PHP - Script For Query A Db Help Needed

Hello All!

I was hoping one of you phpFreaks could help me out

I have the following code that produces links from a database. Certain sets of results have over 3000 links. I can currently set the amount of links to display per page but that's it.

I would like to be able to truncate the links to all the pages using pagination.

Any help would be greatly appreciated!

Here is the code:

<?php 
 
echo "Results<br><HR WIDTH=100% SIZE=1><br>";
mysql_connect("mysite.com", "mysite_mysite", "mysitepassword") or die(mysql_error()); 
mysql_select_db("user_database") or die(mysql_error()); 
 

 if (isset($_GET['pagenum']))
 {
  $pagenum = $_GET['pagenum'];
 } else
 {
  $pagenum = 1;
 } 
 
$rpg = $pagenum;
$data = mysql_query("SELECT * FROM mydb WHERE mfg='golf'") or die(mysql_error()); 
$rows = mysql_num_rows($data); 
$page_rows = 80; 
 
$last = ceil($rows/$page_rows); 
 
 if ($pagenum < 1)
  {
   $pagenum = 1;
  } 
 elseif ($pagenum > $last) 
  {
   $pagenum = $last;
  } 
 
$max = 'limit ' .($pagenum - 1) * $page_rows .',' .$page_rows; 
$data_p = mysql_query("SELECT * FROM mydb WHERE mfg='golf' $max") or die(mysql_error()); 
 
 while($info = mysql_fetch_array( $data_p )) 
  { 
   $page=$info['link'];
echo "<a href='$page' class='blue1'>". $info['title'] . "</a><br>"; 
  } 
   echo "<p>";
 
if ($pagenum > $last) 
  {$pagenum=1;} 
else
 { 
  echo "<HR WIDTH=100% SIZE=1><br>";
  $pagenum = 1;
    while ($pagenum <= $last)
    {
       $next = $pagenum;
       echo " <a href='{$_SERVER['PHP_SELF']}?pagenum=$next' class='g5'>$pagenum</a> ";
       $pagenum = $pagenum+1;
      
    }
  Echo "<br><br>Page $rpg of $last <br>";
 }

?>

Simple insertion of pagination would be GREAT! Thanks guys....

Hi all! I have a problem with an image uploading script and at the moment it keeps the image name the same, obviously people don't have very adventurous names for their images "image1" and they are over writing each other. How do I put a random 5 digit number on the end to make them all unique? Thanks.

Code: [Select]

$image1 = mysql_real_escape_string("$idir" . $_FILES['fupload2']['name']);
$image2 = mysql_real_escape_string("$idir" . $_FILES['fupload3']['name']);
$image3 = mysql_real_escape_string("$idir" . $_FILES['fupload4']['name']);
$logo = mysql_real_escape_string("$idir" . $_FILES['fupload']['name']);
$idir = "uploads/";   // Path To Images Directory


if (isset ($_FILES['fupload'])){

//upload the image to tmp directory
$url = $_FILES['fupload']['name'];   // Set $url To Equal The Filename For Later Use
if ($_FILES['fupload']['type'] == "image/jpg" || $_FILES['fupload']['type'] == "image/jpeg" || $_FILES['fupload']['type'] == "image/pjpeg") {
$file_ext = strrchr($_FILES['fupload']['name'], '.');   // Get The File Extention In The Format Of , For Instance, .jpg, .gif or .php
$copy = copy($_FILES['fupload']['tmp_name'], "$idir" . $_FILES['fupload']['name']);   // Move Image From Temporary Location To Permanent Location
}
}
if (isset ($_FILES['fupload2'])){

//upload the image to tmp directory
$url = $_FILES['fupload2']['name'];   // Set $url To Equal The Filename For Later Use
if ($_FILES['fupload2']['type'] == "image/jpg" || $_FILES['fupload2']['type'] == "image/jpeg" || $_FILES['fupload2']['type'] == "image/pjpeg") {
$file_ext = strrchr($_FILES['fupload2']['name'], '.');   // Get The File Extention In The Format Of , For Instance, .jpg, .gif or .php
$copy = copy($_FILES['fupload2']['tmp_name'], "$idir" . $_FILES['fupload2']['name']);   // Move Image From Temporary Location To Permanent Location
}
}
if (isset ($_FILES['fupload3'])){

