PHP - Help Making Image Compare Script

How can I make my PHP script non accessible to users? I am wanting to cron the script and don't want anybody to spam the script as it would cause performance issues if it was constantly spammed by a user. Can I put the PHP file anywhere that only the server can run it?   Thanks any info would be awesome.  

Well the subject line is pretty explicit.  I found this script that uploads a picture onto a folder on the server called images, then inserts the the path of the image on the images folder onto a VACHAR field in a database table. 
Code: [Select]




<?php

//This file inserts the main image into the images table.

//address error handling

ini_set ('display_errors', 1);
error_reporting (E_ALL & ~E_NOTICE);





//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

//Check whether the session variable id is present or not. If not, deny access.
if(!isset($_SESSION['id']) || (trim($_SESSION['id']) == '')) {
header("location: access_denied.php");
exit();
}

        else{ 







// Check to see if the type of file uploaded is a valid image type

function is_valid_type($file)

{

     // This is an array that holds all the valid image MIME types

     $valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif");

 

     if (in_array($file['type'], $valid_types))

         return 1;

     return 0;

}

 

// Just a short function that prints out the contents of an array in a manner that's easy to read

// I used this function during debugging but it serves no purpose at run time for this example

function showContents($array)

{

     echo "<pre>";

     print_r($array);

     echo "</pre>";

}

 

// Set some constants

 

// This variable is the path to the image folder where all the images are going to be stored

// Note that there is a trailing forward slash

$TARGET_PATH = "images/";

 

// Get our POSTed variable

$image = $_FILES['image'];

 

// Sanitize our input

$image['name'] = mysql_real_escape_string($image['name']);

 

// Build our target path full string.  This is where the file will be moved to

// i.e.  images/picture.jpg

$TARGET_PATH .= $image['name'];

 

// Make sure all the fields from the form have inputs

if ( $image['name'] == "" )

{

     $_SESSION['error'] = "All fields are required";

     header("Location: member.php");

     exit;

}

 

// Check to make sure that our file is actually an image

// You check the file type instead of the extension because the extension can easily be faked

if (!is_valid_type($image))

{

     $_SESSION['error'] = "You must upload a jpeg, gif, or bmp";

     header("Location: member.php");

     exit;

}

 

// Here we check to see if a file with that name already exists

// You could get past filename problems by appending a timestamp to the filename and then continuing

if (file_exists($TARGET_PATH))

{

     $_SESSION['error'] = "A file with that name already exists";

     header("Location: member.php");

     exit;

}

 

// Lets attempt to move the file from its temporary directory to its new home

if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))

{

     // NOTE: This is where a lot of people make mistakes.

     // We are *not* putting the image into the database; we are putting a reference to the file's location on the server

     $sql = "insert into images (member_id, image_cartegory, image_date, image) values ('{$_SESSION['id']}', 'main', NOW(), '" . $image['name'] . "')";

     $result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());

     header("Location: images.php");

echo "File uploaded";

     exit;

}

else

{

     // A common cause of file moving failures is because of bad permissions on the directory attempting to be written to

     // Make sure you chmod the directory to be writeable

     $_SESSION['error'] = "Could not upload file.  Check read/write persmissions on the directory";

     header("Location: member.php");

     exit;

}







        } //End of if session variable id is not present.
 


?> 


The script seems to work fine because I managed to upload a picture which was successfully inserted into my images folder and into the database.
Now the problem is, I can't figure out exactly how to write the script that displays the image on an html page. I used the following script which didn't work.


Code: [Select]

//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

$sql = mysql_query("SELECT* FROM images WHERE member_id = '".$_SESSION['id']."' AND image_cartegory = 'main' ");
$row = mysql_fetch_assoc($sql);
$imagebytes = $row['image'];
header("Content-type: image/jpeg");
print $imagebytes;







Seems to me like I need to alter some variables to match the variables used in the insert script, just can't figure out which.  Can anyone help??

Hello community,

I am working on a database of specialties in the hospital I work.

The doctor's referral requests are sent to a mySQL database and I have, with the help of online guidance, produced a working php script that displays the information I need it to.

