PHP - I Need Some Help With This Script, Can't Seem To Find The Problem.

Hi,

This piece of code below stops site loading, can't find the problem 
Please help. If i remove the whole of this the site loads but does not function correct.

Code: [Select]
if ( $_GET[sssess] )
{
    session_id( $_GET[sssess] );
}
session_start( );
header( "cache-control: private" );
if ( isset( $_GET[redeempoints] ) && $_GET[redeempoints] == "Y" )
{
    $_SESSION[redeemer] = "Y";
}
if ( $_POST[purchaseorder] )
{
    $_SESSION[po] = "{$_POST['purchaseorder']}";
}
if ( !$_SESSION[loginemail] )
{
    $_SESSION[loginemail] = "noemail@site";
}
if ( !$_SESSION[adminemail] )
{
    $_SESSION[adminemail] = "noadmin@site";
}
if ( $_POST[discode] )
{
    $_SESSION[discode] = trim( "{$_POST['discode']}" );
}
$auth_ok_check = md5( "{$_SESSION['loginemail']}.{$hash}" );
$admin_ok_check = md5( "{$_SESSION['adminemail']}.{$hash}" );
if ( isset( $_GET['oidref'] ) )
{
    $GLOBALS['_GET']['oidref'] = mysql_real_escape_string( $_GET['oidref'] );
    $sql = "SELECT o_id FROM order_list WHERE ref='".$_GET['oidref']."' AND unh='{$_GET['oidref']}'";
    if ( !( $result = @mysql_query( $sql, $connection ) ) )
    {
        exit( "**COULD NOT GET COPYRIGHT KEYS**" );
    }
    if ( $row = mysql_fetch_array( $result ) )
    {
        $_SESSION['unh'] = $_GET['oidref'];
        header( "location: ".$sshopurl."orderdetails_os.php?o_id={$row['o_id']}" );
        exit( );
    }
    if ( $_SESSION['auth_ok'] == $auth_ok_check )
    {
        header( "location: ".$sshopurl."secure/orders.php" );
        exit( );
    }
    header( "location: ".$sshopurl."secure/login.php?next=orders.php" );
    exit( );
}
if ( preg_match( "/secure/", "{$_SERVER['PHP_SELF']}" ) && !preg_match( "/doqreg.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/qreg.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/voicepaycallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/secpaysecpagecallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/vps_handle_protx_response.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/protx/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/protxformcallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/protxcallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/worldpaycallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/securetradingcallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/barclayscpicallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/paypalcallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/moneybookerscallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/nochexcallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/offlinecallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/doregister.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/register.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/doprereg.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/login.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/dologin.php/", "{$_SERVER['PHP_SELF']}" ) )
{
    if ( $auth_ok_check != $_SESSION[auth_ok] )
    {
        header( "Location: ".$sshopurl."secure/login.php?next={$_GET['next']}&shk&p={$_SERVER['PHP_SELF']}" );
        exit( );
    }
    if ( preg_match( "/secure/", "{$_SERVER['PHP_SELF']}" ) )
    {
        $isaccount = "1";
    }
}
if ( preg_match( "/".$adminDir."/", "{$_SERVER['PHP_SELF']}" ) && !preg_match( "/adlogin.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/forgetful.php/", "{$_SERVER['PHP_SELF']}" ) )
{
    if ( $admin_ok_check != $_SESSION[admin_ok] )
    {
        header( "Location: ".$adminurl."adlogin.php" );
        exit( );
    }
    if ( preg_match( "/".$adminDir."/", "{$_SERVER['PHP_SELF']}" ) )
    {
        $isadmin = "1";
    }
}
$noadirs = count( $admin_dirs );
$i = 0;
for ( ; $i <= $noadirs; ++$i )
{
    if ( !preg_match( "/admin\\/".$admin_dirs[$i]."/", "{$_SERVER['PHP_SELF']}" ) && preg_match( "/".$admin_dirs[$i]."/", "{$_SESSION['admin_type']}" ) )
    {
        continue;
    }
    header( "Location: ".$adminurl."perms.php?noperm={$admin_dirs[$i]}" );
    exit( );
}
if ( !$_SESSION[shopper_type] )
{
    $_SESSION[shopper_type] = "1";
}
if ( $_GET[setcurrency] == 1 )
{
    if ( $_GET[new_currency_id] )
    {
        $GLOBALS['_POST'][new_currency_id] = $_GET[new_currency_id];
    }
    $_SESSION['currency_id'] = $_POST[new_currency_id];
}
if ( $_GET[clearptid] == Y )
{
    session_unregister( "ptid" );
}
if ( $_GET[selectpostage] == 1 )
{
    if ( $_POST[selptid] == Free || $_POST[selptid] == free )
    {
        session_unregister( "ptid" );
    }
    else if ( isset( $_POST[selptid] ) )
    {
        $_SESSION['ptid'] = $_POST[selptid];
    }
    else
    {
        session_unregister( "ptid" );
    }
    $GLOBALS['_POST'][selptid] = mysql_real_escape_string( $_POST[selptid] );
    $sql1 = "UPDATE basket SET ptid='".$_POST['selptid']."' WHERE session_id='".session_id( )."'";
    if ( !( $result1 = @mysql_query( $sql1, $connection ) ) )
    {
        exit( "Couldn't execute request 1" );
    }
}

I can not find the problem with this script I wrote.

