $tpages) {
   
   $firstlabel = "First";
   $prevlabel  = "Prev";
   $nextlabel  = "Next";
   $lastlabel  = "Last";
   
   $out = "<div class=\"pagin\">\n";
   
   // first
   if($page>1) {
      $out.= "<a href=\"" . $reload . "\">" . $firstlabel . "</a>\n";
   }
   else {
      $out.= "<span>" . $firstlabel . "</span>\n";
   }
   
   // previous
   if($page==1) {
      $out.= "<span>" . $prevlabel . "</span>\n";
   }
   elseif($page==2) {
      $out.= "<a href=\"" . $reload . "\">" . $prevlabel . "</a>\n";
   }
   else {
      $out.= "<a href=\"" . $reload . "&amp;page=" . ($page-1) . "\">" . $prevlabel . "</a>\n";
   }
   
   // current
   $out.= "<span class=\"current\">Page " . $page . " of " . $tpages . "</span>\n";
   
   // next
   if($page<$tpages) {
      $out.= "<a href=\"" . $reload . "&amp;page=" .($page+1) . "\">" . $nextlabel . "</a>\n";
   }
   else {
      $out.= "<span>" . $nextlabel . "</span>\n";
   }
   
   // last
   if($page<$tpages) {
      $out.= "<a href=\"" . $reload . "&amp;page=" . $tpages . "\">" . $lastlabel . "</a>\n";
   }
   else {
      $out.= "<span>" . $lastlabel . "</span>\n";
   }
   
   $out.= "</div>";
   
   return $out;
}
   echo paginate_one($reload, $page, $tpages, $adjacents);
   }
}
?>

Hey Guys. I came across this code example below assigns array values to a private property. However the private property is not defined as an array. It was a bit confusing to me because I always thought you need to define  the property as an array first. If someone can please help me understand this concept I would really appreciate it.   Below is the code.

<?php 


class Product {

	public $name; 
	public $price; 

	function __construct($name, $price){
		$this->name = $name; 
		$this->price = $price;

	}


}


class ProcessSale {
	private $callbacks; // This holds an array but is not defined as an array?


	function registerCallback($callback) {
		if(!is_callable($callback)) {
			throw new Exception("Callback Is Not Callable");
			
		}
		$this->callbacks[] = $callback;
	}


	function sale($product) {
		print "{$product->name}: processing \n";
		foreach ($this->callbacks as $callback) {
			call_user_func($callback, $product);
		}
	}
}


$logger = function($product) {
	print "logging ({$product->name})\n";
};


$processor = new ProcessSale();
$processor->registerCallback($logger);

$processor->sale(new Product("shoes", 6));
echo  "\n";
$processor->sale(new Product("coffee", 6));

Hello,

I'm using the below code to determine whether fields have been left blank, however, it only a standard sentence, i'd like to customise it, like: "Email has been left blank" or The email and message has been left blank. My best preference would be to bullet point each line. IE:

Email has been left blank. Message has been left blank.

$name = $_POST['name'];
$visitor_email = $_POST['email'];
        $user_message = $_POST['message'];
if(empty($name)|| empty($visitor_email)|| empty($user_message))
{
$errors .= "\n Some of the above fields have not been filled in.<br><br> ";
}


Many thanks.

i am building a reservation system
i have special date blocks which have different price tags

for example reservation for
01/12/2011-07/12/2011

where
03/12/2011-06/12/2011 prices +15%

how would i define the range for special dates?

Have a ton of pop-up javascript links in my page. To tidy up the code, I have decided to declare all links at top of the page to keep them together and simply use the variable within the "a" brackets. Let me show you:

Code: [Select]
<?
$brand_edit = 'javascript:void(0)"onclick="window.open('/admin/form.php?db=outlet&amp;tbl=brands&amp;auto_increment=<? echo $auto_increment; ?>&amp;action=edtamp;step=1','none','width=750,height=250,menubar=no,status=no,resizable=no,location=no,toolbar=no,scrollbars=yes,left=50,top=50,titlebar=no')'; ?>

<span class="float" style="width: 100px;"><a href="<? echo $brand_edit; ?>"><? echo $auto_increment; ?></a></span>

However, something things to go wrong as I'm getting an "Parse error: syntax error, unexpected '=' in ... on line 12"

Where am I going wrong with my syntax?

echo "bitches" . "<br />";

class classname

{

function _contruct($param)
{
echo "Contructor called with parameter ".$param;
}

}

$a = new classname("First");
$b = new classname("Second");



I'm trying to run this code but it's not giving me any output.

Output should be very simple, e.g, Constructor called with parameter First.

Please help.