//upload the image to tmp directory
$url = $_FILES['fupload3']['name'];   // Set $url To Equal The Filename For Later Use
if ($_FILES['fupload3']['type'] == "image/jpg" || $_FILES['fupload3']['type'] == "image/jpeg" || $_FILES['fupload3']['type'] == "image/pjpeg") {
$file_ext = strrchr($_FILES['fupload3']['name'], '.');   // Get The File Extention In The Format Of , For Instance, .jpg, .gif or .php
$copy = copy($_FILES['fupload3']['tmp_name'], "$idir" . $_FILES['fupload3']['name']);   // Move Image From Temporary Location To Permanent Location
}
}
if (isset ($_FILES['fupload4'])){

//upload the image to tmp directory
$url = $_FILES['fupload4']['name'];   // Set $url To Equal The Filename For Later Use
if ($_FILES['fupload4']['type'] == "image/jpg" || $_FILES['fupload4']['type'] == "image/jpeg" || $_FILES['fupload4']['type'] == "image/pjpeg") {
$file_ext = strrchr($_FILES['fupload4']['name'], '.');   // Get The File Extention In The Format Of , For Instance, .jpg, .gif or .php
$copy = copy($_FILES['fupload4']['tmp_name'], "$idir" . $_FILES['fupload4']['name']);   // Move Image From Temporary Location To Permanent Location
}
}

I need help with the attached script.  I am using ipage.com to host and when I log in with credentials that have been placed in the database I just get the login prompt coming up every time.  There is no die action that says access failed or anything.

Hi!
I hope somebody can help me what im do wrong.
i have checked that the data from the file is in $source_file but nothing imports to the database

Code: [Select]
<?php

include('config.php');
include('opendb.php');

if(isset($_POST['upload']))
{
$source_file = @$_POST['userfile'];

//$source_file = fopen('http://localhost/test/upload/test.csv', 'r');
$target_table = 'foretag';
function csv_file_to_mysql_table($source_file, $target_table, $max_line_length=10000) {
     if (($handle = fopen("$source_file", "r")) !== FALSE) { 
        $columns = fgetcsv($handle, $max_line_length, ","); 
        foreach ($columns as $column) { 
            $column = str_replace(".","",$column); 
        } 
        $insert_query_prefix = "INSERT INTO $target_table (".join(",",$columns).")\nVALUES";
         while (($data = fgetcsv($handle, $max_line_length, ";")) !== FALSE) { 
            while (count($data)<count($columns)) 
                array_push($data, NULL); 
            $query = "$insert_query_prefix (".join(",",quote_all_array($data)).");";
             mysql_query($query); 
        } 
        fclose($handle); 
    } 
} 

function quote_all_array($values) { 
    foreach ($values as $key=>$value) 
        if (is_array($value)) 
            $values[$key] = quote_all_array($value); 
        else 
            $values[$key] = quote_all($value); 
    return $values; 
} 

function quote_all($value) { 
    if (is_null($value)) 
        return "NULL"; 

    $value = "'" . mysql_real_escape_string($value) . "'"; 
    return $value; 
}
}
include('closedb.php');

echo "<br>done<br>";

?>

Hi,

I am pretty much a new newbie when it comes to PHP, and have a problem that I need to solve, for a website that has to go live tomorrow.

Basically I have been using a javascript upload script called 'uploadify' which had an option for the upload folder which was added to the script in the form:

Code: [Select]
'folder'    : '/songs/<?php echo $_SESSION["name"];?>',
I added the php echo to return the username from a PHP login, so it gets added to the path to the upload folder (each user has their own subfolder for uploading to).

With the new version of the uploadify script, the folder option has been moved to a separate PHP file where it is now in the form:

Code: [Select]
$targetFolder = '/songs/';
I need to find a way of adding the username variable to this line.  I have tried using echo in various ways, and googled about, but it has stumped me, simple as it may be.

If anyone could let me know how I construct this line I'd be very grateful.  Time is of the essence, as they say...

Thanks,

Nick

If you are a PHP expert, then I really your help. I have a question regarding PHP sessions and their security. So here is my story ...