I am trying to show a web page provided that the $_GET['reg'] is registered by the user.

I am trying to check that the $_GET['reg'] is registered by the user before the page with specific details is shown.

For some reason even if the email address equals the email address in the DB the output still shows:          
<?php   echo "I am sorry but this '$_GET[reg]' does not seem to be registered by you!"; ?>

Can anyone see where I am going wrong - there is more than one 'reg' for each email address in the DB.

Thanks



<?php

$email = $_POST['email'];

$sql = "SELECT reg FROM sales WHERE email='$email'";
$result = mysqli_query($cxn,$sql)
or die ("Couldn't execute query");
$data = array(); //This way we can hold multiple results
    $i = 0; //The index of the array to add the result to

while($row = mysqli_fetch_assoc($result))
       {
if ($row['reg'] == $_GET['reg'] )
{ //Why use two if statements?
$data[$i] = $row['reg'];
$i++; //increase the array index for the next while loop
}
else 
{
echo "I am sorry but this '$_GET[reg]' does not seem to be registered by you!";
exit();
}
} 

// THIS IS WHERE THE PAGE CONTENT IS ......................
?>

When clicking on the link "groups", there is no problem printing out the first level subgroups. But when clicking on any of the subgroup, the second level subgroups are not being displayed.

I have or die(mysql_error()); after some queries but I can not see what is the error.

It always gives the same message:

Quote

No Products Found.
Sorry, but there are no products in this section at the moment. The products are constantly being updated, however. Please try again later or contact us.


How would I find out which part of the code fails?

The code:

<?php
include 'scrptz/functions.php';

// Page vars
$thisPage=$getVars["page"];
if($thisPage<1)$thisPage=1;
$firstGroup=($thisPage*16)-16;

// Get group details and stick them into an array
$qMain="SELECT * FROM PGroups WHERE PG = '".$getVars["prodg"]."'";
$result=mysql_query($qMain)
or die(mysql_error());
$groupDetails=mysql_fetch_array($result);

// Get all sub groups in current product group
$qMain="SELECT * FROM SubG WHERE ProdG = '".$getVars["prodg"]."'";
$result=mysql_query($qMain)
or die(mysql_error());

// Stick sub groups in a 2D associative array
$j=0;
while ($row=mysql_fetch_array($result))
{
foreach($row as $i=>$data)$array[$j][$i]=$data;
$j++;
}

// Calculate vars for navigation
$totalGroups=$j;
$totalPages=ceil($totalGroups/16);

// Set page title (for bookmark)
$pageTitle=$groupDetails["GPname"];

// Set top title
if($totalGroups>0){$topTitle="VIEW PRODUCTS";}else{$topTitle="ERROR";}
?>
<html>
<head>
<title>Lock-Tech&reg; Hi-Specification Architectural Hardware</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="scrptz/styles.css" rel="stylesheet" type="text/css">
<script language="JavaScript" type="text/javascript">var theID="<?php echo $getVars['uid']; ?>";</script>
<script language="JavaScript" src="scrptz/content.js" type="text/javascript"></script>
<script language="JavaScript" src="scrptz/menu.js" type="text/javascript"></script>
<script language="JavaScript" src="scrptz/scripts.js" type="text/javascript"></script>
</head>
<body background="imgz/bg.gif" leftmargin="0" topmargin="0" marginheight="0" marginwidth="0"<?php echo $notify ?>>
<?php include("top.php"); ?>
<table width="952" height="509" border="0" cellpadding="0" cellspacing="0" class="maintext">
<?php if($sessions['accCode']){?><form action="http://www.lock-tech.co.uk/index.php" method="post" name="logout" target="_parent"><input name="account" type="hidden" value="<?php echo $sessions['accCode']; ?>"><input name="killSession" type="hidden" value="<?php echo $getVars['uid']; ?>"></form><?php }?>
  <tr> 
    <td width="1" rowspan="5" bgcolor="#000000"></td>
    <td height="21" background="imgz/topbar.gif" bgcolor="#14359E">&nbsp;</td>
    <td height="21" colspan="5" valign="middle" background="imgz/topbar.gif" bgcolor="#14359E" class="mainyellow"><?php include("scrptz/dd_menu.php"); ?></td>
    <td height="21" background="imgz/topbar.gif" bgcolor="#14359E">&nbsp;</td>
    <td width="1" rowspan="5" bgcolor="#000000"></td>
  </tr>
  <tr> 
    <td width="5" rowspan="3">&nbsp;</td>
    <td width="306" height="30" valign="bottom" class="title2"><?php echo $groupDetails["GPname"] ?></td>
    <td width="11" rowspan="3"><img src="imgz/maindiv.gif" width="11" height="466"></td>
    <td width="306" height="30" align="center" valign="bottom" class="title2"><?php if($totalGroups>0){?><a href="g_view.php?pgroup=<?php echo $groupDetails["PG"] ?>&amp;uid=<?php echo $getVars['uid']; ?>" class="link4" onmouseover="window.status='View List of all Products in <?php echo $groupDetails["GPname"] ?>'; return true">VIEW ALL</a> | <a href="g_browse.php?pgroup=<?php echo $groupDetails["PG"] ?>&amp;uid=<?php echo $getVars['uid']; ?>" class="link4" onmouseover="window.status='Browse all Products in <?php echo $groupDetails["GPname"] ?>'; return true">BROWSE ALL</a><?php }?></td>
    <td width="11" rowspan="3"><img src="imgz/maindiv.gif" width="11" height="466"></td>
    <td width="306" height="30" align="center" valign="bottom">&nbsp;</td>
    <td width="5" rowspan="3">&nbsp;</td>
  </tr>
  <tr> 
    <td height="20" valign="top" class="mainbold"></td>
    <td width="306" rowspan="2" valign="top" class="maintext">
      <?php for($i=$firstGroup; $i<($firstGroup+8) && $i<$totalGroups; $i++){?>
      <a href="sub.php?PSubG=<?php echo $array[$i]["SPG"] ?>&amp;uid=<?php echo $getVars['uid']; ?>" class="link1" onmouseover="window.status='View Products in <?php echo $array[$i]["SPGname"] ?>'; return true"><?php echo $array[$i]["SPGname"] ?></a><br>
<?php
// Get all subsubs in current sub group
$qMain="SELECT * FROM SubSubG WHERE SPG = '".$array[$i]["SPG"]."'";
$result=mysql_query($qMain)
or die(mysql_error());