$poststart = "<!-- Begin -->"; $poststop = "<!-- End -->";   $parsedpost1 = explode($poststart, $contenu); $parsedpost2 = explode($poststop, $parsedpost1[1]); $contenu = $parsedpost1[0] . $poststart . $newpost . $poststop . $parsedpost2[1];   The above code will set 2 markers and replace whatever inside by $newpost, which is defined elsewhere in the page. But what if $newpost is so long that I'd be more comfortable storing it in a separate file?    How would I go about calling said file on that last line? (I'm referring to the specific syntax.)   Thx

Hello all,   Based on the suggestion of you wonderful folks here, I went away for a few days (to learn about PDO and Prepared Statements) in order to replace the MySQLi commands in my code. That's gone pretty well thus far...with me having learnt and successfully replaced most of my "bad" code with elegant, SQL-Injection-proof code (or so I hope).   The one-and-only problem I'm having (for now at least) is that I'm having trouble understanding how to execute an UPDATE query within the resultset of a SELECT query (using PDO and prepared statements, of course).   Let me explain (my scenario), and since a picture speaks a thousand words I've also inlcuded a screenshot to show you guys my setup:   In my table I have two columns (which are essentially flags i.e. Y/N), one for "items alreay purchased" and the other for "items to be purchased later". The first flag, if/when set ON (Y) will highlight row(s) in red...and the second flag will highlight row(s) in blue (when set ON).   I initially had four buttons, two each for setting the flags/columns to "Y", and another two to reverse the columns/flags to "N". That was when I had my delete functionality as a separate operation on a separate tab/list item, and that was fine.   Now that I've realized I can include both operations (update and delete) on just the one tab, I've also figured it would be better to pare down those four buttons (into just two), and set them up as a toggle feature i.e. if the value is currently "Y" then the button will set it to "N", and vice versa.   So, looking at my attached picture, if a person selects (using the checkboxes) the first four rows and clicks the first button (labeled "Toggle selected items as Purchased/Not Purchased") then the following must happen:   1. The purchased_flag for rows # 2 and 4 must be switched OFF (set to N)...so they will no longer be highlighted in red. 2. The purchased_flag for row # 3 must be switched ON (set to Y)...so that row will now be highlighted in red. 3. Nothing must be done to rows # 1 and 5 since: a) row 5 was not selected/checked to begin with, and b) row # 1 has its purchase_later_flag set ON (to Y), so it must be skipped over.   Looking at my code below, I'm guessing (and here's where I need the help) that there's something wrong in the code within the section that says "/*** loop through the results/collection of checked items ***/". I've probably made it more complex than it should be, and that's due to the fact that I have no idea what I'm doing (or rather, how I should be doing it), and this has driven me insane for the last 2 days...which prompted me to "throw in the towel" and seek the help of you very helpful and intellegent folks. BTW, I am a newbie at this, so if I could be provided the exact code, that would be most wonderful, and much highly appreciated.   Thanks to you folks, I'm feeling real good (with a great sense of achievement) after having come here and got the great advice to learn PDO and prepared statements.   Just this one nasty little hurdle is stopping me from getting to "end-of-job" on my very first WebApp. BTW, sorry about the long post...this is the best/only way I could clearly explaing my situation.   Cheers guys!

case "update-delete":
	if(isset($_POST['highlight-purchased'])) 
		{
			// ****** Setup customized query to obtain only items that are checked ******
			$sql = "SELECT * FROM shoplist WHERE";
					for($i=0; $i < count($_POST['checkboxes']); $i++)
						{
							$sql=$sql . " idnumber=" . $_POST['checkboxes'][$i] . " or";
						}
					$sql= rtrim($sql, "or");
											
			$statement = $conn->prepare($sql);
			$statement->execute();
																						
			// *** fetch results for all checked items (1st query) *** //
			$result = $statement->fetchAll();

			$statement->closeCursor();
											
			// Setup query that will change the purchased flag to "N", if it's currently set to "Y"
			$sqlSetToN = "UPDATE shoplist SET purchased = 'N' WHERE purchased = 'Y'";
											
			// Setup query that will change the purchased flag to "Y", if it's currently set to "N", "", or NULL
			$sqlSetToY = "UPDATE shoplist SET purchased = 'Y' WHERE purchased = 'N' OR purchased = '' OR purchased IS NULL";

			$statementSetToN = $conn->prepare($sqlSetToN);
			$statementSetToY = $conn->prepare($sqlSetToY);
											
			/*** loop through the results/collection of checked items ***/
			foreach($result as $row)
				{
					if ($row["purchased"] != "Y")
						{
							// *** fetch one row at a time pertaining to the 2nd query *** //
							$resultSetToY = $statementSetToY->fetch();
															
							foreach($resultSetToY as $row)
								{															
									$statementSetToY->execute();																
								}
						}
					else
						{
							// *** fetch one row at a time pertaining to the 2nd query *** //
							$resultSetToN = $statementSetToN->fetch();
															
							foreach($resultSetToN as $row)
								{															
									$statementSetToN->execute();																
								}
						}
				}
				break;
		}

 CRUD Queston.png   20.68KB   0 downloads    

Here is my code:
// Start MySQL Query for Records
$query = "SELECT codes_update_no_join_1b" .
"SET orig_code_1 = new_code_1,
       orig_code_2 = new_code_2" .
"WHERE concat(orig_code_1, orig_code_2) = concat(old_code_1, old_code_2)";
$results = mysql_query($query) or die(mysql_error());
// End MySQL Query for Records


This query runs perfectly fine when run direct as SQL in phpMyAdmin, but throws this error when running in my script??? Why is this???

