PHP - Getting Rid Of Bullet On Last Item In While

I have been following an article on creating bullet proof sessions but I'm having problems with session variables i'm creating getting destroyed   I call the session_start() like this

SessionManager::sessionStart('MySession', 0, '/', 'localhost');

But when i try to add new session vars, i think the preventHijacking() function is is getting called for some reason and it wipes out the session and creates a new one.   Any ideas how I can get this to work?   Here is the link http://blog.teamtree...tproof-sessions   And here is the complete code

class SessionManager{
static function sessionStart($name, $limit = 0, $path = '/', $domain = null, $secure = null)
{
// Set the cookie name
session_name($name . '_Session');


// Set SSL level
$https = isset($secure) ? $secure : isset($_SERVER['HTTPS']);


// Set session cookie options
session_set_cookie_params($limit, $path, $domain, $https, true);
session_start();


// Make sure the session hasn't expired, and destroy it if it has
if(self::validateSession())
{
// Check to see if the session is new or a hijacking attempt
if(!self::preventHijacking())
{
// Reset session data and regenerate id
$_SESSION = array();
$_SESSION['IPaddress'] = $_SERVER['REMOTE_ADDR'];
$_SESSION['userAgent'] = $_SERVER['HTTP_USER_AGENT'];
self::regenerateSession();


// Give a 5% chance of the session id changing on any request
}
elseif(rand(1, 100) <= 5)
{
self::regenerateSession();
}
}
else
{
$_SESSION = array();
session_destroy();
session_start();
}
}


static protected function preventHijacking()
{
if(!isset($_SESSION['IPaddress']) || !isset($_SESSION['userAgent']))
return false;


if ($_SESSION['IPaddress'] != $_SERVER['REMOTE_ADDR'])
return false;


if( $_SESSION['userAgent'] != $_SERVER['HTTP_USER_AGENT'])
return false;


return true;
}


static function regenerateSession()
{
// If this session is obsolete it means there already is a new id
if(isset($_SESSION['OBSOLETE']))
return;


// Set current session to expire in 10 seconds
$_SESSION['OBSOLETE'] = true;
$_SESSION['EXPIRES'] = time() + 10;


// Create new session without destroying the old one
session_regenerate_id(false);


// Grab current session ID and close both sessions to allow other scripts to use them
$newSession = session_id();
session_write_close();


// Set session ID to the new one, and start it back up again
session_id($newSession);
session_start();


// Now we unset the obsolete and expiration values for the session we want to keep
unset($_SESSION['OBSOLETE']);
unset($_SESSION['EXPIRES']);
}


static protected function validateSession()
{
if( isset($_SESSION['OBSOLETE']) && !isset($_SESSION['EXPIRES']) )
return false;


if(isset($_SESSION['EXPIRES']) && $_SESSION['EXPIRES'] < time())
return false;


return true;
}
}

Edited by AdRock, 24 October 2014 - 10:23 AM.

I am working on a script for a simple form with only 2 options that are dropdowns.  I need to validate these two options that there is a selection made.

I have gotten the first one to validate, but I cannot get the second one to validate.  Can anyone steer me in the right direciton why only one is working?  I get no errors in the script, so I assume I am just missing something.

Code: [Select]
<?php
// options for drop-down menu
$choices = array('-- Choose Your Item','Anniversary Jacket', 'Anniversary T-Shirt');
$sizes = array('-- Choose Your Size','L', 'XL');

if($_SERVER['REQUEST_METHOD'] == 'GET'){
    // display form when GET
    showForm(array());
}
else{
    // process form if POST
    $errors = validateForm();
    if(count($errors)) showForm($errors); // if errors show again
    else print 'Form submitted succesfully!'; // no errors
}


// function generating form
function showForm($errors){

    global $choices,$sizes;

    // set defaults
    $defaults = array();
    foreach($choices as $key => $choice){
        if(isset($_POST['item']) && ($_POST['item'] == $key)) $defaults['item'][$key] = 'selected';
        else $defaults['item'][$choice] = '';
    } 
    foreach($sizes as $key => $size){
        if(isset($_POST['size']) && ($_POST['size'] == $key)) $defaults['size'][$key] = 'selected';
        else $defaults['size'][$size] = '';
    } 


