PHP - Help With This Scenario

Hi

I am wanting to put my php/mysql queries into a functions file (using php include), I will include that php file at the top of the page which requires the sql query.

But.... i have added the query into a function and just wanting to know if it is secure to pass the username and password as arguments when calling the function?

e.g.

fuctionname($username, $password)

Hi Guys

Sorry for the lame title but I have absolutely no idea how to word this.

I have the following code which pulls message from a database:


$messages_query = mysql_query("SELECT * FROM messages WHERE id='$message_id' AND recipient='$username'");
$messages_row = mysql_fetch_assoc($messages_query);

$sender = $messages_row['sender'];
$date = $messages_row['date'];
$time = $messages_row['time'];
$subject = $messages_row['subject'];
$message = $messages_row['message'];
$recipient = $message_query['recipient'];

echo $sender . "<br />";
echo $date . "<br />";
echo $time . "<br />";
echo $subject . "<br />";
echo $message . "<br />";


As you can see, it only pulls the data if id='$message_id' AND recipient='$username'.

I wish to perform a die ("You are not authorised to view this message!"); if id='$message_id' or recipient='$username' is different.

Example:
The database reads id: 1 & username: user

The data would be displayed if $message_id = 1 and $username = user.
The die would be performed if $message_id = 5 and $username = user

I hope that makes sense, iv had a problem trying to word it correctly let alone come up with a solution.

Does anybody know what i could do?

Thanks

Hi...


I have three types of night premium and it only computed of the schedule is  night shift

I have this Night Premium Types:
- NightPremiumRegular (Monday-Saturday)
-NightPremiumSunday (Sunday)
- NightPremiumHoliday

I created table which has a listed of holidays date.

Now I encountered problem in sum of hours in NightPremiumHoliday

here is my code:
Code: [Select]
//===================Display Night Premium=========================

$sql = "SELECT  r.EMP_NO, r.LOGIN, DATE(LOGIN) AS DATE_LOGIN, DATE_FORMAT(LOGIN, '%W') AS SUNDAY, r.LOGOUT, sec_to_time(SUM(time_to_sec(Rendered))) AS Rendered FROM $PAYROLL.reg_att r, $ADODB_DB.employment em, $ADODB_DB.personal p WHERE time_to_sec(time(LOGIN)) BETWEEN time_to_sec('17:00:00') AND time_to_sec('22:35:00') AND time_to_sec(time(LOGOUT)) BETWEEN time_to_sec('05:35:00') AND time_to_sec('09:35:00') AND r.EMP_NO = em.EMP_NO AND em.EMP_ID = '$currentEmpID' AND p.EMP_ID = '$currentEmpID' AND DATE_FORMAT(LOGIN, '%W') = 'Sunday'";
$rsNPSun = $conn2->Execute($sql);

$NPSunHours = $rsNPSun->fields['Rendered'];
$NPSunDate = $rsNPSun->fields['SUNDAY'];

$NPSunHours = substr($NPSunHours, 0, 5);
$NPSunHours = str_replace(':', '.', $NPSunHours);
     
$sql = "SELECT OP FROM ot WHERE Category = 'NightPremiumSunday'";
$rsOTCatSun = $conn2->Execute($sql);
$NPSun_OP = $rsOTCatSun->fields['OP'];

$NPSunAmt = (($Rate / 8 * 1.35 * $NPSun_OP) * $NPSunHours);
$NPSunAmt = number_format($NPSunAmt, 2, '.', '');         

$smarty->assign('NPSunHours', $NPSunHours);
$smarty->assign('NPSunAmt', $NPSunAmt);

//=================NP REG=======
$sql = "SELECT  r.EMP_NO, r.LOGIN, DATE(LOGIN) AS DATE_LOGIN, DATE_FORMAT(LOGIN, '%W') AS Week_Days, r.LOGOUT, sec_to_time(SUM(time_to_sec(Rendered))) AS Rendered FROM $PAYROLL.reg_att r, $ADODB_DB.employment em, $ADODB_DB.personal p WHERE time_to_sec(time(LOGIN)) BETWEEN time_to_sec('17:00:00') AND time_to_sec('22:35:00') AND time_to_sec(time(LOGOUT)) BETWEEN time_to_sec('05:35:00') AND time_to_sec('09:35:00') AND r.EMP_NO = em.EMP_NO AND em.EMP_ID = '$currentEmpID' AND p.EMP_ID = '$currentEmpID' AND DATE_FORMAT(LOGIN, '%W') IN ('Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday')";
$rsNPReg = $conn2->Execute($sql);