// Print subsubs
while ($row=mysql_fetch_array($result))
{
?>
[<a href="subsub.php?PSubSubG=<?php echo $row["SSPG"]?>&amp;uid=<?php echo $getVars['uid']; ?>" class="link3" onmouseover="window.status='View Products in <?php echo $row["SSPGName"]?>'; return true"><?php echo $row["SSPGName"]?></a>]&nbsp;
<?php
}
?>
<br><br>
<?php }?></td>
    <td width="306" rowspan="2" valign="top" class="maintext">
      <?php for($i=$firstGroup+8; $i<($firstGroup+16) && $i<$totalGroups; $i++){
  ?>
      <a href="sub.php?PSubG=<?php echo $array[$i]["SPG"] ?>&amp;uid=<?php echo $getVars['uid']; ?>" class="link1" onmouseover="window.status='View Products in <?php echo $array[$i]["SPGname"] ?>'; return true"><?php echo $array[$i]["SPGname"] ?></a><br>
<?php
// Get all subsubs in current sub group
$qMain="SELECT * FROM SubSubG WHERE SPG = '".$array[$i]["SPG"]."'";
$result=mysql_query($qMain)
or die("<font color=\"#FF0000\">ERROR {9.4}! Please navigate to a <a href=\"main.php?uid=".$getVars['uid']."\">different page</a> and then try this page again.</font>");

// Print subsubs
while ($row=mysql_fetch_array($result))
{
?>
[<a href="subsub.php?PSubSubG=<?php echo $row["SSPG"]?>&amp;uid=<?php echo $getVars['uid']; ?>" class="link3" onmouseover="window.status='View Products in <?php echo $row["SSPGName"]?>'; return true"><?php echo $row["SSPGName"]?></a>]&nbsp;
<?php
}
?>
<br><br>
<?php }?></td>
  </tr>
  <tr> 
    <td height="416" valign="top" class="mainbold">

<?php if($totalGroups>0)

{

?>

<img src="grp_pics/<?php echo $groupDetails["PG"] ?>.jpg" alt="Group Picture" galleryimg="no"><br><img src="imgz/pixel.gif" width="306" height="5"><br> 

<?php echo $groupDetails["GPText"] ?><?php  }

else
{
?>
or die(mysql_error());

<p class="noresult">No Products Found.</p><p class="mainbold">Sorry, but there are no products in this section at the moment. The products are constantly being updated, however. Please try again later or <a href="mailto:sales@lock-tech.co.uk" class="link1" onmouseover="window.status='Send us an Email.'; return true">contact us</a>.</p><?php }?></td>
  </tr>
  <tr> 
    <td width="5" height="22" background="imgz/btmbar.gif" bgcolor="#14359E">&nbsp;</td>
    <td width="306" height="22" align="center" valign="top" background="imgz/btmbar.gif" bgcolor="#14359E"><a href="javascript:history.back()" onmouseover="prev_btn.src='imgz/prev2.gif';window.status='Previous Page'; return true" onmouseout="prev_btn.src='imgz/prev.gif'"><img name="prev_btn" src="imgz/prev.gif" width="124" height="16" border="0"></a></td>
    <td width="11" height="22" bgcolor="#14359E"><img src="imgz/btmdiv.gif" width="11" height="22"></td>
    <td width="306" height="22" align="center" background="imgz/btmbar.gif" bgcolor="#14359E" class="nav"><? include 'scrptz/nav.php' ?></td>
    <td width="11" height="22" bgcolor="#14359E"><img src="imgz/btmdiv.gif" width="11" height="22"></td>
    <td width="306" height="22" align="center" valign="top" background="imgz/btmbar.gif" bgcolor="#14359E"><a href="javascript:directLink('<?php echo $prodLink; ?>','<? echo $pageTitle ?>')" onmouseover="link_btn.src='imgz/link2.gif'; window.status='Direct Link to This Page'; return true" onmouseout="link_btn.src='imgz/link.gif'"><img name="link_btn" src="imgz/link.gif" alt="" width="182" height="16" border="0"></a></td>
    <td width="5" height="22" background="imgz/btmbar.gif" bgcolor="#14359E">&nbsp;</td>
  </tr>
</table>
</body>
</html>