    // print form
    print "<form action='{$_SERVER['SCRIPT_NAME']}' method='post'>";

    print "<div>";
    print "<select name='item'>";
    foreach($choices as $key => $choice){
        print "<option value='{$key}' {$defaults['item'][$key]}>{$choice}</option>"; 
    }
    print "</select>";
    showError('item', $errors);
    print "</div>";



print "<div>";
    print "<select name='size'>";
    foreach($sizes as $key => $size){
        print "<option value='{$key}' {$defaults['size'][$key]}>{$size}</option>"; 
    }
    print "</select>";
    showError('size', $errors);
    print "</div>";
    
    
    print "<input type='submit'/>";




    print "</form>";

}

// display error
function showError($type, $errors){
    if(isset($errors[$type])) print "<b>{$errors[$type]}</b>";
}

// validate data
function validateForm(){

    global $choices,$sizes;
    
    // start validation and store errors
    $error = array();
    

    // validate drop-down
    if(!(isset($_POST['item']) && (array_key_exists($_POST['item'], $choices)) && $_POST['item'] != 0)) $errors['item'] = 'Select Item';


     return $errors;
    

    // validate drop-down
    if(!(isset($_POST['size']) && (array_key_exists($_POST['size'], $choices)) && $_POST['size'] != 0)) $errors['size'] = 'Select Size';


     return $errors;

}







?>

Hi,
I'm hoping someone can lead me in the right direction here. I'm creating a simple shopping cart that I will later pass on to Paypal for payment but my problem is, it won't add the items to my shopping cart when I click add to cart.

My products are on different pages and I'm not sure if that is going to matter.

When I click "add to cart" nothing gets added and it says my cart is empty. I have two tables with the following columns:

1. products:
        productId
        productName
        productDesc
        productPrice
        link (for dynamically creating the page links on the main product page)

2. productscents
       scentId
       scentName
       scentDesc


Here is the add code that is in my first products page (Elite Hand Cream):

Code: [Select]
<?php 


if(isset($_GET['action']) && $_GET['action'] == "add") {
$id = intval($_GET['id']);
$desc=intval($_GET['desc']);

if (isset($_SESSION['cart'][$id])) {
$_SESSION['cart'][$id]['quantity']++; 
}
else {
$sql3 = "SELECT * FROM products WHERE productId=[$id]";
$sql4= "SELECT * FROM productscents WHERE scentId=[$desc]";
$query3 = mysql_query($sql3);
$query4 = mysql_query($sql4);
if(mysql_num_rows($query3) != 0) {
$row3 = mysql_fetch_array($query3);
$row4 = mysql_fetch_array($query4);
$_SESSION['cart'][$row3['productId']] = array("quantity" => 1, "price" => $row3['productPrice'], "desc" => $row4['scentId']);
} 
}
}


?>

Here is code I have for the $_SESSION:
Code: [Select]
<?php 
if(isset($_SESSION['cart'])) {
$sql5= "SELECT * FROM products,productscents WHERE productId IN (";
foreach($_SESSION['cart'] as $id => $value) {
$sql5 .= $id . ",";
}
$sql5 = substr($sql,0,-1) . ") ORDER BY productId, scentId ASC";
$query = mysql_query($sql5);
if(!empty($query)) {
while($row = mysql_fetch_assoc($query)) {
?>
<?php echo $row['productName'];?><?php $_SESSION['cart'][$row['productId']]['quantity'];?>
<?php 
}  } else {
echo "You need to add an item to your cart";}
}



Here is the code that I have for the "add to cart" and "view cart":

Code: [Select]
<a href=#&action=add&id=<?php echo $prodId;?>&desc=<?php echo $scent_id[$y];?>>Add to Cart</a><br><a href="cart.php">View Cart</a>



This grabs the correct product Id and scent Id which I want and no errors are being displayed on the page.

I'm not sure where to begin with this. LOL. I'm new to PHP and I used a tutorial to help with the code.

Any help would be greatly appreciated.