I created a login script (login.php) for my website. When a user goes to the login.php page, they see a login form that they must fill with their username and password to login to the members' area and view their profile, etc.

On that login page, when the user enters their username and password and then clicks the "Login" button, my script filters the data, sends MySQL query and checks if the login is valid. If the login is NOT valid, then they get a "Login Failed" message. If the login is valid, I register their username and the password in sessions and redirect them to the members.php page.

Here is some of my code for my login.php page after mysql confirms the login is valid


<?php

$query = mysql_query('SELECT * FROM `users` WHERE username='$user' AND password='$pass'");
$numRows = mysql_num_rows($query);

if ( $numRows ) {
     
      // login is valid
      $_SESSION['username'] = $user;
      $_SESSION['pass'] = $pass;

      // redirect user to members area
      header('Location: /members.php');

} else {
     
       // login is invalid
       echo "Login failed";

}

?>


My question is ... is this login script secured? I mean, I am not generating any session id or any cookie. I am just storing the username and the password in two session variables and those are the things that i will use to display the user's profile, etc. Can attackers attack this script? Is this secured or is there any other way I can make it stronger?

?> at the end of the script is not bright red. how can i fix it as it seems to be linked with the body text as its the same burgundy colour

following on from my my php form error thread

Hey all I am almost done with my custom script and need one thing.  Here is my code:

Code: [Select]
$con = mysql_connect(DB", "XXXX", "XXXX");

if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
mysql_select_db("XXXXXXX", $con);

$name = $_POST['name'];
$result = mysql_query("SELECT * FROM track WHERE name LIKE '%$name%'");
$num_rows = mysql_num_rows($result);


while($row = mysql_fetch_array($result))
  {


echo $row['id'];
echo $row['name'];
echo $row['phone'];
}




?>

The above works good but currently if the user submits the form empty it still pulls all the names in the database due to the "like" use.  I need to use like in this way because I need to be able to search partial names.  How can I make it stay the exact same but ignore the query results if its NULL or empty? 

Thanks!

TRUNCATE TABLE CubeCart_cats_idx;
INSERT INTO CubeCart_cats_idx (productid, cat_id) SELECT productid, cat_id FROM CubeCart_inventory;

I an running the following in MyPHPAdmin, but need this to be automated in a PHP script, how would I do it ?
all help is appreciated, still new to PHP & MySQL 

many thanks

D

Hi guys and girls,

I am having trouble finding out wether the query made no matches rather than just displaying the matches.

So what I would want is for the search term to look at the database, and if there's not matches then say, "No match for your search term"

Code: [Select]
function search_applications() {

global $dbc;

echo '<form method="post" action="" id="search">'. "\n";
echo '<label for="search_applications">Search for an application</label>'. "\n";
echo '<input type="text" name="search_applications" />'. "\n";
echo '<input type="submit" name="submit" />'. "\n";
echo '</form>'. "\n";


if(isset($_POST['submit'])){

$search_applications = $_POST['search_applications'];


if ($search_applications == "")
 {
 echo "<p>You forgot to enter a search term"; 
 }

//if (preg_match("/\b$search_applications\b/i")){
if(preg_match("/^[  a-zA-Z]+/", $search_applications)){


//for testing the variables
//echo $search_applications;

$sql="SELECT title, category, content FROM distributors_content WHERE  title LIKE '%" . $search_applications . "%' OR category LIKE '%" . $search_applications  ."%' OR content LIKE '%" . $search_applications  ."%'";
$result=mysqli_query($dbc, $sql);
//-create  while loop and loop through result set
while($row=mysqli_fetch_array($result)){
          $title  =$row['title'];
       $category=$row['category'];
       $content=$row['content'];
       
//-display the result of the array
echo "<ul>\n";
echo '<li> <a href="index.php?article='.$row['title'].'&&page=application" title=""> '.$title . ' ' . $category .  '</a></li>'."\n";
echo "</ul>";
}
}else{

echo "<p>Enter another search term</p>";
}
}
}

Any pointers would be good

Thank you

I don't even know how to explain what I want to do as a subject. >.<

Okay, so what I want to do is pull up all the entries in a table, (in this case "horse") for a specific location. Then, I want to pull all the results for that horse from the "result" table. Next, I want to compare each result from that table to a list of if/elseif for points. Finally, I want all the points gathered and totaled and displayed for that horse, and every other horse at that location, in a single page.

