PHP - Using Concat To Order A List, Read To Understand Better

im trying to pull the information for a post which is to include 3 db tables(posts, users, attachments)

Ive tried the following code:

Code: [Select]
$query = $link->query("SELECT
            p.*,
            u.u_username, u.u_posts, u.u_avatar,
            u.u_signature, u.u_avatar_cropped,
            group_concat(a.a_name, a.a_size, a.a_date_posted separator '<br />') attachments
            FROM ".TBL_PREFIX."posts as p
            JOIN ".TBL_PREFIX."users as u
            ON (u.u_username = p.p_poster)
            LEFT JOIN ".TBL_PREFIX."post_attachments as a
            USING (".TBL_PREFIX."posts.p_pid)
            WHERE p.p_tid = '$tid'
            GROUP BY p.p_pid
            ORDER BY p.p_time_posted ASC")or die(print_link_error());


but that generates the error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '.p_pid)
         WHERE p.p_tid = '158'
         GROUP BY p.p_pid
         ORDER BY p.p_time_pos' at line 10"

All i am trying to do is pull everything from posts, join users and select all attachments that belong to the post.
Here is my database setup(shortened)

asf_posts
p_pid | p_name | p_poster
  1            test    doddsey65

asf_users
u_uid | u_username
  1        doddsey65

asf_attachments
a_aid | a_pid | a_name
  1            1      name

can anyone help?

I have an existing two table structure where sub-data is related to main data in a many-to-one relationship.   There are several identically named columns in both tables.   (The PHP database class will return an associative array that did not deal with identical keys in the row.)   I'm LEFT JOINing the sub-data to the main-data tables.   When using a stand-alone query browser (to experiment), the display shows all columns, even those column names that appear more than once in the row.   Is there a general approach to making keys (column names) unique strictly using a MySQL SELECT statement?   Perhaps using table aliases, how can I concat the alias to the columns that come from each table?   What I am trying to avoid is giving an alias to each column in a list of column names, such as: SELECT C.name AS C_name C.numb AS C_numb D.name AS D_name D.numb AS D_numb etc.   I am wanting more like the result one could guess would be from: C.* AS C_* D.* AS D_*   Or better: * AS CONCAT(__TABLE__, '_', *) if __TABLE was a magic constant (like PHP's __LINE__, __FILE__, etc).  

Hi all,

Hello!

Hello, I try to get website speed of some website, but i can read only ''domain.com'' i can't read website files like css , js ... why ? i use proxies for this job. here is the php code:

$options = array(
'useragent' => "Firefox (+http://www.firefox.org)", // who am i
'connecttimeout' => 120, // timeout on connect
'timeout' => 120, // timeout on response
'redirect' => 10, // stop after 10 redirects
'referer' => "http://www.google.com",
'proxyhost' =>'85.25.8.14:80'
);
$response = http_get("http://solve-ict.com/wp-content/themes/ict%20theme/js/jquery-1.7.1.min.js", $options , $info);

but it works fine with http://domain.com/ , but with files css or js it gives 404, using some free proxy servers available ? Thanks.

Hi everyone. I'm very new into self learning programming. Presently I'm trying to develop a simple basic Robot that would only Place a Market Order every seconds and it will cancel the Order every followed seconds. Using the following library:
https://docs.b2bx.exchange/en/_docs/api-reference.html#private-api

It would place Trade Order at a ( Price = ex.com api * Binance api Aggregate Trades Price)

I have already wrote the api to call for xe.com exchange rate with php 

<?php

$auth = base64_encode("username:password");
$context = stream_context_create([
    "http" => [
        "header" => "Authorization: Basic $auth"
    ]
]);
$homepage = file_get_contents("https://xecdapi.xe.com/v1/convert_from?to=NGN&amount=1.195", false, $context );
$json = json_decode($homepage, TRUE);
foreach ($json as $k=>$to){
    echo $k; // etc
};


?>

And also for the Binance Aggregate Price in JavaScript

 

<script>
var burl = "https://api3.binance.com";

var query = '/api/v3/aggTrades'; 

query += '?symbol=BTCUSDT';

var url = burl + query;

var ourRequest = new XMLHttpRequest();

ourRequest.open('GET',url,true);
ourRequest.onload = function(){
    console.log(ourRequest.responseText);
}
ourRequest.send();
</script>

  My problem  is how to handle these two api responds  and also the functions to use them to place a trade and cancel it.
Please help me out. Thanks in advance on any help.

Trying to get this done:

Page_1 has many external links, when certain links are clicked i do not want user to go directly to page, but rather go to a special add page_2 where user must click a second time on the link to finally get there.