Hi,

I have some code to help me keep track of the programs that I write for athletes. It is basically a traffic light system, where if an athlete's program does not need to be updated for more than a week, the cell background is green, if it needs to be updated in less than a week, it turns amber, and if it is overdue, it turns red.

However, the problem is that when I upload a new program, that row appears in green, but the old program can be seen in red. Basically I want the code to only show the most recent program for each athlete. Not sure if I use Max? for this.

I'm looking for the most recent instance of athlete_id_prog in the programs_for_athletes table.

Here's the relevant code:


Code: [Select]
<?php

$sql = mysql_query("SELECT * FROM t_athletes, programs_for_athletes WHERE athlete_id = athlete_id_prog and next_prog_completed='No' ORDER BY $field $sort");


echo "<table border='1'  align='center' bordercolor='#000000' CELLPADDING=5 cellspacing='0' STYLE='font-size:13px'>";
echo "<tr bgcolor='#000000'> <td>*</td><td><H3><font color='white'>First name</font> $srt[1]</h3></td> <td><H3><font color='white'>Last name</font> $srt[2]</H3></td>  <td><H3><font color='white'>Sex</font> $srt[3]</H3></td>  <td><H3><font color='white'>Program link</font> $srt[4]</H3></td> <td><H3><font color='white'>Program Expiry Date</font> $srt[5]</H3></td></tr>";
// keeps getting the next row until there are no more to get

 $row_counter = 1; //create row counter with default value 0

// Print out the contents of each row into a table


 /*?>$bgColors = array('F'=>'#FF99FF', 'M'=>'#CCCCCC'); while ($row = mysql_fetch_array($sql))

{   
 // Print out the contents of each row into a table   
echo "<tr bgcolor=\"{$bgColors[$row['sex']]}\">\n";   


echo "</td><td>";
echo $row_counter++;
echo "</td>";
echo "<td>{$row['firstname']}</td>\n";   
echo "<td>{$row['lastname']}</td>\n";   
echo "<td>{$row['sex']}</td>\n";   
echo "<td>{$row['notes']}</td>\n";   
echo "<td>{$row['note_end_date']}</td>\n";   
echo "</tr>\n";<?php */

while ($row = mysql_fetch_array($sql)){   
if(strtotime($row['prog_expiry_date']) > time()){
  // date hasn't expired yet, so we check the remaining days
  $diff = strtotime($row['prog_expiry_date']) - time();
  if($diff <=  (60*60*24*7) ){
     $bgColors = '#CC6600';
  }else{
     $bgColors = '#99FF99';
  }
}else{
  // date has expired
  $bgColors = '#FF3333';
}
 
echo "<tr bgcolor=\"{$bgColors}\">\n";
echo "</td><td>";
echo $row_counter++; 
echo "</td>";
echo "<td>{$row['firstname']}</td>\n";    
echo "<td>{$row['lastname']}</td>\n";   
echo "<td>{$row['sex']}</td>\n";    
echo "<td>\n";   

 echo "<a href='http://www.mytestwebsite.com/athlete_programs/" . $row["program_link"] . "' target='_blank'>" . $row["program_link"] . "</a>";

echo "</td>\n";   

echo "<td>{$row['prog_expiry_date']}</td>\n";   
echo "</tr>\n";


}
echo "</table>";


?>




Any advice is much appreciated.

I am unsure of how to select something made up of a composite key.

Allow me describe the entity...

Event
ShowID (pk)
VenueID (pk)
StartDateTime (pk)


My Checkout process will have an HTML Table displaying maybe 3-4 different Events like this...

Code: [Select]
=========================
Register in 3 Easy Steps...

Step #1: Select a Date and Attendees

Event Ticket (Update) Choose
Name Cost Attendees Total One
Flower Show $20 ___ $0 <<Buy a Ticket>>
Mankato, MN
Sept 24, 2011

Flower Show $20 _3_ $60 <<Buy a Ticket>>
Willmar, MN
Oct 1, 2011

Banjo Jamboree $50 ___ $0 <<Buy a Ticket>>
Brainerd, MN
Oct 8, 2011

=========================
When a User clicks on a particular "Buy a Ticket" button, how do I capture the 3 Composite Key Values I need so I can insert them into my Order table?