here is the basic script . i use this script for  edit html or text file.
<?php 

$action=$_POST['action']; 
$textarea=$_POST['textarea']; 

if($_GET['p']){ 
$page=$_GET['p']; 
} 

// Assume your text pages are called, p1.db or p2.db, etc. 
$url = "p".$page.".html"; 
if (file_exists($url)) { 
// do nothing 
} else { 
$url = "p0.txt"; 
} 

// where to go back to after the edit ... 
$return="page.php?p=$page"; 

// Get page 
$data = implode("", file($url));  

if($action=="save"){ 
$newtext=stripslashes($textarea); 
$newtext = str_replace("<?", "", $newtext); 
$newtext = str_replace("?>", "", $newtext); 
$newtext = nl2br($newtext); 
//echo "page: $url<br><br>\n"; 
//echo $newtext; 
$fh = fopen($url, 'w') or die("can't open file"); 
fwrite($fh, $newtext); 
fclose($fh);  
header ("location: edit.php?p=$page"); 
} 
else{ 
echo" 
<html> 
<head><title>Simple Text Editor</title> 
<style> 
body,html{ 
margin:0px auto; 
width:700px; 
text-align:center; 
} 
#content{ 
margin:0px auto; 
width:700px; 
} 
#middle h1 { 
    color: transparent; 
    font-family:georgia; 
    font-size:12pt; 
    margin:0; 
    color: #dF9100; 
    padding:10px 0px 15px 0px; 
    text-align:left; 
} 
</style> 
<body> 
<div id='content'> 
"; 

$ta=br2nl($data); 

echo" 
<a href='$return'><-- Return to Page</a><br /><br /> 
Make Changes and click \"Save Changes\" at the very bottom ...<br /> 
<form action='edit.php' method='post'> 
<input type='hidden' name='action' value='save'> 
<input type='hidden' name='p' value='$page'> 
<input type='hidden' name='n' value='$n'> 
<textarea name='textarea' rows='25' cols='80'>$ta</textarea> 
<br /> 
<input type='submit' name='submit' value='Save Changes'> 
</form> 

<div id='middle' style='width:680px; text-align:left; padding-left:20px; border:1px solid #ccc;'> 
</div> 
</div> 
</body> 
</html> 
"; 
} 

function br2nl($str) { 
return preg_replace('=<br */?>=i', "", $str); 
} 

?> 
__________________


the script is running fine.

but when i intregate tinymce with the script..
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>abeer cms</title>
<script type="text/javascript" src="jscripts/tiny_mce/tiny_mce.js"></script>
<script type="text/javascript">
tinyMCE.init({
// General options
mode : "textareas",
theme : "advanced",
plugins : "safari,spellchecker,pagebreak,style,layer,table,save,advhr,advimage,advlink,emotions,iespell,inlinepopups,insertdatetime,preview,media,searchreplace,print,contextmenu,paste,directionality,fullscreen,noneditable,visualchars,nonbreaking,xhtmlxtras,template,imagemanager,filemanager",

// Theme options
theme_advanced_buttons1 : "save,newdocument,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,|,styleselect,formatselect,fontselect,fontsizeselect",
theme_advanced_buttons2 : "cut,copy,paste,pastetext,pasteword,|,search,replace,|,bullist,numlist,|,outdent,indent,blockquote,|,undo,redo,|,link,unlink,anchor,image,cleanup,help,code,|,insertdate,inserttime,preview,|,forecolor,backcolor",
theme_advanced_buttons3 : "tablecontrols,|,hr,removeformat,visualaid,|,sub,sup,|,charmap,emotions,iespell,media,advhr,|,print,|,ltr,rtl,|,fullscreen",
theme_advanced_buttons4 : "insertlayer,moveforward,movebackward,absolute,|,styleprops,spellchecker,|,cite,abbr,acronym,del,ins,attribs,|,visualchars,nonbreaking,template,blockquote,pagebreak,|,insertfile,insertimage",
theme_advanced_toolbar_location : "top",
theme_advanced_toolbar_align : "left",
theme_advanced_statusbar_location : "bottom",
theme_advanced_resizing : true,

// Example content CSS (should be your site CSS)
content_css : "css/example.css",

// Drop lists for link/image/media/template dialogs
template_external_list_url : "js/template_list.js",
external_link_list_url : "js/link_list.js",
external_image_list_url : "js/image_list.js",
media_external_list_url : "js/media_list.js",

// Replace values for the template plugin
template_replace_values : {
username : "Some User",
staffid : "991234"
}
});
</script>