However, I need it a little bit more specific.

I intend to make multiple copies of this file for each specialty, so that when they open the file they only have the requests for that particular specialty.

My question is, with reference to my code below, can I make echo information so that online, for instance, if 'specialty1 = gastroenterology' (as in, that particular specialty that that referral request is for), then only the rows on the database that have that particular text are displayed only?

Hope that makes sense.

Code below for your reference and assistance is highly appreciated.

<!DOCTYPE html>
<html>
<head>
<title>Specialty Referral Form</title>
<style>
table {
border-collapse: collapse;
width: 100%;
color: #000000;
font-family: arial;
font-size: 10px;
text-align: center;
}
th {
background-color: #588c7e;
color: white;
}
tr:nth-child(even) {background-color: #f2f2f2}
</style>
</head>
<body>
<table>
<tr>
<th>Patient Details</th>
<th>Hospital Number</th>
<th>Date of Birth</th>
<th>Referred by:</th>
<th>New/Repeat Visit to Patient</th>
<th>Specialty</th>
<th>Admission Date</th>
<th>Too Ill for Clinic?</th>
<th>Diagnosis Aware?</th>
<th>Question</th>
<th>History</th>
<th>Medications</th>
<th>Examination</th>
<th>Results</th>
<th>WorkingDiagnosis</th>
<th>Investigation(s) Requested</th>
</tr>

<?php

$conn = mysqli_connect("localhost", "view", "", "referral");

// Check connection

if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
$sql = "SELECT patientdetails, hospitalnumber, DoB, referral, admission, specialty1, admissiondate, illness, awareness, question, history, medications, examination, results, workingdiagnosis, investigations FROM referralform";
$result = $conn->query($sql);

if ($result->num_rows > 0) {

// output data of each row
while ($row = $result->fetch_assoc()) {
echo "<tr><td>" . $row["patientdetails"]. "</td><td>" . $row["hospitalnumber"] . "</td><td>" . $row["DoB"] . "</td><td>" 
. $row["referral"] . "</td><td>" . $row["admission"] . "</td><td>" . $row["specialty1"] . "</td><td>" . $row["admissiondate"] . "</td><td>"
. $row["illness"] . "</td><td>" . $row["awareness"] . "</td><td>" . $row["question"] . "</td><td>" . $row["history"] . "</td><td>"
 . $row["medications"] . "</td><td>" . $row["examination"] . "</td><td>" . $row["results"] . "</td><td>" . $row["workingdiagnosis"] . "</td><td>"
  . $row["investigations"]. "</td></tr>";
}
echo "</table>";
} else { echo "0 results"; }
$conn->close();
?>
</table>
</body>
</html>

I guess what I am looking for is something like echo specialty1 IF it writes a particular specialty and only that specialty.

Thank you.

Edited April 2, 2020 by samanj

I am doing more practice, and I am trying to interpret the WHY on some certain aspects of this script. I can get it to work and it works as expected, but I am not sure what it works (got most of it sorted it).. Here is my first question:

Question 0. About 3/4 down the script: ($i = 0; $i < $cols; $i++) - cannot understand why $i < $cols is less operator? Shouldn't it be >= cause if it's less won't it miss a record?

Question 1. About 3/4 down the script: echo $x = ($i * $rows) + $j;
I do not understand what purpose this serves. I echoed the results and it's just scattered multiplication large numbers!

You'll see that im echoing out all kinds of data, just so I can see what's going on.