$NPRegHours = $rsNPReg->fields['Rendered'];
$NPRegDate = $rsNPReg->fields['Week_Days'];

$NPRegHours = substr($NPRegHours, 0, 5);
$NPRegHours = str_replace(':', '.', $NPRegHours);


$sql = "SELECT OP FROM ot WHERE Category = 'NightPremiumRegular'";
$rsOTCatSun = $conn2->Execute($sql);
$NPReg_OP = $rsOTCatSun->fields['OP'];

$NPRegAmt = (($Rate / 8 * $NPReg_OP) * $NPRegHours);
$NPRegAmt = number_format($NPRegAmt, 2, '.', '');         

$smarty->assign('NPRegHours', $NPRegHours);
$smarty->assign('NPRegAmt', $NPRegAmt);

//=======================Night Premium Holiday==============
$sql = "SELECT r.EMP_NO, r.LOGIN, DATE(LOGIN) AS DATE_LOGIN, r.LOGOUT, sec_to_time(SUM(time_to_sec(Rendered))) AS Rendered FROM $PAYROLL.reg_att r, $ADODB_DB.employment em, $PAYROLL.holiday_date h WHERE time_to_sec(time(LOGIN)) BETWEEN time_to_sec('17:00:00') AND time_to_sec('22:35:00') AND time_to_sec(time(LOGOUT)) BETWEEN time_to_sec('05:35:00') AND time_to_sec('09:35:00') AND DATE(LOGIN) = h.holiday_date AND r.EMP_NO = em.EMP_NO AND em.EMP_ID = '$currentEmpID'";
$rsNPHol = $conn2->Execute($sql);

$NPHolHours = $rsNPHol->fields['Rendered'];

$NPHolHours = substr($NPHolHours, 0, 5);
$NPHolHours = str_replace(':', '.', $NPHolHours);

$sql = "SELECT OP FROM ot WHERE Category = 'NightPremiumHoliday'";
$rsOTCatSun = $conn2->Execute($sql);
$NPHol_OP = $rsOTCatSun->fields['OP'];

$NPHolAmt = (($Rate / 8 * 2.05 * $NPHol_OP) * $NPHolHours);
$NPHolAmt = number_format($NPHolAmt, 2, '.', '');         


$smarty->assign('NPHolHours', $NPHolHours);
$smarty->assign('NPHolAmt', $NPHolAmt);

$NPHours = ($NPRegHours + $NPSunHours + $NPHolHours);
$NPHours = number_format($NPHours, 2, '.', '');     

$NP_Amt = ($NPRegAmt + $NPSunAmt + $NPHolAmt);
$NP_Amt = number_format($NP_Amt, 2, '.', '');   

$smarty->assign('NP_Hours', $NPHours);
$smarty->assign('NP_Amt', $NP_Amt);

for example:
I have attendance 2012-01-01  and it's sunday and it is also holiday..
And the rendered is 8

so the NightPremiumSunday and NightPremiumHolidays computed, but i got problem in computations of NPHours.

I got NPHours = 16, supposively 8, but because it is sunday and holiday it sum the result of hours in Sunday and Holiday..

How can I only get 8 hours if my date is holiday?

Thank you so much..

Any help is highly appreciated..

feel free to ask me if theirs a question.

Hi All,

What I'm trying to do:

I have a page where users can upload pictures of their property / house.  They can upload a picture, add a specific name such as (Front of house), add a description of each picture and choose an order of appearance.

Once the pictures are uploaded, I would like them to display on screen, in a smaller resolution.  Once you click on the picture it will become the original size again.

In displaying the pictures, I would need a fancy way of allowing the user to choose the order, specifically allowing them to choose the "display" picture, much like realtor sites.

Can anyone give me some suggestions / tutorials as to what I am looking for?  I'm assuming this would be a mixture of PHP and JQuery?

Thanks for reading.