</head>

<body>
<?php 

$action=$_POST['action']; 
$textarea=$_POST['textarea']; 

if($_GET['p']){ 
$page=$_GET['p']; 
} 

// Assume your text pages are called, p1.db or p2.db, etc. 
$url = "p".$page.".html"; 
if (file_exists($url)) { 
// do nothing 
} else { 
$url = "p0.html"; 
} 

// where to go back to after the edit ... 
$return="edit.php?p=$edit"; 

// Get page 
$data = implode("", file($url));  

if($action=="save"){ 
$newtext=stripslashes($textarea); 
$newtext = str_replace("<?", "", $newtext); 
$newtext = str_replace("?>", "", $newtext); 
$newtext = nl2br($newtext); 
//echo "page: $url<br><br>\n"; 
//echo $newtext; 
$fh = fopen($url, 'w') or die("can't open file"); 
fwrite($fh, $newtext); 
fclose($fh);  
header ("location: edit.php?p=$page"); 
} 
else{ 
echo" 
<html> 
<head><title>Simple Text Editor</title> 
<style> 
body,html{ 
margin:0px auto; 
width:700px; 
text-align:center; 
} 
#content{ 
margin:0px auto; 
width:700px; 
} 
#middle h1 { 
    color: transparent; 
    font-family:georgia; 
    font-size:12pt; 
    margin:0; 
    color: #dF9100; 
    padding:10px 0px 15px 0px; 
    text-align:left; 
} 
</style> 
<body> 
<div id='content'> 
"; 

$ta=br2nl($data); 

echo" 
<a href='$return'><-- Return to Page</a><br /><br /> 
Make Changes and click \"Save Changes\" at the very bottom ...<br /> 
<form action='edit.php' method='post'> 
<input type='hidden' name='action' value='save'> 
<input type='hidden' name='p' value='$page'> 
<input type='hidden' name='n' value='$n'> 
<textarea name='textarea' rows='25' cols='80'>$ta</textarea> 
<br /> 
<input type='submit' name='submit' value='Save Changes'> 
</form> 

<div id='middle' style='width:680px; text-align:left; padding-left:20px; border:1px solid #ccc;'> 
</div> 
</div> 
</body> 
</html> 
"; 
} 

function br2nl($str) { 
return preg_replace('=<br */?>=i', "", $str); 
} 

?> 
__________________

</body>
</html>


the script show error message after clicking the save button. the error message is
Warning: Cannot modify header information - headers already sent by (output started at c:\wamp\www\edit.php:6) in c:\wamp\www\edit.php on line 78

can any one help regarding this issue?

Well this problem has occurred a lot.
 
I try to put ". $_GET['site'] ." or ". $_POST['site'] ." in my script and i get a server errror when trying t access my page ( error connecting the page basically)


Here is the part of the script which that is occuring to:
Quote

            if($_GET['step'] == 2)
            {
               echo 'Just adding INCLUDE files';
                                        exec('xcopy /X/ / ". $_GET['site'] ." / /e/i', $a, $a1);  <---- This line
               echo '<form action="install.php?step=3&guid='. $my_guid .'" method="post">';
               echo '<input type="submit" value="Continue">';
               echo '</form>';
            }



When i try using the $_GET function or $_POST functions in alot of stuff it just shows an server error(error connecting the page on my browser)

Someone please help!

if ($action == "discussion") {

if ($_POST['comment'] == "") {

echo "<p align=center>Sorry your comment was not posted due to the comment being blank. You will be redirected in a few seconds so please try again</p>
<p align=center>If you have not returned to your page <a href=http://www.sentuamessage.com/blog.php?who=$content[id]>Click Here</a>";
echo "<meta http-equiv=refresh content=15;URL=http://www.sentuamessage.com/blog.php?who=$content[id] />";
include("bottom.php");
exit;
}

if (isset($_POST) && !empty($_POST)) 
{
    if (isset($_SESSION['posttimer']))
    {
        if ( (time() - $_SESSION['posttimer']) <= 10)
        {
echo "<p align=center><b>Bit of a problem here, Double Post attempt has been found. Don't worry we stopped it.</b></p>";
echo "<p align=center>If you have not returned to your page <a href=http://www.sentuamessage.com/blog.php?who=$content[id]>Click Here</a>";
echo "<meta http-equiv=refresh content=15;URL=http://www.sentuamessage.com/blog.php?who=$content[id] />";
        }
        else
        {

$sumscore = $row[score] + 2;
$sumcomments = $row[comments] + 1;

$con=mysqli_connect("DETAILS FOR SQL STUFF IN HERE BUT DELETED FOR PURPOSES OF THE FORUM");
 
 if (mysqli_connect_errno())
   {
   echo "<p align=center>Failed to connect to MySQL: </p>" . mysqli_connect_error();
   }