<?php
  $host = "localhost";
  $user = "root";
  $pass = "";
  $db = "simple_mysql";
  $cxn = mysqli_connect($host, $user, $pass, $db) or die("Could not connect to the server.");
  $query = "SELECT * FROM all_illinois";
  $result = mysqli_query($cxn, $query) or die(mysqli_error());
  $results = array();
  while ($row = mysqli_fetch_assoc($result))
      $results[] = $row;
  // output: Array
  echo $results . "<br />";
  $cols = 3;
  // output: 3  
  echo $cols . "<br />";
  $rows = ceil(count($results) / $cols);
  // output: 1300
  echo(count($results)) . "<br />";
  // output: 3
  echo $cols . "<br />";
  // output: 434
  echo $rows . "<br />";
  echo '<table style="text-align:left;margin-left:0px;width:500px;">' . "\n";
  for ($j = 0; $j < $rows; $j++) {
      echo "  <tr>\n";
      for ($i = 0; $i < $cols; $i++) {
          echo $x = ($i * $rows) + $j;
          echo $i . "<br />";
          if (isset($results[$x])) {
              $row = $results[$x];
              echo $row . "<br />";
              echo '    <td><a href="' . $row['state_id'] . '/' . $row['city_name'] . '">' . $row['city_name'] . "</a></td>\n";
          } else {
              echo "    <td></td>\n";
          }
      }
      echo " </tr>\n";
  }
  echo '</table>';
?>

Here is a smaller portion of table dump if it helps at all:

--
-- Table structure for table `all_illinois`
--

CREATE TABLE IF NOT EXISTS `all_illinois` (
  `state_id` varchar(255) NOT NULL,
  `city_name` varchar(255) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

--
-- Dumping data for table `all_illinois`
--

INSERT INTO `all_illinois` (`state_id`, `city_name`) VALUES
('135', 'Abingdon'),
('135', 'Adair'),
('135', 'Addieville'),
('135', 'Addison'),
('135', 'Adrian'),
('135', 'Akin'),
('135', 'Albany'),
('135', 'Albers'),
('135', 'Albion'),
('135', 'Alden'),
('135', 'Aledo'),
('135', 'Alexander'),
('135', 'Alexis'),
('135', 'Algonquin'),
('135', 'Alhambra'),
('135', 'Allendale'),
('135', 'Allerton'),
('135', 'Alma'),
('135', 'Alpha'),
('135', 'Alsey'),
('135', 'Alsip'),
('135', 'Altamont'),
('135', 'Alto Pass'),
('135', 'Alton'),
('135', 'Altona'),
('135', 'Alvin'),
('135', 'Amboy'),
('135', 'Anchor'),
('135', 'Ancona'),
('135', 'Andalusia'),
('135', 'Andover'),
('135', 'Anna'),
('135', 'Annapolis'),
('135', 'Annawan'),
('135', 'Antioch'),
('135', 'Apple River'),
('135', 'Arcola'),
('135', 'Arenzville'),
('135', 'Argenta'),
('135', 'Arlington'),
('135', 'Arlington Heights'),
('135', 'Armington'),
('135', 'Armstrong'),
('135', 'Aroma Park'),
('135', 'Arrowsmith'),
('135', 'Arthur'),
('135', 'Ashkum'),
('135', 'Ashland'),
('135', 'Ashley'),
('135', 'Ashmore'),
('135', 'Ashton'),
('135', 'Assumption'),
('135', 'Astoria'),
('135', 'Athens'),
('135', 'Atkinson'),
('135', 'Atlanta'),
('135', 'Atwater'),
('135', 'Atwood'),
('135', 'Auburn'),
('135', 'Augusta'),
('135', 'Aurora'),
('135', 'Ava'),
('135', 'Aviston'),
('135', 'Avon'),
('135', 'Baileyville'),
('135', 'Baldwin'),
('135', 'Bardolph'),
('135', 'Barnhill'),
('135', 'Barrington'),
('135', 'Barry'),
('135', 'Barstow'),
('135', 'Bartelso'),
('135', 'Bartlett'),
('135', 'Basco'),
('135', 'Batavia'),
('135', 'Batchtown'),
('135', 'Bath'),
('135', 'Baylis'),
('135', 'Beardstown'),
('135', 'Beason'),
('135', 'Beaverville'),
('135', 'Beckemeyer'),
('135', 'Bedford Park'),
('135', 'Beecher'),
('135', 'Beecher City'),
('135', 'Belknap'),
('135', 'Belle Rive'),
('135', 'Belleview'),
('135', 'Belleville'),
('135', 'Bellflower'),
('135', 'Bellmont'),
('135', 'Bellwood'),
('135', 'Belvidere'),
('135', 'Bement'),
('135', 'Benld'),
('135', 'Bensenville'),
('135', 'Benson'),
('135', 'Benton'),
('135', 'Berkeley'),
('135', 'Berwick');