Maybe a better question to ask, is HOW/WHERE would I store the 3 Composite Key Values so that when a User clicks on a given "Buy a Ticket" button, that I have the values I need to build my Order record??

Normally with just one value (e.g. Drop-Down List), when someone selects a value, there is a corresponding code that you'd use.  For example "Extra Large" in a Drop-Down List equals "3".

Hope I'm making sense?!

Thanks,



Debbie

Is it possible to add more then one thing in a link? so i can $_GET more then one thing from a link

signup.php?state=1?name=sam

i tried that and a few other things and it didnt work.

Hi every body

I get label of forms from db to customize for different languages.
My problem is when i get result how i could find label of each row.
I could select for each row of form but it is not logical.
In .Net i could fill array and use items.find property of array to find title of each row for example label of          "first name" in English or Germany.
Thanks for any guides.

Regards
Ali
 

I have a php form which shows all comments of the webpage  stored in  the database.
When i click on the edit button the corresponding 'comments' datas should appear in the textarea.

how can i do this,
pasting my piece of code


                                         $query="select *from comments order by id desc";
         
         $result=mysql_query($query);
         echo "<table width='700' align='center' border=1><tr bgcolor='green' align='center'><td><font color='black'>&nbsp;SlNo&nbsp;</font></td><td><font color='black'>Comment</font></td><td><font color='black'>&nbsp;&nbsp;Date Posted&nbsp;&nbsp;</font></td><td>Edit/Delete</td></tr></b>";
         while($row = mysql_fetch_row($result))
         {
            $d=$row['0'];
            $id=$row['0'];
            $name=$row['1'];
            $date_uploaded=$row['2'];
            
            echo    "<td>$id</td><td>$name</td>".
                "<td>$date_uploaded</td>".
                "<td><a href='edit_comments.php?id=$id'>Edit </a></td>".
                "</tr>";
         }
         
         echo   "</table>";
         
      }
      if(isset($_GET['id']))
{

   $id    = $_GET['id'];
   mysql_connect('localhost','root','') or die("Cannot connect to the Host");
mysql_select_db('sample') or die("Cannot connect to the Database !!");
   $query = "SELECT comments FROM comments_tble WHERE id = '$id' ";
   
   $result = mysql_query($query);
   $row=mysql_fetch_row($result);
   echo"<input type='text' col id='edit_comments' value='$row[0]' width='250' height='10' >";
   
   
   
   exit;
}

Hi all

I am trying to write a piece of code that cheks to see if an item is in the SQL databse and updates the quantity if it is, or adds it as a new line if it isn't. Here's my code:


Code: [Select]
if (isset($_GET['add'])) {

$id = $_GET['id'];
$qty = $_GET['qty'];

$date = date ('D M j G:i:s');

$sql_products = mysql_query("SELECT * FROM `items` WHERE `id` = '".$id."'");
$result_products = mysql_fetch_array($sql_products);
$product_title = $result_products['title'];
$product_price = $result_products['price'];


$sql_inbasket = mysql_query("SELECT * FROM `store_basket` WHERE `id` = '".$id."' AND sessionid = '".$sessionid."'");
$isiteminbasket = mysql_num_rows($sql_inbasket);

if ($isiteminbasket == 0) {

mysql_query ("INSERT INTO `store_basket` SET sessionid = '".$sessionid."', productid = '".$id."',

item = '".$product_title."', qty = '".$qty."', price = '".$product_price."', date = '".$date."'");

header("Location: basket.php");

}

else {

mysql_query("UPDATE `store_basket` SET qty = qty + 1 WHERE id = '".$id."' AND sessionid = '".$sessionid."'") ;

header("Location: basket.php");
}
}
Every time I try and add the same item to the basket, it adds as a new line instead of updating the existing line.

Many thanks for your help!

Pete

Hey all,

I'm currently making myself a blog website from scratch. It's sort of my personal project; I'm using it to get a feel for PHP (and it'd look great on my resume!).