 $sql="INSERT INTO comments (userid, topicid, category, topicname, comment, date, name, address, avatar)
 VALUES
 ('$row[id]','$content[id]','blogs','$content[topic]','$_POST[comment]','$today','$row[name]','http://www.sentuamessage.com/blog.php?who=$content[id]', '$row[cavatar]')";

 if (!mysqli_query($con,$sql))
   {
   die('Error: ' . mysqli_error($con));
   }

mysql_query("INSERT INTO notifications (userid, username, nuser, message, address, date, time)
 VALUES
 ('$row[id]','$row[name]','$content[postedid]','$row[name] has commented on your Blog','http://www.sentuamessage.com/blog.php?who=$who','$today', '$time')") or die(mysql_error());


mysql_query("UPDATE userdb SET comments='$sumcomments', score='$sumscore' WHERE username='$_SESSION[username]'") or die(mysql_error());

echo "<p align=center>Your comment has been submitted. You should be redirected back to your page in a few seconds</p>
<p align=center>If you have not returned to your page <a href=http://www.sentuamessage.com/blog.php?who=$content[id]>Click Here</a>";
echo "<meta http-equiv=refresh content=2;URL=http://www.sentuamessage.com/blog.php?who=$content[id] />";

mysqli_close($con);
}
    }
    $_SESSION['posttimer'] = time();
}
include("bottom.php");
exit;
}

I am rattling my brain here. I had added a code into my script to get rid of double posts, it has a timer which stops people double posting within 10 seconds.   Though since inserting the code you have an error where you will have to double post the same post because instead of inserting the post content into the database the submit button comes back with a blank result.   Why is this happening? (blank result instead of saying "post successfully posted etc." or "post not posted" it just comes up blank with no entry going into the database. This results in you having to re type your comment and re submit it hoping second time lucky)   This is my code once the submit has been hit.    

Previously, the PHP codebase I was using was that written by others, and I used their code to tinker with so I could get an understanding how PHP works.
Now that I am comfortable using PHP, I have written my own short PHP script from scratch with the aim of it seeing my newsletter system functioning at minimal, for the first time.
The newsletters system is made with HTML/PHP/MySQL.

I am having a problem with the PHP side of things where I am getting an error:
Quote

PHP Parse error: syntax error, unexpected T_IF on line 50

... which is:
Code: [Select]
if $_POST['action'] == 'Register' {
I am hoping someone that knows allot about PHP could take a look at my code and see whats wrong with it?

PHP code within confirm.html:
Code: [Select]
<?php
$link = mysql_connect('localhost', 'testusr', 'testpw');
mysql_select_db('testdb', $link);
$email = $_POST['e-mail'];
$query = 
if $_POST['action'] == 'Register' {
if $_POST['newsletter'] == 'Mens' {
"INSERT INTO newsletters(mens) VALUES('$email')";
}
elseif $_POST['newsletter'] == 'Mens & Womens' {
"INSERT INTO newsletters(mensandwomens) VALUES('$email')";
}
elseif $_POST['newsletter'] == 'Womens' {
"INSERT INTO newsletters(womens) VALUES('$email')";
}
;}
mysql_query ($link, $query);
mysql_close($link);
?>
HTML FORM code within index.html:
Code: [Select]
<FORM action="confirm.html" method="post">
<DIV>
<SPAN class="input">
Action:
<SELECT name="action">
<OPTION>Register</OPTION>
<OPTION>Unregister</OPTION>
</SELECT>&nbsp&nbsp&nbsp
E-mail: <INPUT name="e-mail" type="text"></INPUT>&nbsp&nbsp&nbsp
Newsletter:
<SELECT name="newsletter">
<OPTION>Mens</OPTION>
<OPTION>Mens & Womans</OPTION>
<OPTION>Womens</OPTION>
</SELECT>&nbsp&nbsp&nbsp
<INPUT class="submit" type="submit" value="Submit">
</SPAN>
</DIV>
</FORM>

Hey, so this is my register script 

<?php

error_reporting(E_ALL | E_NOTICE);
ini_set('display_errors', 1);
require 'connect.php';

echo "<title>  Register  </title>";

if(isset($_POST['register'])) {

	$username = trim($_POST['username']);
	$username = mysqli_real_escape_string($con, $_POST['username']);
	$password = mysqli_real_escape_string($con, $_POST['password']);
	$password = hash('sha512', $_POST['password']);

	if(!$_POST['username'] OR !$_POST['password']) {

		die("You must enter a username and password!");

	}


	

	$stmt = $con->prepare("INSERT INTO usrs_usr (username, password) VALUES (?, ?)");
	$stmt->bind_param("ss", $username, $password);
	$stmt->get_result();
	var_dump($stmt);
	$stmt->execute();
	
	

	echo "New user has been created successfully";

	$stmt->close();
	$conn->close();

}

?>

Now the problem is i have done a variable dump which outputs nothing, and the only error i am getting is

Fatal error: Call to a member function bind_param() on a non-object

Hi all, Im coding a simple script for my website which just changes the users rank.