The add page_2 must show on screen the name of the initial link from page_1, it must change accordingly with the link it came from page_1,once on page_2 the hyperlink redirects outside the site.

So far i am thinking give an id to the div or "<a href..." on page_1 then somehow have page_2 detect that id and fill in the variable for the final external link. Other wise is there a way to detect a url from incoming?

I guess a similar example is how some domain name sellers landing page will indicate the name of the site. Such as "Thisdomain.com" is for sale. same landing page but the name changes according to the domain that was typed.

I got a question im using izabi for me im one who loves the software. But there some quirks that they forgot to add when making the mail system. I was wondering how it would be possible to code in a peice of php where it says read after someone read the email. If you need a copy of the mail mail script let me know.

I've got.

Ok, if you've helped with any of my questions before (thanks again to those who have) you know that I'm fairly new to php and still learning.  This brings me to another question...

I have read the post on header errors and I understand that in order to prevent these errors or warnings I need to  process a form BEFORE OUTPUTTING ANYTHING TO THE BROWSER.  The thing is, I'm having a problem understanding how I can do this with the code that I have written.  Can someone please look at my code and explain what is causing the header warning that I'm getting and help me to understand how to fix it?

Here's my code (warning message is following the code):
Code: [Select]
<?php
session_start(); // Starts the session.
?>

<html>

<head>
<title>Welcome to CaresAbout.us!</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

<SCRIPT TYPE="text/javascript">    <!-- THIS IS LINE 11 -->
<!--
function popup(mylink, windowname)
{
if (! window.focus)return true;
var href;
if (typeof(mylink) == 'string')
   href=mylink;
else
   href=mylink.href;
window.open(href, windowname, 'width=400,height=200,scrollbars=yes');
return false;
}
//-->
</SCRIPT>


<style type="text/css">
<!--
html { overflow: -moz-scrollbars-vertical; }
html { overflow-x: auto; }

body {
background-color: #000000;
background-image: url(bg.png);
background-position: 50% 50%;
background-repeat: repeat-y
}
body,td,th {
font-family: Arial, Helvetica, sans-serif;
font-size: 14px;
}
a:link {
text-decoration: none;
}
a:visited {
text-decoration: none;
}
a:hover {
text-decoration: none;
}
a:active {
text-decoration: none;
}
.bluelink {color: #0000CC}
.blacklink {color: #000000}
-->
</style>

</head>

<body>

<div align="center">
<noscript><font size="+2" color="#000000"><strong>Some features of this site will not operate without Javascript enabled!<br>Please <a href="http://www.heart.org/HEARTORG/form/enablescript.html" class="bluelink">enable Javascript</a> in your browser to have full access.</strong></font></noscript>
  <table width="1000" height="175" border="0" cellpadding="0" cellspacing="0" style="background: transparent url('headbg.png') top center no-repeat;">
    <tr>
  <td height="125" width="160">&nbsp;</td>
  <td height="125">&nbsp;</td>
  <td height="125">&nbsp;</td>
  <td height="125" width="160">&nbsp;</td>
</tr>
<tr>
  <td height="50" width="160">&nbsp;</td>
 
  <?php

include("conf.inc.php"); // Includes the db and form info.
if ($_SESSION['logged'] == 1) { // User is already logged in.
    $_SESSION['email'] = $email;
header("Location: main.php"); // Goes to main page.
exit(); // Stops the rest of the script.
} else {
if (!isset($_POST['submit'])) { // If the form HAS NOT been submitted.
echo "<td width=\"320\" height=\"50\" align=\"left\" valign=\"middle\">&nbsp;</td>";
       echo "<td width=\"360\" height=\"50\" align=\"left\" valign=\"middle\">";
echo "<form name=\"form\" action=\"index.php\" method=\"POST\" style=\"margin-bottom:0;\">";
echo "<a href=\"signup.php\" class=\"bluelink\">Sign Me Up!</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ";
echo "<a href=\"pwordhelp.php\" class=\"bluelink\" onMouseOver=\"window.name = 'main'\" onClick=\"return popup(this, 'notes')\">Forgot Password</a><br>";
echo "<input type=\"text\" name=\"email\" size=\"17\" value=\"Email...\" style=\"color: #999999\" onfocus=\"if (this.value == 'Email...') {this.value=''; this.style.color='#000000'}\"> &nbsp; &nbsp;";
echo "<input type=\"password\" name=\"pword\" size=\"17\" value=\"Password...\" style=\"color: #999999\" onfocus=\"if (this.value == 'Password...') {this.value=''; this.style.color='#000000';}\"> ";
echo "<input type=\"submit\" name=\"submit\" value=\"Submit\">";
echo "</form>";
} else {    // If the form HAS been submitted
$email = form($_POST['email']);
$pword = md5($_POST['pword']); // Encrypts the password.

