PHP - Trouble With If

Hi Chaps,

I have a PHP FTP App, where users can log in using a unique code and a password.

Their unique code corresponds to an FTP folder, e.g.
Quote

\FTP_Root\Customer A & Co\


So when the user logs in, they can see their FTP directory and contents, in this case an Inbox and an Outbox.
This works as the FTP folder contains both an Inbox and an Outbox.

The problem I am having is when I try browsing within this directory (say the Inbox), ftp-chdir fails.

I have a hyperlink that sends a 'dir' parameter to the same ftp.php page, and if set, will attempt to change to the given directory.

So even though the URL Hyperlink reads:
Quote

....server.co.uk/ftp.php?dir=/FTP_Root/Customer A & Co/Inbox


When you click on this link, the page tries to load:
Quote

....server.co.uk/ftp.php?dir=/FTP_Root/Customer A


So my question is what do I need to change, the Hyperlink to read something like:
Quote

....server.co.uk/ftp.php?dir=/FTP_Root/Customer%20A%20&%20Co/Inbox



Do something to the ftp-chdir function, where I encode/decode/whatever to make sure it tries to change to the correct FTP directory?

Or exclude all ampersand entirely?

Building a website for work. I am struggling with the login for some reason. I`m using a lot of the same code as I did for my personal site and a few other websites I`ve programmed which has always worked. But for some reason, it isn`t working now. I`ve already told it to display to me the information that`s being processed and that is all correct (it even updates the database like it`s supposed to). It just won`t show the person being logged in, which defeats the purpose of logging in, yanno?

Here are all the files in question.

login.php
<?php
include "file_calls.php";
$title = "Business Name (Beta): Log In";
include "functions.php";
session_start();
echo "$title";
echo "<p>";
echo "Log into the Business Name website. Only authorized members of the Business Name Staff can log into the website.";
echo "<p>";
include "login_form.php";
?>

login_form.php
<?php
echo "<form action='logging.php' method='post'>";
echo "E-Mail Address:";
echo "<br><input type='text' name='email' size=60 maxlength=100>";
echo "<p>";
echo "Password:";
echo "<br><input type='password' name='pass' size=60 maxlength=25>";
echo "<p>";
$buttonlabel = "Log In";
include "formbutton_format.php";
echo "</form>";
?>


logging.php
<?php
include "file_calls.php";
$title = "Business Name (Beta): Logging In";
include "functions.php";
session_start();
echo "$title";
echo "<p>";
echo "Logging into the Business Name website. Only authorized members of the Business Name Staff can log into the website.";
echo "<p>";
$email = $_POST['email'];
$pass = $_POST['pass'];
$entry_date = strftime("%B\ %e\,\ %Y %I:%M:%S %p", time());

$res = mysql_query("SELECT id, memlev, pwd1, pwd2, email, name FROM user_data WHERE email='$email'");
$by = mysql_fetch_row($res);
mysql_free_result($res);

$log = $by[4];
$pas = $by[2];
$pas2 = $by[3];

if ($email && $pass) {
if ($by[0]) {
if ($by[1] == 2) {
$passwd = crypt($_REQUEST['pass'],$by[5]);
if ($pass == $pas2) {
mysql_query("UPDATE user_data SET lastlogin='$entry_date' WHERE email='$email'");
mysql_close($con);
header("Location: index.php");
}
elseif ($passwd != $pas) {
header("Location: nolog.php?logout=1&m=4");
}
}
elseif ($by[1] == 1) {
header("Location: nolog.php?logout=1&m=2");
}
elseif ($by[1] == 0) {
header("Location: nolog.php?logout=1&m=3");
}
}
elseif (!$by[0]) {
header("Location: nolog.php?logout=1&m=1");
}
}
elseif (!$email || !$pass) {
echo "<b>Error:</b> Both username and password must be entered in order to log in.";
echo "<p>";
include "login_form.php";
}
?>[/php

index.php
[php]<?php
include "file_calls.php";
$title = "Business Name (Beta)";
include "functions.php";
session_start();
echo "$title";
echo "<p>";
echo "This website is currently under construction. Thank you for your patience.";
echo "<p>";
if ($lev > 1) {
echo "Hello, $loggeduser !";
}
elseif ($lev < 2) {
echo "Not logged in.";
}
echo "<p>";
echo "$lev";
echo "<br>$loggeduser<br>$email";
?>

auth.php

<?php
  // Defines
 
  DEFINE('SESSION_MAGIC','sadhjasklsad2342');

  // Initialization
  @session_start();
  @ob_start();
  
 
    /*
      Redirects to another page
    */
    function Redirect($to) {

   @session_write_close();
   @ob_end_clean();
   @header("Location: $to");
    } 
 
     /*
        Deletes existing session
    */
function RemoveSession() {
$_SESSION = array();
if (isset($_COOKIE[session_name()])) {
   @setcookie(session_name(), '', time()+(60*60*24*365), '/');
}
}
    
/*
  Checks if user is logged in
*/ 
function isLoggedIn() {

return(isset($_SESSION['magic']) && ($_SESSION['magic']==SESSION_MAGIC));
}


 
    /* 
      read message count
    */
    function CountMessages($id) {
    
   if ($res=mysql_query("SELECT * FROM user_data WHERE email='$email'"))
   {
   $count=mysql_num_rows($res);
   mysql_free_result($res);    
   return($count);
   }
   return 0; 
    }
    
    /*
      Go login go!
    */
    function Login($email,$pass) {
   
    global $nmsg, $rows;
   