Code: [Select]
<?php
session_start();
include "../includes/db_connect.php";
include "../includes/functions.php";
logincheck();

ini_set ('display_errors', 1);
error_reporting (E_ALL);

$username=$_SESSION['username'];

$get = mysql_query ("SELECT * FROM users WHERE username = '$username'");
$fetch = mysql_fetch_object($get);

if ($fetch->userlevel >= "2"){
$newrank = $_POST['newrank'];
$user1 = $_POST['user'];
if (strip_tags($_POST['update'])){
mysql_query("UPDATE users SET `rank` = '$newrank' WHERE username='$user1'") or die (mysql_error());
echo ("You have updated $user1's rank to $newrank !");
}
}
else{
echo ("Your userlevel isnt high enouth to be here!");
}
?>
<html>
<head>
<title>Change Rank</title>
<link rel="stylesheet" href="../includes/in.css" type="text/css">
<style type="text/css">
.infobg {
font-family: Arial;
font-weight:normal;
font-size:12px;
border-top: 1px solid #000000;
border-right: 1px solid #000000;
border-bottom: 1px solid #000000;
border-left: 1px solid #000000;
background: URL(textbg1.png);
font-weight:300;
}

.button {
font-size: 12px;
background:url(button.png);
vertical-align: middle;
border-top: 1px solid #000000;
border-right: 1px solid #000000;
border-bottom: 1px solid #000000;
border-left: 1px solid #000000;
color: #FFFFCC;
height:23px;
font-weight:300;
border-radius: 10px;
padding-bottom:2px;
}

</style>
</head>
<body>
<form action='' method='post' name='form1'>
<table width='30%' cellpadding='0' align='center' cellspacing='0' border='1' bordercolor='#000000' bgcolor='#808080' style='border-collapse: collapse'>
<tr>
<td background='../header.jpg' colspan='2' align='center'>Change Rank</td>
<tr>
<td>Username:</td><td><input type='text' name='user'></td>
</tr>
<tr>
<td>Rank:</td><td><input type='text' name='newrank'></td>
</tr>
<tr>
<td>&nbsp;</td><td><input type="submit" name="update" value="Update Rank"></td>
</tr>
</form>
</table>
</body>
</html>
But there seems to be something wrong with that code, which I carnt see or work out. When I click Update submit button it does nothing, but can anyone see why it does nothing?

Thanks.

So, I'm trying to make a script that will send emails from apparently anyone.
Code: [Select]
<?php
$email = $_REQUEST['email']
$target = $_REQUEST['target']
$message = $_REQUEST['message']
$subject = $_REQUEST['subject']

mail( $target, $subject, $message, "From: $email" );
echo "Mail sent." ;
?>

Here's the HTML, if it matters.
Code: [Select]
<html>
<head>
<title>EMAIL SPOOFER</title>
</head>
<body>
<p>This program can make emails appear as if they came from any email address, real or fake!</p>
<form method="post" action="mailspoof.php">
Apparent sender: <input name="email" type="text" /><br />
Subject: <input name="subject" type="text" /><br />
Recipient: <input name="target" type="text" /><br />
Message:<br />
<textarea name="message" rows="15" cols="40">
</textarea><br />
<input type="submit" />
</form>

</body>
</html>

Here's the error I'm getting from my webhost:
Parse error: syntax error, unexpected T_VARIABLE in /home/a5938041/public_html/mailspoof.php on line 3

If I know me, it's probably the most stupid mistake in the universe, so please point it out. ::)

I have a login script which is showing problem.
The problem is that when my username and password are correct it directs to index.php page and displays the correct username there.
But if the password is wrong it still directs to the same page instead of different(err-login.php) page,but this time no username is displayed.

index.php:
the password verifying code is as follows(the whole code of index.php is not mentioned since it is too long and a bit messy)
<code>

<?php
$connection=mysql_connect("localhost","root","");
mysql_select_db("forum",$connection);
$select=mysql_query("SELECT * FROM user_id WHERE uname='$_REQUEST[uname]'",$connection);
$row=mysql_fetch_array($select);
if($row['password']==$_REQUEST['password']){
session_start();
$_SESSION['name']=$_REQUEST['uname'];
}
else{
header("Location:err-login.php");
}
?>
</code>

NOTE:-The name of my db and table are correct.
I have referred to username as uname.

So I'm working on a website for an airline (not real) and on one of my pages you can request the cost of a flight by putting in the depart and arrival locations, like this:
And if they put in a selection that isn't in the database they get this:


The problem is that when they load the page initially, instead of just the selection bars and sumbit button showing up, it all does and i get an error like this:


When you sumbit it, it all looks like it should, it's just that when they load it things seem to go wrong, any idea how i can fix this? 

Heres the code i use:
Code: [Select]
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
      <p>Depart:
        <select name="depart">
          <option selected="selected">Bristol</option>
          <option>Newcastle</option>
          <option>Manchester</option>
          <option>Dublin</option>
          <option>Glasgow</option>
        </select>
        Arrive:
        <select name="arrive">
          <option>Bristol</option>
          <option selected="selected">Newcastle</option>
          <option>Manchester</option>
          <option>Dublin</option>
          <option>Glasgow</option>
        </select>
<input type="submit" />
      </p>
    </form>
    <?php
$depart = $_POST['depart'];
$arrive = $_POST['arrive'];


$con = mysql_connect("localhost","root","");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("test", $con);

$result = mysql_query("SELECT price FROM flights WHERE depart = '$depart' AND arrive = '$arrive'");

if ($row = mysql_fetch_assoc($result)) {
echo 'This flight shall cost you &pound';
echo $row["price"];
}
else include('includes/price.php');
?>
</div>
My if-else statement doesn't seem to be doing it's job 

Thanks in advance

Hi there,

I have a simple login script written but I get an error with it.  It does work but shows an error on some pages.

Let me explain.