The php code won`t redirect to user/member.php need some help

<?php
session_start();
include 'includes/database.php';

if(isset($_POST['login']))
{

$username = trim(addslashes($_POST['username']));
$password = md5(trim($_POST['password']));

$query = mysql_query("SELECT * FROM Users WHERE Username = '$username' AND Password = '$password' LIMIT 1") or
die(mysql_error());

$row = mysql_fetch_array($query);

if(mysql_num_rows($query) > 0)
{

if($row['Activated'] > 0)
{

$_SESSION['s_logged_n'] = 'true';
$_SESSION['s_username'] = $username;
$_SESSION['s_name'] = $row['Name'];

header("Location: user/member.php");


} else {

echo "You have to activate your account!";
}

}

}

else
{
echo "You have to fill out the login form!";
}

?>

I need help making the uploaded image file name, that's chosen to be uploaded, be displayed on the html page with the path /upload/ added to the beginning of the displayed file name like so:
../upload/test.png
Any help/improvements will be appreciated.

<html>
 <head>
  <title>PHP Test</title>
 </head>
  <body>
 <?php
 if ($form_submitted == 'yes') {
 $allowedExts = array("gif", "jpeg", "jpg", "png");
 $temp = explode(".", $_FILES["file"]["name"]);
 $extension = strtolower( end($temp) );
 if (  $_FILES["file"]["size"] < 200000
       && in_array($extension, $allowedExts) )
 {
     if ($_FILES["file"]["error"]!= 0)
     {
         echo "Return Code: " . $_FILES["file"]["error"] . "<br>";
     } else {
         $length = 20;
         move_uploaded_file($_FILES["file"]["tmp_name"], "upload/" . $newfilename );
         $file_location = '<a href="http://../upload/' . $newfilename . '">' . $newfilename . '</a>';
     }
 } else {
   echo "Invalid upload file";
 }
?>
<label for="file">Filename:</label>
<input type="file" name="file" id="file">
</body>
</html>

Is there a way to use php to incorporate a folder of pictures as a clickable slideshow.

For instance.... using a pic as a button... to go to the next pic.... except in quantities of 100... without having to manually write the code for each page...?

In HTML:
Code: [Select]
<a href="index3.html"><img src="2.jpg" /></a>
<a href="index4.html"><img src="3.jpg" /></a>
<a href="index5.html"><img src="4.jpg" /></a>
<a href="index6.html"><img src="5.jpg" /></a>
<a href="index7.html"><img src="6.jpg" /></a>
<a href="index8.html"><img src="7.jpg" /></a>
<a href="index9.html"><img src="8.jpg" /></a>
Something like using a basic rotating script activated on mouse click? How do i convert this into a button without making 100 pages?
Code: [Select]
<img src="/path/to/images/
rotate.php?img=my_static_image.jpg" />

I have come up with the rotate.php file as following:

Code: [Select]
<?php


$folder = '/oprah/is/sofuckingfat.com/images/';

$extList = array();
$extList['gif'] = 'image/gif';
$extList['jpg'] = 'image/jpeg';
$extList['jpeg'] = 'image/jpeg';
$extList['png'] = 'image/png';


/* I believe that most of the following can be omitted once it hits the timer / countdown script */

$img = null;

if (substr($folder,-1) != '/') {
$folder = $folder.'/';
}

if (isset($_GET['img'])) {
$imageInfo = pathinfo($_GET['img']);
if (
    isset( $extList[ strtolower( $imageInfo['extension'] ) ] ) &&
        file_exists( $folder.$imageInfo['basename'] )
    ) {
$img = $folder.$imageInfo['basename'];
}
} else {
$fileList = array();
$handle = opendir($folder);
while ( false !== ( $file = readdir($handle) ) ) {
$file_info = pathinfo($file);
if (
    isset( $extList[ strtolower( $file_info['extension'] ) ] )
) {
$fileList[] = $file;
}
}
closedir($handle);

