PHP - Non Email Activated User Warning

Actually, what i want to do is to use the email to fetch the $email,$password and $randomnumber from database after

Hi,

I have setup a standard contact form that sends an email using php "mail" function in my new website.
Today, I received an email from a potential client through my website. However, unfortunately, I did not receive the user's email address because (as I discovered after wards), there was a syntax problem in the function, so all I received is their name and message.
I am certain that the user has entered their email address because the form has validation, it just didn't send me the address so I have no way to contact that client...
Is there a way to retrieve the lost email address from the server somehow?

Thanks in advance

I am having a problem with my User Log-In...


When a User creates an account on my website, an e-mail is sent that looks like this...
Quote

Congratulations!

Your account has been created, and a confirmation e-mail sent to: "john.doe@mail.com"

Please click on the link in that e-mail to activate your account.



Then when they click on the link, it takes them to my 'activate.php" page which updates the User's record by removing the Activation Code.

The "Activation" seems to work fine.  However, the problem that I just realized is that I am doing nothing to prevent someone from Registering, NOT Activating his/her account, but still being able to Log In?!

I guess what I need to do when a User logs in is check to be sure that the "activation_code" column is NULL, right?

Here is a snippet of my Log In script...

if (empty($errors)){
// Valid form data.

// ************************
// Find Member Record. *
// ************************

// Connect to the database.
require_once(WEB_ROOT . 'private/mysqli_connect.php');

// Build query.
$q = 'SELECT id, first_name
FROM member
WHERE email=? AND pass=?';

// Prepare statement.
$stmt = mysqli_prepare($dbc, $q);

// Bind variables to query.
mysqli_stmt_bind_param($stmt, 'ss', $email, $pass);

// Execute query.
mysqli_stmt_execute($stmt);

// Store results.
mysqli_stmt_store_result($stmt);

// Check # of Records Returned.
if (mysqli_stmt_num_rows($stmt)==1){
// Member was Found.

// Bind result-set to variables.
mysqli_stmt_bind_result($stmt, $memberID, $memberFirstName);

// Fetch record.
mysqli_stmt_fetch($stmt);

// Set Session variables.
$_SESSION['memberID'] = $memberID;
$_SESSION['memberFirstName'] = $memberFirstName;
$_SESSION['loggedIn'] = TRUE;


What would be the best way to fix this?

Thanks,


Debbie

hi all,

im working on a email send to de user who register on the website!

now i get the email but its not email/html view and it gets in to the unwanted folder, also as i siad trust this emailadress!
what do i wrong in the code??

the whole php file see //#### XXX ### where i need help!
Code: [Select]
<?php
Session_start();

if(file_exists("support/functions_alg.php")) // user,pass and database file
{
  include("support/functions_alg.php");      // database functions file
}

if($_REQUEST)
{
$email=$_REQUEST['email'];
$pass=md5( $_REQUEST['pass'] );
$secc=md5( $_REQUEST['sec_code'] );

function check_code($secc) 
{
  if($secc == $_REQUEST['mdcode'])
  {
   return true;
  }
  else
  {
return false;
  }
}

function check_email_address($email) 
{
  // First, we check that there's one @ symbol, and that the lengths are right
      if (!ereg("^[^@]{1,64}@[^@]{1,255}$", $email)) 
  {
        // Email invalid because wrong number of characters in one section, or wrong number of @ symbols.
        return false;
       }
    
  // Split it into sections to make life easier
      $email_array = explode("@", $email);
  $local_array = explode(".", $email_array[0]);
  for ($i = 0; $i < sizeof($local_array); $i++) 
  {
        if (!ereg("^(([A-Za-z0-9!#$%&'*+/=?^_`{|}~-][A-Za-z0-9!#$%&'*+/=?^_`{|}~\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))$", $local_array[$i])) 
{
  return false;
        }
      }
      if (!ereg("^\[?[0-9\.]+\]?$", $email_array[1])) 
  { 
   // Check if domain is IP. If not, it should be valid domain name
        $domain_array = explode(".", $email_array[1]);
if (sizeof($domain_array) < 2) 
{
  return false; 
  // Not enough parts to domain
        }
    