Three Files:

Admin.php
Login.html
checklogin.php

When the user has logged in they go to checklogin.php.  If the username and password match 1 row in the database then it forwards the user to admin.php fine.  Except I keep getting mysql warning messages:

Warning: Cannot modify header information - headers already sent by (output started at /home/wormste1/public_html/tilburywebdesign/shop/templates/template1/admin/updatescompanyinformation.php:3) in /home/wormste1/public_html/tilburywebdesign/shop/templates/template1/admin/companyinfoupdated.php on line 3


At the start of each page I want password protected I put the following code:

<? 
session_start();
if(!session_is_registered(myusername)){
header("location:login.html");
}
?>

I can't work out why I am getting this error.

Many Thanks,
Ian

I had posted a similar post  a few days back, about an display script which is supposed to retrieve a stored image from my database and displays it on an html page, but fails to do so.  Someone suggested that I  upload my image onto a folder on the server and then save the image path name in my database.  I found this script(below)  which does just that.  It uploads the image into a folder on the server called images and stores the image path into a table in my database called images and I know this script works because i saw the file saved in the images folder and the path name inserted into the images table.
Code: [Select]


<?php

//This file inserts the main image into the images table.

//address error handling

ini_set ('display_errors', 1);
error_reporting (E_ALL & ~E_NOTICE);





//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

//Check whether the session variable id is present or not. If not, deny access.
if(!isset($_SESSION['id']) || (trim($_SESSION['id']) == '')) {
header("location: access_denied.php");
exit();
}

        else{ 







// Check to see if the type of file uploaded is a valid image type

function is_valid_type($file)

{

     // This is an array that holds all the valid image MIME types

     $valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif");

 

     if (in_array($file['type'], $valid_types))

         return 1;

     return 0;

}

 

// Just a short function that prints out the contents of an array in a manner that's easy to read

// I used this function during debugging but it serves no purpose at run time for this example

function showContents($array)

{

     echo "<pre>";

     print_r($array);

     echo "</pre>";

}

 

// Set some constants

 

// This variable is the path to the image folder where all the images are going to be stored

// Note that there is a trailing forward slash

$TARGET_PATH = "images/";

 

// Get our POSTed variable

$image = $_FILES['image'];

 

// Sanitize our input

$image['name'] = mysql_real_escape_string($image['name']);

 

// Build our target path full string.  This is where the file will be moved to

// i.e.  images/picture.jpg

$TARGET_PATH .= $image['name'];

 

// Make sure all the fields from the form have inputs

if ( $image['name'] == "" )

{

     $_SESSION['error'] = "All fields are required";

     header("Location: member.php");

     exit;

}

 

// Check to make sure that our file is actually an image

// You check the file type instead of the extension because the extension can easily be faked

if (!is_valid_type($image))

{

     $_SESSION['error'] = "You must upload a jpeg, gif, or bmp";

     header("Location: member.php");

     exit;

}

 

// Here we check to see if a file with that name already exists

// You could get past filename problems by appending a timestamp to the filename and then continuing

if (file_exists($TARGET_PATH))

{

     $_SESSION['error'] = "A file with that name already exists";

     header("Location: member.php");

     exit;

}

 

// Lets attempt to move the file from its temporary directory to its new home

if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))

{

     // NOTE: This is where a lot of people make mistakes.

     // We are *not* putting the image into the database; we are putting a reference to the file's location on the server

     $sql = "insert into images (member_id, image_cartegory, image_date, image) values ('{$_SESSION['id']}', 'main', NOW(), '" . $image['name'] . "')";

     $result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());

     header("Location: images.php");

echo "File uploaded";

     exit;

}

else

{

     // A common cause of file moving failures is because of bad permissions on the directory attempting to be written to

     // Make sure you chmod the directory to be writeable

     $_SESSION['error'] = "Could not upload file.  Check read/write persmissions on the directory";

     header("Location: member.php");

     exit;

}







        } //End of if session variable id is not present.
 


?> 











Now the display image script accompanying this insert image script is shown below. Code: [Select]
<?php

// Get our database connector

require("config.php");

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"

      "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

 

<html xmlns="http://www.w3.org/1999/xhtml">

    <head>

        <title>Dream in code tutorial - List of Images</title>

    </head>

 

    <body>

     

        <div>

 

            <?php   

                // Grab the data from our people table

                $sql = "SELECT * from images  WHERE  image_cartegory = 'main'";

                $result = mysql_query($sql) or die ("Could not access DB: " . mysql_error());

 

                while ($row = mysql_fetch_assoc($result))

                {

                    echo "<div class=\"picture\">";

                    echo "<p>";

 

                    // Note that we are building our src string using the filename from the database

                     echo "<img src=\"images/ " . $row['filename'] . " \" alt=\"\" />";

                   

                    echo "</p>";

                    echo "</div>";

                }



            ?>

         

        </div>

    </body>

</html>



Well, needless mentioning, the picture isn't displayed.  Just a tiny jpeg icon is displayed at the top left hand corner of the page.  Figuring out that the problem might be the lack of a header that declares the image type, I add this line
header("Content-type: image/jpeg");
but all it does is display a blank white page, without the tiny icon this time.  What am I missing? Any clues??