Code: [Select]
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '= new_code_1, orig_code_2 = new_code_2WHERE concat(orig_code_1, orig_c' at line 1

If you also have any feedback on my code, please do tell me. I wish to improve my coding base.

Basically when you fill out the register form, it will check for data, then execute the insert query. But for some reason, the query will NOT insert into the database. In the following code below, I left out the field ID. Doesn't work with it anyways, and I'm not sure it makes a difference.

Code:

  Code: [Select]
mysql_query("INSERT INTO servers (username, password, name, type, description, ip, votes, beta) VALUES ($username, $password, $name, $server_type, $description, $ip, 0, 1)");
Full code:

Code: [Select]
<?php
include_once("includes/config.php");
 
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title><? $title; ?></title>
<meta http-equiv="Content-Language" content="English" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<link rel="stylesheet" type="text/css" href="style.css" media="screen" />
</head>
<body>
 
<div id="wrap">
 
<div id="header">
<h1><? $title; ?></h1>
<h2><? $description; ?></h2>
</div>
 
<? include_once("includes/navigation.php"); ?>
 
<div id="content">
<div id="right">
<h2>Create</h2>
<div id="artlicles">
<?php
 
if(!$_SESSION['user'])
{
 
        $username = mysql_real_escape_string($_POST['username']);
        $password = mysql_real_escape_string($_POST['password']);
        $name = mysql_real_escape_string($_POST['name']);
        $server_type = mysql_real_escape_string($_POST['type']);
        $description = mysql_real_escape_string($_POST['description']);
 
        if(!$username || !$password || !$server_type || !$description || !$name)
        {

        echo "Note: Descriptions allow HTML. Any abuse of this will result in an IP and account ban. No warnings!<br/>All forms are required to be filled out.<br><form action='create.php' method='POST'><table><tr><td>Username</td><td><input type='text' name='username'></td></tr><tr><td>Password</td><td><input type='password' name='password'></td></tr>";
        echo "<tr><td>Sever Name</td><td><input type='text' name='name' maxlength='35'></td></tr><tr><td>Type of Server</td><td><select name='type'>
       
        <option value='Any'>Any</option>
        <option value='PvP'>PvP</option>
        <option value='Creative'>Creative</option>
        <option value='Survival'>Survival</option>
        <option value='Roleplay'>RolePlay</option>
       
        </select></td></tr>
       
        <tr><td>Description</td><td><textarea maxlength='1500' rows='18' cols='40' name='description'></textarea></td></tr>";
        echo "<tr><td>Submit</td><td><input type='submit'></td></tr></table></form>";
        }
        elseif(strlen($password) < 8)
        {
        echo "Password needs to be higher than 8 characters!";
        }
        elseif(strlen($username) > 13)
        {
                echo "Username can't be greater than 13 characters!";
        }
        else
        {
                $check1 = mysql_query("SELECT username,name FROM servers WHERE username = '$username' OR name = '$name' LIMIT 1");
               
                if(mysql_num_rows($check1) < 0)
                {
                        echo "Sorry, there is already an account with this username and/or server name!";
                }
                else
                {
                        $ip = $_SERVER['REMOTE_ADDR'];

                        mysql_query("INSERT INTO servers (username, password, name, type, description, ip, votes, beta) VALUES ($username, $password, $name, $server_type, $description, $ip, 0, 1)");
                        echo "Server has been succesfully created!";
                }
        }
       
}
else
{
        echo "You are currently logged in!";
}
 
?>
</div>
</div>
 
<div style="clear: both;"> </div>
</div>
 
<div id="footer">
<a href="http://www.templatesold.com/" target="_blank">Website Templates</a> by <a href="http://www.free-css-templates.com/" target="_blank">Free CSS Templates</a> - Site Copyright MCTop
</div>
</div>
 
</body>
</html>

I was just wondering if it's possible to run a query on data that has been returned from a previous query?  For example, if I do

Code: [Select]
$sql = 'My query';
$rs = mysql_query($sql, $mysql_conn);

Is it then possible to run a second query on this data such as

Code: [Select]
$sql = 'My query';
$secondrs = mysql_query($sql, $rs, $mysql_conn);

Thanks for any help