$q = mysql_query("SELECT * FROM `signin` WHERE email = '$email' AND pword = '$pword'") or die (mysql_error()); // mySQL query
$r = mysql_num_rows($q); // Checks to see if anything is in the db. 

if (!$r) { // There is nothing in the db. The username/password do not match up.

echo "<td width=\"108\" height=\"50\" align=\"left\" valign=\"middle\">&nbsp;</td>";
       echo "<td width=\"572\" height=\"50\" align=\"left\" valign=\"middle\">";
echo "<form name=\"form\" action=\"index.php\" method=\"POST\" style=\"margin-bottom:0;\">";
echo "&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=\"signup.php\" class=\"bluelink\">Sign Me Up!</a>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;";
echo "<a href=\"pwordhelp.php\" class=\"bluelink\" onClick=\"return popup(this, 'notes')\">Forgot Password</a><br>";
echo "<font color=\"#FF0000\"><strong>Incorrect Email or Password.</strong></font>&nbsp; &nbsp;";
echo "<input type=\"text\" name=\"email\" size=\"17\" value=\"Email...\" style=\"color: #999999\" onfocus=\"if (this.value == 'Email...') {this.value=''; this.style.color='#000000'}\"> &nbsp; &nbsp;";
echo "<input type=\"password\" name=\"pword\" size=\"17\" value=\"Password...\" style=\"color: #999999\" onfocus=\"if (this.value == 'Password...') {this.value=''; this.style.color='#000000';}\"> ";
echo "<input type=\"submit\" name=\"submit\" value=\"Submit\">";
echo "</form>";

} else {      // If the username/password is valid

$_SESSION['logged'] = 1; // Sets the session.
$_SESSION['email'] = $email;
header("Location: main.php"); // THIS IS LINE 118
exit(); // Stops the rest of the script.

}
}
}
?>
 
  </td>
  <td height="50" width="160">&nbsp;</td>
</tr>
  </table>
</div>

<?php

echo "<div align=\"center\">";
echo "<table width=\"1000\" height=\"395\"  border=\"0\" cellpadding=\"0\" cellspacing=\"0\">";
  echo "<tr>";
      echo "<td width=\"160\" align=\"center\" valign=\"top\">";
  // Begin Column 1.
  
  include("left.inc.php");
     
  // End Column 1.
  echo "</td>"; 
      echo "<td width=\"680\" align=\"center\" valign=\"top\" style=\"background: #FFFFFF url('bottombg.png') bottom center no-repeat;\">";
  // Begin Column 2.

  echo "<table width=\"650\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">";
     echo "<tr>";
  echo" <td align=\"left\" valign=\"top\">";
  echo "<p><img src=\"nothing.gif\" height=\"5\"><br><img src=\"silouhette.png\" height=\"215\" width=\"325\" align=\"right\"><img src=\"nothing.gif\" height=\"215\" width=\"10\" align=\"right\"><div align=\"justify\"><font size=\"+2\">&nbsp;<br>Welcome students! Now you can contact the teachers and staff members of your school easily, safely, and TOTALLY ANONYMOUSLY!  Just follow these directions:</font></div></p>";
  echo "<p><font size=\"+1\">1. If you haven't already, <a href=\"signup.php\" class=\"bluelink\">sign up</a> for an account.  We will never ask for your name,<br>&nbsp; &nbsp; all you need is an email address (get one free at <a href=\"http://www.google.com/mail\" class=\"bluelink\" target=\"_blank\">Google.com</a>).<br><img src=\"nothing.gif\" height=\"5\"><br></font>";
  echo "** &nbsp;It is very important that your email address is correct because a notification will be sent to your email<br>&nbsp; &nbsp; &nbsp;when you receive a message from a staff member, otherwise you will NEVER be contacted by email.<br><img src=\"nothing.gif\" height=\"10\"><br>";
  echo "<font size=\"+1\">2. Sign in to your account using your email address and password that you chose<br>&nbsp; &nbsp; when you signed up.<br><img src=\"nothing.gif\" height=\"10\"><br>";
  echo "3. Once you are signed in, you will be able to send anonymous messages to staff<br>&nbsp; &nbsp; members, reply to staff members' messages, and play some cool games too!</p>";
  echo "<p><div align=\"center\"><font size=\"+3\">Thank you for using CaresAbout.us!</font></p>";
  echo "</td>";
  echo "</tr>";
  echo "</table>";
  
  // End Column 2.
  echo "</td>";
  echo "<td width=\"160\" align=\"center\" valign=\"top\">";
  // Begin Column 3.
  
  include ("right.inc.php");
  
  //  End Column 3.
  echo "</td>";
  echo "</tr>";
echo "</table>";
echo "</div>";

include("foot.inc.php");

?>

</body>
</html>

Here's the warning message that I'm getting:
Warning: Cannot modify header information - headers already sent by (output started at /home/content/29/6879529/html/calhoun/index.php:11) in /home/content/29/6879529/html/calhoun/index.php on line 118

I'm having a little difficulty understanding this.