    for ($i = 0; $i < sizeof($domain_array); $i++) 
{
          if (!ereg("^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))$", $domain_array[$i])) 
  {
return false;
          }
        }
      }
      return true;
    }

if(check_email_address($email))
{
  if(check_code($secc))
  {
    //$res=register($email,$pass,$name,$address,$huisnr,$zipcode,$plaats,$dob_year,$dob_month,$dob_date,$tel);
    $res=true;
if($res==true)
    {
// ##### XXX #####   
//mail function
       /* subject */
  $subject = "Activeer uw Profiel";
  /* To send HTML mail, you can set the Content-type header. */
  $headers  = "MIME-Version: 1.0 \r\n";
  $headers .= "Content-type: text/html; charset=utf-8 \r\n";

  /* additional headers */
  $headers .= "From: " . $mailme . " \r\n";
  /* and now mail it */

  $text = '
  <html>
  <head>
  <title>Nieuw profiel</title>
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  </head>
  <body>
  Activeer uw profiel op:<br><br>
  <a href="http://'.$_SERVER['SERVER_NAME'].'/?reg_result&activatie=true">Activeer</a>br><br>
  Veel plezier op onze website!
  </body>
  </html>';

  $res = mail($email,$subject,$text,$headers);
  
  echo("<script>document.location.href='index.php?topic=reg_result&".$res."'</script>");
  //header('location: "'.$_SERVER['HTTP_REFERER'].'?topic=reg_result&true"');
//###### XXXX #######
}
else
{
  echo "<table border=1 class=outer_tbl align=center width=50% style='border-collapse:collapse;'>";
  echo "<tr><td align=center>";
  echo "Fout tijdens registratie<br><a href='javascript:history.back();'>Klik hier</a> om opnieuw te proberen";
  echo "</tr></td></table>";
}
      }
  else
  {
echo("<script>document.location.href='".$_SERVER['HTTP_REFERER']."&error=code'</script>");
//header('location: "'.$_SERVER['HTTP_REFERER'].'&error=code"');
  } 
}
else
{
  echo("<script>document.location.href='".$_SERVER['HTTP_REFERER']."&error=email'</script>");
  //header('location: "'.$_SERVER['HTTP_REFERER'].'&error=email"');
}
}
?>

the recived email looks like :

Content-type: text/html; charset=utf-8  From: info@pc-hulp-online.nl
Return-Path: anonymous@server70.hosting2go.nl
X-OriginalArrivalTime: 30 Apr 2012 10:47:41.0985 (UTC) FILETIME=[AB19D110:01CD26BE]



        <html>
        <head>
        <title>Nieuw profiel</title>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        </head>
        <body>
        Activeer uw profiel op:<br><br>
        <a href="http://nieuw.pc-hulp-online.nl/?reg_result&activatie=true">Activeer</a>br><br>
        Veel plezier op onze website!
        </body>
        </html>

please help me!!

thnx,

Hi I have created several php scripts which adds a user to the database and allows them to login aswell. I want an email confirmation link in which the user has to click in order for them to get added to the database. Below is my code any help in what php I put in and where would be most helpful, thanks in advance. Chris

***********************************************************************
mainregister.php

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Web Server</title>
<link href="css/style.css" rel="stylesheet" type="text/css" />
</head>
<body>
<table width="300" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC">
<tr>
<form name="form1" method="post" action="checkregister.php">
<td>
<table width="100%" border="0" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td colspan="3"><strong>Member Login </strong></td>
</tr>
<tr>
<td width="78">Username</td>
<td width="6">:</td>
<td width="294"><input name="myusername" type="text" id="myusername"></td>
</tr>
<tr>
<td>Password</td>
<td>:</td>
<td><input name="mypassword" type="text" id="mypassword"></td>
</tr>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td><input type="submit" name="Submit" value="Register"></td>
</tr>
</table>
</td>
</form>
</tr>
</table>
</body>
</html>

******************************************************************************
checkregister.php

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>
<body>
<?php
$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="webserver"; // Database name
$tbl_name="members"; // Table name

// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="INSERT INTO $tbl_name (username,password) VALUES('$myusername','$mypassword')";
$result=mysql_query($sql);
echo "Registered to database";

?>
</body>
</html>