Anyway, I'm using the following PHP code to get the items from my RSS feed, and display them. Problem is, my first item shows twice! I'm thinking it's a problem with my loop, but I'm not sure. Any ideas:

My PHP code to render my RSS is as follows:

<?php
         //Purpose: This loads the XML document using the DOMParser, and mixes it w/ HTML to style and format it.
         try
         {
         $xmldoc = new DOMDocument();
         $xmldoc->load('test_RSS_feed.xml');
         $content = null; //HTML mixed with XML results go here
         $allitems = $xmldoc->getElementsByTagName('item');
         foreach ($allitems as $item)
         {
         //get ALL instances of wanted element(s)
         $titles = $item->getElementsByTagName('title');
         $dates = $item->getElementsByTagName('pubDate');
         $descriptions = $item ->getElementsByTagName('description');
         
         //will include the CSS classes for these eventually!
         $content.= ('
            <ul class ="blog_entry">
               <li class="title_entry">
               '.$titles->item(0)->nodeValue.
               '</li>
               <li class="date_entry">
               '.$dates->item(0)->nodeValue.
               '</li>
               <br>
               <li class="description_entry">
               '.$descriptions->item(0)->nodeValue.
               '</li>
            </ul>
            <br><br><br>');
         echo $content;
         }
         }
         catch(Exception $e)
         {
         echo $e->getMessage();
         }
         ?>

And the XML in my RSS feed is as follows:


<?xml version= "1.0" encoding = "UTF-8" ?> <!--Every XML doc starts with this -->
<?xml-stylesheet type="text/css" href="sample_xml_css.css" ?> <!--stylesheet for RSS feed-->
<rss version = "2.0">
   <channel>
      <!--RSS feed information-->
      <title>My first RSS feed</title>
      <description>This is my first foray into RSS. I may use this to create a blog!</description>
      <lastBuildDate>Mon, Oct. 11, 2010 13:13:26 GMT</lastBuildDate> <!--date format complies to different standards-->
      <webMaster>mserrano0410@gmail.com</webMaster> <!--has email of webmaster-->
         <item>
            <title>My first item; this is the title.</title>
            <link>http://www.example.com/sample_item.html</link> <!--provides a link to the RSS item; required-->
            <pubDate>Mon, Oct 11, 2010 13:15:20 GMT</pubDate> <!--Every date complies to formatting standards-->
            <description>We are now inside of an item; this is a description tag.</description>
         </item>
         <item>
            <title>My second item.</title>
            <link>http://www.google.com</link>
            <pubDate>Fri, Oct 15, 2010 23:02:40 GMT</pubDate>
            <description>This is a second helping of examples biatch!</description>
         </item>
         <!--can create as many items as you want, but it MUST have:
            1) Title
            2) Link to item; when clicked, takes you directly to that item. This is a SEPARATE HTML document!
            3) Description
            -->
   </channel>
</rss>

Thanks in advance,
Marvin

hello,

i have this simple problem, how can i point to an item in a menu so that it shows the correct page i'm currently visiting?
for example, i have this menu :

Code: [Select]
<div class="submenu">
   <div class="submenu-head">Products</div>
   
   <ul>
      <li class="first-item current">
         <a tabindex="1" class="first-item current" href="index.php">Products</a>
      </li>
     
      <li>
         <a tabindex="1" href="add_product.php">
            Add new Product
         </a>
      </li>
   </ul>
</div>
where class="first-item current" points to the current page i'm visiting (i.e Products is highlited)
so when i visit another page (add_product.php) i want to do this

Code: [Select]
<div class="submenu">
   <div class="submenu-head">Products</div>
   
   <ul>
      <li >
         <a tabindex="1" href="index.php">Products</a>
      </li>
     
      <li class="first-item current">
         <a tabindex="1" class="first-item current"  href="add_product.php">
            Add new Product
         </a>
      </li>
   </ul>
</div>
the usual way i solve this problem is by using a switch statement

Code: [Select]
switch($header_title) {
   case "index":
      echo "<div class="submenu">
   <div class="submenu-head">Products</div>
   
   <ul>
      <li class="first-item current">
         <a tabindex="1" class="first-item current" href="index.php">Products</a>
      </li>
     