I have my PHP script working fine on my webpage now, that querys mysql and echoes the result , but my goal is not to navigate to the page but to just get a return from it via call from my application (http post maybe?)

So my hope is that someone can explain this in terms I can understand.

I need to pass variables to the php code so it only checks a given row in a table.

Example.

SELECT code FROM mytable WHERE user = $variable // this needs to be passed to the code, but not via a form on the page.

Most grateful for any explanaitions.

So I am trying to run my execute function from my database class from my email class. I have SMTP system to handle emails on the website. I am working on a function in the email class called addAccount. It is suppose to add a row in the database under the SMTP table. When I run the function, I get no parsing errors, so I add the or die to my query from the execute function, still nothing at all.
 So here is some code:

-The addAccount function from Email.php:

function addAccount($name, $email, $username, $password, $protocol, $port, $server){
//Error checking & cleaning vars. will be done in the application, not the backend.
if(!empty($name) && !empty($email) && !empty($username) && !empty($password) && !empty($proctocol) && !empty($port) && !empty($server)){
$name = ucwords(strtolower($name));
$email = strtolower($email);
$this->db->execute("INSERT INTO ".TBL_SMTP." (name, email, username, password, protocol, port, server) VALUES ('$name', $email', '$username', '$password' '$protocol', '$port', '$server')", true);
return true;
}else
return false;
}


-The entire email class from Email.php

<?php
require_once("pear/Mail.php");
class Email{
var $from_name, $from_email, $to_name, $to_email, $subject, $body, $host, $port, $username, $password;
private $db = NULL;
function __construct(Database $db){
$this->db = $db;
}
function dbEmail($id, $name, $email, $subject, $body){
$q = $this->db->select(TBL_SMTP, "*", "id='".$id."'");
if($q->numRows() > 0){
$f = $q->fetchRow();
$this->from_name = $f['name'];
$this->from_email = $f['email'];
$this->username = $f['username'];
$this->password = $f['password'];
$this->host = $f['protocol']."://".$f['server'];
$this->port = $f['port'];
$this->to_name = $name;
$this->to_email = $email;
$this->subject = $subject;
$this->body = $body;
return sendEmail();
}else
return false;
}
function sendEmail(){
$from = $this->from_name." <".$this->from_email.">";
$to = $this->to_name." <".$this->to_email.">";
$headers = array ('From' => $this->from,
      'To' => $this->to,
      'Subject' => $this->subject);   
  $smtp = Mail::factory('smtp',
  array ( 'host' => $this->host,
         'port' => $this->port,
     'auth' => true,
     'username' => $this->username,
     'password' => $this->password));
$mail = $smtp->send($to, $headers, $this->body);
if(PEAR::isError($mail)){
   //echo($mail->getMessage()); //For debugging purposes only
return false;
  }else
   return true;
}
function addAccount($name, $email, $username, $password, $protocol, $port, $server){
//Error checking & cleaning vars. will be done in the application, not the backend.
if(!empty($name) && !empty($email) && !empty($username) && !empty($password) && !empty($proctocol) && !empty($port) && !empty($server)){
$name = ucwords(strtolower($name));
$email = strtolower($email);
$this->db->execute("INSERT INTO ".TBL_SMTP." (name, email, username, password, protocol, port, server) VALUES ('$name', $email', '$username', '$password' '$protocol', '$port', '$server')", true);
return true;
}else
return false;
}
}
$email = new Email($db);
?>