Here is the coding that I have:

Code: [Select]
<?
---- connection information is here but removed -----


echo "<table>
<tr><td><b>Name</b></td> <td><b>Points</b></td> <td><b>Title</b></td></tr>";

//finds horses at specific location
$query = "SELECT * FROM horse WHERE location='DESIRED_LOCATION' ORDER BY name";
$result = mysql_query($query) or die (mysql_error());
while ($row = mysql_fetch_array($result)) {
$id = $row['id'];
$name = $row['name'];

        //gathers results based upon the above two pieces of information
        //the include is shown below as it contains the point info
include('includes/points.php');
$query92 = "SELECT * FROM results WHERE MAIN_KEY='$id' OR MAIN_KEY = '$name'";
$result92 = mysql_query($query92) or die (mysql_error());
while($row92 = mysql_fetch_array($result92)) {
$place = $row92['place'];
echo "<tr><td>$name</td> <td>$points</td> <td>$title</td></tr>";
}
}
echo "</table>";
?>
and this is the points.php file:
Code: [Select]
<?

if($place === '1st') {$points += 50;}
elseif($place === '2nd') {$points += 45;}
elseif($place === '3rd') {$points += 40;}
elseif($place === '4th') {$points += 35;}
elseif($place === '5th') {$points += 30;}
elseif($place === '6th') {$points += 25;}
elseif($place === '7th') {$points += 20;}
elseif($place === '8th') {$points += 15;}
elseif($place === '9th') {$points += 10;}
elseif($place === '10th') {$points += 10;}
elseif($place === 'CH') {$points += 50;}
elseif($place === 'RCH') {$points += 40;}
elseif($place === 'TT') {$points += 30;}
elseif($place === 'T5') {$points += 30;}

if($points < 500) {$title = "No Title";}
elseif ($points >= 500 && $points < 1000) {$title = "Champion";}
elseif ($points >= 1000 && $points < 2500) {$title = "Grand Champion";}
elseif ($points >= 2500 && $points < 5000) {$title = "State Champion";}
elseif ($points >= 5000 && $points < 8000) {$title = "National Champion";}
elseif ($points >= 8000 && $points < 10000) {$title = "World Champion";}
elseif ($points >= 10000) {$title = "Hall of Fame";}
?>

Good Afternoon Team,

Am sitting with something simple using the language below. If I copy the echo output of my query as included below it works perfectly in phpmyadmin but doesn't work on a website. Variables all seem to echo consistently/correctly and POST checks seem to verify this is working correctly as well. I worry the error comes with the syntax I used in combining the sql queries. That, or perhaps LAST_INSERT_ID does not work in the php script as well as it does in phpmyadmin. All help appreciated.

if(isset($_POST[`region_id`])) {
    $competition_id = htmlentities($_POST[`competition_id`],ENT_QUOTES,`UTF-8`);
    $division_name = htmlentities($_POST[`division_name`],ENT_QUOTES,`UTF-8`);
    $region_id = htmlentities($_POST[`region_id`],ENT_QUOTES,`UTF-8`);
    $division_edit_submit = "INSERT INTO division_table (competition_id,division_name) VALUES (`$competition_id`,`$division_name`);
    INSERT INTO region_assignment_table (division_id,region_id) VALUES ((LAST_INSERT_ID()),`1`)";    
    mysqli_query($connection,$division_edit_submit);
    echo $division_edit_submit;
    }

 

Hey guys, so I have this script: <?php
$databasehost = "localhost";
$databasename = "import";
$databasetable = "import";
$databaseusername="import";
$databasepassword = "password";
$fieldseparator = ",";
$lineseparator = "\n";
$csvfile = "test.csv";

if(!file_exists($csvfile)) {
die("File not found. Make sure you specified the correct path.");
}

try {
$pdo = new PDO("mysql:host=$databasehost;dbname=$databasename",
$databaseusername, $databasepassword,
array(
PDO::MYSQL_ATTR_LOCAL_INFILE => true,
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION
)
);
} catch (PDOException $e) {
die("database connection failed: ".$e->getMessage());
}