if (count($fileList) > 0) {
$imageNumber = time() % count($fileList);
$img = $folder.$fileList[$imageNumber];
}
}

if ($img!=null) {
$imageInfo = pathinfo($img);
$contentType = 'Content-type: '.$extList[ $imageInfo['extension'] ];
header ($contentType);
readfile($img);
} else {
if ( function_exists('imagecreate') ) {
header ("Content-type: image/png");
$im = @imagecreate (100, 100)
    or die ("Cannot initialize new GD image stream");
$background_color = imagecolorallocate ($im, 255, 255, 255);
$text_color = imagecolorallocate ($im, 0,0,0);
imagestring ($im, 2, 5, 5,  "IMAGE ERROR", $text_color);
imagepng ($im);
imagedestroy($im);
}
}

?>


Would be more or less converting the rotate.php script into the base for the link structure. I assume the timing element in this script would be omitted with a replacement or nothing. I can't figure out what will be the quickest way to go about making the href follow the folder contents. I just want a basic click on the pic to go to the next one until it ends. Thoughts anyone?

Can php be used to get two blog entries and compare them side by side, with a choice one which one to use.

A bit like wikipedia has ?

Hi,
I want to compare the tables from 2 mysql databases in a table.
This is what I have:
for($i=0;$i<$maxCount;$i++)
{
echo "<tr>"; // start row
//fist data square
if ($i < count($db1))
echo "<td>{$db1[$i]}</td>";
else
echo "<td></td>";

echo "<td></td>"; // middle 


//last
if ($i < count($db2))
echo "<td>{$db2[$i]}</td>";
else
echo "<td></td>";

echo "</tr>"; // end row
}

that will put make a nice table for me to see. What I'd like to do next is have all identical sql tables lined up.
So for e.g I have 2 arrays of table names that will look like this:

Databse 1 Database 2 table1 table1 table2 table3 table4 table4
does that make sense?
Also is there a more elegant way of scripting what I have?

I run an article directory. I was wondering how I could check an article that is currently pending review against published articles in our database. What I am looking to do is to place the content of the body in the pending article into a variable. That much is easy and I know how to do that. Then I would like to use that variable to compare against other content in our database and have it output a percentage of how close it is to any other article already published in our database. Any direction our guidance with this would be so greatly appreciated.   


Thanks!

Hi, I am trying to write an SQL to XML converter, so so far I have all the records inputted into the db tables, and now I want to append a child, but I don't know how to compare current row's field value with the next row below it, specifically I want to check if a current row is parent of the next row. I have already got the XML to SQL function working (some bugs but for the most part it's working)

So for eg:
<?php
$query=mysql_query("SELECT * FROM edge");
while($row=mysql_fetch_assoc($query) ) {
     if($row['target'] is parent of the next row),  then
                append the next row as child of current row
}

?>

Table edge is one of the tables that hold target node/source(aka: parent) nodes.

Any help much appreciated!

Hi!
I have a table called "Categories"

Here is the structu
id | Categories               |  ParentCategories
1  | Rings                        | Parent Category
2  | Pendants                  | Parent Category
3  | Ladies Rings             | Rings
4  | Ladies Pendants       | Rings
5  | Gents Rings              | Gents
6  | Necklaces                 | Parent Category

But Necklaces is one of those who is not going to have any subcategories or you can say, it is going to be a category by itself.

So how can I construct a php statement to get data out of MySQL to determine that Necklaces is a Category which does not have subcategories.

Please help !

Thank you !

- Xeirus.

I know the forum is supposed to be used to help with any code I have come up with but here's to taking a shot anyway:

I am in need of creating a php script that will allow me to input two different XML files and upon pressing "go" will compare these two files and save only the differences to a new xml file.

Thing is, I have no idea where to start. Are there any php functions that exist that I can use to do this? If not, cn someone help me create one? Would this be better handled in javascript? If so, how can I do so using a method similar to the above?

Any kind of help would be greatly appreciated.

I have this code that compares date times but im not sure if its correct.

if("2008-08-10 00:00:00.0" > strtotime("now")) {
        echo "here";
    }


The code echo's here, but it shouldn't because the time is less than the current time. Any ideas?