The entire database class from Database.php

<?php
class Database{
var $mysqli, $result, $q, $affectedRows;
function __construct($host, $user, $pass, $db){
$this->mysqli = new MySQLi($host, $user, $pass, $db);
}
function execute($query, $error = false, $mode = MYSQLI_STORE_RESULT){
$this->q = $query;
if(!$error)
$result = $this->mysqli->query($query, $mode);
else
$result = $this->mysqli->query($query, $mode) or die($this->mysqli->error);

if(is_object($result) && $result instanceof MySQLi_Result){//if result is a object and is part of the mysqli class?
$this->result = $result;
$this->affectedRows = $this->result->num_rows;
}else
$this->affectedRows = $this->mysqli->affected_rows;
return $this;
}
function fetchRow($mode = MYSQLI_ASSOC){
return $this->result->fetch_assoc($mode);
}
function fetchAll($mode = MYSQLI_ASSOC){
$row = $this->result->fetch_all($mode);
return !empty($row) ? $row : array();//if not empty return row, else return an array?
}
function numRows(){
return $this->affectedRows;
}
function delete($table, $where){
return $this->execute("DELETE FROM ".$table." WHERE ".$where);
}
function deleteAll($table){
return $this->execute("TRUNCATE ".$table);
}
function update($table, $set, $where){
return $this->execute("UPDATE ".$table." SET ".$set." WHERE ".$where);
}
function select($table, $select = "*", $where = NULL){
if(is_null($where))
$where = "";
return $this->execute("SELECT ".$select." FROM ".$table." ".$where);
}
}
$db = new Database(DB_HOST, DB_USER, DB_PASS, DB_DB);
?>


Chances are it is my email class since it was 100% written by me. The database class I had some help from a member here.

What do you experts think?

Hi:

I was reading a tutorial about making password protected pages and how to make the more secure by using MD5 to encrypt (I think) the password.

But. I'm not sure if I don't understand the concept of what it does, or maybe 'm using it wrong.

This is the code I am using:

Database Table:
Code: [Select]
CREATE TABLE `myAdmins` (
  `id` int(4) NOT NULL auto_increment,
  `myUserName` varchar(65) NOT NULL default '',
  `myPassword` varchar(65) NOT NULL default '',
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;

INSERT INTO myAdmins VALUES("1","abc", "123");

I was told in the tutorial to develop something like this (I think I'm doing it wrong):
Code: [Select]
CREATE TABLE `myAdmins` (
  `id` int(4) NOT NULL auto_increment,
  `myUserName` varchar(65) NOT NULL default '',
  `myPassword` varchar(65) NOT NULL default '',
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=utf8 AUTO_INCREMENT=2 ;


INSERT INTO `myAdmins` VALUES(1, 'abc', md5('123'));

My Login.php page:
Code: [Select]
<?php

include('../include/myConn.php');

session_start();
session_destroy();

$message="";

$Login=$_POST['Login'];
if($Login){
$myUserName=$_POST['myUserName'];

//$md5_myPassword=md5($_POST['myPassword']); // Encrypt password with md5() function.
$myPassword=$_POST['myPassword'];

//$result=mysql_query("select * from myAdmins where myUserName='$myUserName' and myPassword='$md5_myPassword'");
$result=mysql_query("select * from myAdmins where myUserName='$myUserName' and myPassword='$myPassword'");
if(mysql_num_rows($result)!='0'){
session_register("myUserName");
header("location:a_Home.php");
exit;
}else{
$message="<div class=\"myAdminLoginError\">Incorrect Username or Password</div>";
}
}
?>


<html>
...

</head>

<form id="form1" name="form1" method="post" action="<? echo $PHP_SELF; ?>">

<? echo $message; ?>

User Name: <input name="myUserName" type="text" id="myUserName" size="40" />
<br /><br />
Password: <input name="myPassword" type="password" id="myPassword" size="40" />

<input name="Login" type="submit" id="Login" value="Login" />

</form>

...
</html>

Protected Page:
Code: [Select]
<?
session_start();
if(!session_is_registered("myUserName")){
header("location:Login.php");
}?>

<html>
...
...
</html>

I know I need to uncomment the 2 lines of code in Login.php and remove the 2 that I'm currently using, and use the Database Table that has the MD5 code, but whenever I do it will not let me login.

The Login.php page (with the Database Table without the MD5 code) works fine.

I just wanted to know if this is the right way to use MD5 to make logins even more secure, of if I am totally off on understanding it.

Any help or code tweaks would be appreciated.

Thanks!

Quote

Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING in C:\xampp\htdocs\hofiles\mschginsert.php on line 12


<?php
$dep=$_POST['dep'];
$name=$_POST['name'];
$apt=$_POST['apt'];
$amtpaid=$_POST['amtpaid'];
$damage=$_POST['damage'];
$month=$_POST['month'];
$courtcost=$_POST['courtcost'];
$nsf=$_POST['nsf'];
$latechg=$_POST['latechg'];
mysql_connect(localhost,root,"");
mysql_select_db(mschgdb) or die "Unable to select database");
$query = "INSERT INTO miscdata VALUES ('','$dep','$name','$apt','$amtpaid','$damage','$month','$courtcost','$nsf','$latechg')";
mysql_query($query);

mysql_close();
?>