   $ok=false;
   if ($res=mysql_query("SELECT id, email, name, pwd1, pwd2, memlev FROM user_data WHERE email='$email' AND pwd2='$pass'"))
   {
   if ($rows=mysql_fetch_row($res)) {
    $_SESSION['sess_name'] = $rows[2];
$_SESSION['pass'] = $pass;
$_SESSION['gal'] = $rows[0];
$_SESSION['level2'] = $rows[5];
$_SESSION['email'] = $rows[1];
    $_SESSION['magic'] = SESSION_MAGIC;
    $nmsg = CountMessages($rows[0]);
    $ok=true;
   } else {
   include('login_failed.php');
   }
   mysql_free_result($res);
   }
   return($ok);
   }
   
       /*
      Terminates an existing session
    */
    function Logout() {
    @RemoveSession();
    @session_destroy();
    }

    /*
      Escape array using mysql
    */   
function Escape(&$arr)
{
 if (Count($arr)>0) {
    foreach($arr as $k => $v) {
        if (is_array($v)) {
            Escape($arr[$k]);
        }
        else {
            if (function_exists('get_magic_quotes')) {
                if(!get_magic_quotes_gpc()) {
                    $arr[$k] = stripslashes($v);
                }
            }
            $arr[$k] = mysql_real_escape_string($v);
        }
   }
      }
}

// -----------------------------------------------    
// Main
// -----------------------------------------------    

   Escape($_POST);
   Escape($_GET);
   Escape($_COOKIE);
   Escape($_REQUEST);
   Escape($_GLOBALS);
   Escape($_SERVER);
   
?>


file_calls.php
<?php
include "info_con.php";
include "auth.php";
?>


functions.php

<?php
echo "<title>$title</title>";




$lev=isset($_SESSION['level2'])?$_SESSION['level2']:0;
$logged=isset($_SESSION['gal'])?$_SESSION['gal']:0;
$loggeduser=$_SESSION['sess_name'];
$nmsg = 0;
$rows = isset($_SESSION['rows'])?$_SESSION['rows']:array();
$email = isset($_SESSION['email'])?$_SESSION['email']:'';
$pass = isset($_SESSION['pass'])?$_SESSION['pass']:'';






function rand_chars($c, $l, $u = FALSE) {
  if (!$u) for ($s = '', $i = 0, $z = strlen($c)-1; $i < $l; $x = rand(0,$z), $s .= $c{$x}, $i++);
  else for ($i = 0, $z = strlen($c)-1, $s = $c{rand(0,$z)}, $i = 1; $i != $l; $x = rand(0,$z), $s .= $c{$x}, $s = ($s{$i} == $s{$i-1} ? substr($s,0,-1) : $s), $i=strlen($s));
  return $s;
}






function ShowLoggedInBar() {
global $email,$pass,$rows,$logid;

   $nmes="";
   if($nmsg){
 $nmes="($nmsg New)";
   }
   echo "Hello, $loggeduser !";
}








/* check if we are logging out */
if (isset($_REQUEST['logout'])) {
Logout();
}

/* check if already logged in */
if (isset($_SESSION['magic']) && ($_SESSION['magic']==SESSION_MAGIC)) {   
   ShowLoggedInBar();
}
else {

/* not logged in, is it a form post? */
if (isset($_REQUEST['email']) && isset($_REQUEST['pass'])) {
$email = $_REQUEST['email'];
$pass = crypt($_REQUEST['pass'],$email);
Login($email,$pass);
} else {

}
}
?>


Can anyone see why it works on everything but getting the person logged in?

hi,

i am pulling data from a database, a picture and some text, i am able to have the records display vertically but i want them to display across the screen rather than downwards, but because of the page size, i only want 2 results per line. does any one know how i can do this?

thanks in advance.

Des

This is the code i am currently using

$result = mysql_query("select * from staff'");


echo "<table border='0' cellpadding='10' cellspacing='0'>";
echo "<tr>";
while($row = mysql_fetch_array($result))
{

echo "<td><img src=../upload/".$row['Pic']." border='0' width='140' height='105' /></td>";
echo "<td>".$row['Name']."</br><b>".$row['Role']."</b></td>";

}
echo "</tr>";
echo "</table>";

in my login script i have the following which searches for the username they inputted and then adds their user id to the table sessions in the database.

$result = mysql_query("SELECT * FROM ".DB_PREFIX."members WHERE user_username = '$username' AND user_password = '$password'");
        
            if(mysql_num_rows($result) != 1)
            {
                $val_error = 'Username and Password incorrect.';
            }
                else
                {
                 $row = mysql_fetch_array($result);
                    $browser = $_SERVER['HTTP_USER_AGENT'];
                    $_SESSION['user_id'] = $row['user_id'];
                    $_SESSION['session'] = session_id();
                    mysql_query("INSERT INTO ".DB_PREFIX."sessions 
                    VALUES(NULL, '".$_SESSION['user_id']."', '".$_SESSION['session']."', '".$_SERVER['REMOTE_ADDR']."', '".$_SERVER['HTTP_USER_AGENT']."', '".date('Y-m-d')."')");
                    
                    if ($_SESSION['backpage']) 
                    {
                    header('Location: '.$_SESSION['backpage']);
                    } else {
                    
                    header('Location: index.php');
                    }
                }

 then on pages which i want only logged in members to access i have the following:

if ($_SESSION['user_id'] == '') {
header ('Location: '.SITE_ROOT.'/login.php');
} else { REST OF CODE }

but when i login and try to access a page which requires you to be logged in i am directed back to index.php. I have nothing which does that. if you are not logged in you are redirected to login.php but it doesnt seem to work.
Any ideas?

what am i doing wrong? my watermark function won't work but i am calling the function right i think.
if (move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
   
        watermark($file_path,$watermark,'png');
          mysql_query("INSERT INTO gallery VALUES ('', '$username', '$time', '$caption' , '$file_path' )");
          //echo $file_size.' is how big your file is. It was transferred.';
          header('Location: gallery.php');
      }