$affectedRows = $pdo->exec("
LOAD DATA LOCAL INFILE ".$pdo->quote($csvfile)." REPLACE INTO TABLE `$databasetable`
FIELDS TERMINATED BY ".$pdo->quote($fieldseparator)."
LINES TERMINATED BY ".$pdo->quote($lineseparator));

echo "Loaded a total of $affectedRows records from this csv file.\n";

?>

I have a really weird problem.
I'm trying to run a mysql query that works fine in phpmyadmin but in php script is giving me an error.
The query is:

Code: [Select]
(SELECT DISTINCT art.`TEMPLATE`,gal.`ARTICLE_ID`,art.`TITLE`,art.`DESCRIPTION`,MATCH(art.`TITLE`,art.`DESCRIPTION`,gal.`CONTENT`) AGAINST ('WORD*' IN BOOLEAN MODE) AS score
FROM articles art,galeries gal
WHERE gal.`ARTICLE_ID`=art.`ARTICLE_ID` AND MATCH(art.`TITLE`,art.`DESCRIPTION`,gal.`CONTENT`)
AGAINST ('WORD* ' IN BOOLEAN MODE))
UNION
(SELECT DISTINCT `TEMPLATE`,`ARTICLE_ID`,`TITLE`,`DESCRIPTION`,MATCH(`TITLE`,`DESCRIPTION`,`CONTENT`)
AGAINST ('WORD* ' IN BOOLEAN MODE) AS score
FROM articles
WHERE (MATCH(`TITLE`,`DESCRIPTION`,`CONTENT`) AGAINST ('WORD* ' IN BOOLEAN MODE)))
ORDER BY score DESC LIMIT 0,30
Snipset from php script code:


function search($start_row,$ammount,$search_key,$pages){
        $start_row = intval($start_row) * $ammount;

        $return_val = "";
        $symbols = array('/','\\','\'','"',',','.','<','>','?',';',':','[',']','{','}','|','=','+','-','_',')','(','*','&','^','%','$','#','@','!','~','`'

);//this will remove punctuation
        $pattern = "#[^(\w|&#945;|&#946;|&#947;|&#948;|&#949;|&#950;|&#951;|&#952;|&#953;|&#954;|&#955;|&#956;|&#957;|&#958;|&#959;|&#960;|&#961;|&#963;|&#964;|&#965;|&#966;|&#967;|&#968;|&#969;|&#913;|&#914;|&#915;|&#916;|&#917;|&#918;|&#919;|&#920;|&#921;|&#922;|&#923;|&#924;|&#925;|&#926;|&#927;|&#928;|&#929;|&#931;|&#932;|&#933;|&#934;|&#935;|&#936;|&#937;|&#962;|&#940;|&#941;|&#972;|&#943;|&#973;|&#974;|&#942;|&#970;|&#971;|&#912;|&#944;|&#902;|&#904;|&#908;|&#906;|&#910;|&#911;|&#905;|&#938;|&#939;|\d|\'|\"|\.|\!|\?|;|,|\\|\/|\-|:|\&|@)]+#";

        $search_key = greek_text::to_upper($search_key);
        $wc = strip_tags($search_key);
        $wc = preg_replace($pattern, " ", $wc);

        for ($i = 0; $i < sizeof($symbols); $i++) {

                $wc = str_replace($symbols[$i],' ',$wc);
        }

        $wc = str_replace("&#900;", " ", $wc);
        $wc = str_replace(chr(162), " ", $wc);

        if( !$keep_numbers ) {
            $wc = preg_replace('#(^|\s+)[\d\s]+(\s+|$)#',' ',$wc);
            $pattern = '#(^|\s+)([0-9]+[a-zA-Z&#945;&#946;&#947;&#948;&#949;&#950;&#951;&#952;&#953;&#954;&#955;&#956;&#957;&#958;&#959;&#960;&#961;&#963;&#964;&#965;&#966;&#967;&#968;&#969;&#913;&#914;&#915;&#916;&#917;&#918;&#919;&#920;&#921;&#922;&#923;&#924;&#925;&#926;&#927;&#928;&#929;&#931;&#932;&#933;&#934;&#935;&#936;&#937;&#962;&#940;&#941;&#972;&#943;&#973;&#974;&#942;&#970;&#971;&#912;&#944;&#902;&#904;&#908;&#906;&#910;&#911;&#905;&#938;&#939;]+\s*)+(\s+|$)#';
            preg_match($pattern,$wc,$aa);
            $wc = preg_replace($pattern, " ", $wc);
        }
        $wc = trim(preg_replace("/\s\s+/", " ", $wc));
        $wc = explode(" ", $wc);
        $cleaned_keyword = array_filter($wc);