      <li>
         <a tabindex="1" href="add_product.php">
            Add new Product
         </a>
      </li>
   </ul>
</div>";
break;

switch "add_product":
echo "<div class="submenu">
   <div class="submenu-head">Products</div>
   
   <ul>
      <li >
         <a tabindex="1" href="index.php">Products</a>
      </li>
     
      <li class="first-item current">
         <a tabindex="1" class="first-item current"  href="add_product.php">
            Add new Product
         </a>
      </li>
   </ul>
</div>";
break}
but this is not very efficient, cause if have 10 menu links i would have to write 10 cases 
so how can u do this without having to write all those cases,  like maybe use a function instead??

Hi,

I have an array of items and I randomly want to remove one from the array. What's the easiest way to go about this?

Say i have an array (called $myarray) and it has 10 numbers in it like this...

1
2
4
8
9
10
12
14
15
18

Now in my code, I get a number and lets say for this example it is "5".   

I need to see if that number is in the array --easy enough using in_array()--, but if it is NOT in the array, I need to find the next available number in the array that is greater than my starting number of 5  (which would be "8" in this example).

But what is the best way to find this number (i.e. 8 in this example)?

I imagine I need to somehow loop through but i'm not sure which loop is the best to use and i'm generally confusing the hell out of myself (which is frustrating because this is probably rather simple to do ).

Can anyone help guide me in the right direction? 

Hi all

I am trying to write a piece of code that checks to see if an item is in the SQL database and updates the quantity if it is, or adds it as a new line if it isn't. Here's my code:

Code: [Select]

if (isset($_GET['add'])) {

$id = $_GET['id'];
$qty = $_GET['qty'];

$date = date ('D M j G:i:s');

$sql_products = mysql_query("SELECT * FROM `items` WHERE `id` = '".$id."'");
$result_products = mysql_fetch_array($sql_products);
$product_title = $result_products['title'];
$product_price = $result_products['price'];

$sql_inbasket = mysql_query("SELECT * FROM `store_basket` WHERE `id` = '".$id."' AND sessionid = '".$sessionid."'");
$isiteminbasket = mysql_num_rows($sql_inbasket);

if ($isiteminbasket == 0) {

mysql_query ("INSERT INTO `store_basket` SET sessionid = '".$sessionid."', productid = '".$id."', item = '".$product_title."', qty = '".$qty."', price = '".$product_price."', date = '".$date."'");

header("Location: basket.php");
}

else {

mysql_query("UPDATE `store_basket` SET qty = qty + 1 WHERE id = '".$id."' AND sessionid = '".$sessionid."'") ;

header("Location: basket.php");
}

}


Every time I try and add the same item to the basket, it adds as a new line instead of updating the existing line.

Many thanks for your help!

Pete

I have a class that I use to do my db queries. I'm starting to work on a new project and purposely put in a query which would fail, thus returning no results, just to make sure the error trapping is working. Here's my code:

Code: [Select]
function getResults($query) {
$results = mysql_query($query) or die (mysql_error() . "\n\nYour request couldn't be procesed.<p>" . $query);
$itemcount = count($results);

if ($itemcount > 0) {
$i=0;
while($itemcount > $i) {
$i++;
$userdata = array('queryresult' => '!success', 'displayName' => mysql_result($results, $i-1, 'displayName'), 'title' => mysql_result($results, $i-1, 'title'));
}
} else {
$userdata = array('queryresult' => '!fail');
}

return $userdata;
 
}

when I print $itemcount it returns a value of 1, which forces the conditional and an attempt at parsing the results array. However, in my browser I get these error messages:

1
Warning: mysql_result() [function.mysql-result]: Unable to jump to row 0 on MySQL result index 4 in /Library/WebServer/Dev/timesheet/lib/mysqlconnect.php on line 29

Warning: mysql_result() [function.mysql-result]: Unable to jump to row 0 on MySQL result index 4 in /Library/WebServer/Dev/timesheet/lib/mysqlconnect.php on line 29

It seems as if it is telling me that results has both 1 and no items. Am I doing something to cause this?