        $cleaned_keyword = greek_text::removeStopWordsFromArray($cleaned_keyword);
        $stemmed_keywords = greek_text::stemWordsArray($cleaned_keyword);

        $query = "(SELECT DISTINCT art.`TEMPLATE`,gal.`ARTICLE_ID`,art.`TITLE`,art.`DESCRIPTION`,MATCH(art.`TITLE`,art.`DESCRIPTION`,gal.`CONTENT`) AGAINST ('";

        while(list($key,$val)=each($stemmed_keywords)){
                if($val<>" " and strlen($val) > 1){
                        $query .= $val."*";
                        $search_keys .= $val."* ";

                }
        }

        $query .= "' IN BOOLEAN MODE) AS score FROM articles art,galeries gal WHERE gal.`ARTICLE_ID`=art.`ARTICLE_ID` AND MATCH(art.`TITLE`,art.`DESCRIPTION`,gal.`CONTENT`) AGAINST ('".$search_keys."' IN BOOLEAN MODE))";
        $query .= " UNION (SELECT DISTINCT `TEMPLATE`,`ARTICLE_ID`,`TITLE`,`DESCRIPTION`,MATCH(`TITLE`,`DESCRIPTION`,`CONTENT`) AGAINST ('".$search_keys."' IN BOOLEAN MODE) AS score FROM articles WHERE (MATCH(`TITLE`,`DESCRIPTION`,`CONTENT`) AGAINST ('".$search_keys."' IN BOOLEAN MODE))) ORDER BY score DESC LIMIT ".intval($start_row).",".$ammount;
                
        $rs = $this->dbActions->execQuery($query);
        $this->dbActions->execQuery("INSERT INTO searches (`KEY`,`DATE`,`RESULTS`) VALUES ('".$search_key."',NOW(),".$pages.")");
        $search_results = "<div id='results'>";
        while($row = mysql_fetch_array($rs)){           
           $search_results.= "<div id='result'>";
           $search_results.= "<div class='result_title'><h4><a href='article.php?articleId=".$row["ARTICLE_ID"]."'>".$row['TITLE']."</a></h4></div>";
           $search_results.= "<div class='result_description'>".$row['DESCRIPTION']."</div>";
           $search_results.= "</div>";
           $search_results.= "<div class='result_seperator'></div>";
        }
        $search_results .= "</div>";
        $return_val = $search_results;

        return $return_val;
    }


dbactions class:


require 'includes/errors.php';
error_reporting(0);

class DBActions{

var $dbCon;

var $errorHandler;

function DBActions(){

$this->dbCon = $this->dbCon();

$errorHandler = new errors(1);

}

private function dbCon(){

require 'conf/configuration.php';

$dbcon = mysql_connect($dbUrl,$dbUser,$dbPass);

if(!$dbcon)trigger_error("Unable to connect to database $dbUrl for user $dbUser",E_USER_ERROR);

mysql_select_db($dbName);

mysql_query("SET NAMES 'UTF8'");

mysql_query('set character set utf8');

return $dbcon;

}

function dbClose(){

if($this->dbCon)

mysql_close($this->dbCon);

}

function execQuery($query){

              
                $result = mysql_query($query,$this->dbCon);
                                               

$msg = "Unable to execute query ".$query;
                if(mysql_num_rows($result) > 0)

return $result;

else if($result == false)

trigger_error($msg,E_USER_ERROR);

else

return $result;

}

function send_error_mail(){

$this->errorHandler->sendErrorEmail();

}
}


I've try everything but can't get this working..
Any healp whould be really appreciated.

Thanks in advance.