PHP - Slight Hand

Hi, i made a registration page in php, Only problem is its not submitting anything to the database nor throwing back an errors. I'm confused as to why, the code is below any help will be appreciated thanks

** server.php holds the database info i.e

Code: [Select]
<?php 
///Server Info
$dbhost = "localhost";
$dbuser = "*****";
$dbpass = "******";
$dbname = "****";
$conn = mysql_connect($dbhost,$dbuser,$dbpass)
or die();
mysql_select_db($dbname);
?>
Registration page in question;
Code: [Select]
<?php
require_once('check.php');
session_start();
$name = $_SESSION['name'];
require_once('server.php');
require_once('stats.php');
    if($_POST) {
        function VisitorIP()
    { 
    if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
        $TheIp=$_SERVER['HTTP_X_FORWARDED_FOR'];
    else $TheIp=$_SERVER['REMOTE_ADDR'];
 
    return trim($TheIp);
    }
        $ipaddress = VisitorIP();
        $name = $_POST['username'];
        $namelength = strlen($name);
        $email = $_POST['email'];
        $password = $_POST['password'];
        $passwordlength = strlen($password);
        $confirm = $_POST['confirm'];    
        if($namelength < 3){
            
           $error1="<div class='text1' style='background-color:#FF0;'><span style='color:red'>Error: Your username must be at least 3 characters!</span></div>";
           echo $error1;
          } 
        elseif($passwordlength < 6) {
            $error1="<div class='text1' style='background-color:#FF0;'><span style='color:red'>Error: Password must be at least 6 characters long!</span></div>";
            echo $error1;
        }
        elseif($email == "") {
            $error1="<div class='text1' style='background-color:#FF0;'><span style='color:red'>Error: You must enter an email address!</span></div>";
            echo $error1;
          }   
        elseif($password != $confirm) {
        $error1="<div class='text1' style='background-color:#FF0;'><span style='color:red'>Error: Passwords do not match!</span></div>";
        echo $error1;
          } else {
                include("server.php");
            $query = sprintf("SELECT COUNT(id) FROM players WHERE UPPER(name) = UPPER('%s')",
                mysql_real_escape_string($_POST['username']));
            $result = mysql_query($query);
            list($count) = mysql_fetch_row($result);
            if($count >= 1) { 
$error1="<div class='text1' style='background-color:#FF0;'><span style='color:red'>Error: that username is taken.</span></div>";
echo $error1;

        } else {
                $query1 = sprintf("INSERT INTO players(name,password,email,ip_address) VALUES ('%s','%s', '$email','$ipaddress');",
                    mysql_real_escape_string($_POST['username']),
                    mysql_real_escape_string(md5($password)));
                mysql_query($query1);
            
$error1="<div class='text1' style='background-color:#FF0;'><span style='color:#390'>Congratulations, you registered successfully!</span></div>";
echo $error1;

            }    
         }
    }
?>

2 weeks and i think i found a direction as to what i need.I worte a program and it will post to a php page. The php page needs to take the posted variables ($user) ($pass) and compair them aginst the database for existing users  to return a vail or invaild login. It also needs to check and if not exits, save a 3rd and 4th variable to the the database ($serial) ($ip).  Can someone giv eme guadance as to the commands i can research to accomplish this?

Hello Guys, You  might have known about Luhn Algorithm, which is used to get checksum of IMEI of phones, credit cards etc etc. It is a public domain so it is not used for security but to ensure that client has passed the correct numbers etc etc.   Anyway, I am trying to get my hands on this algorithm and I will build a logic based on luhn algo to get the checksum, where I am stuck is how can I get the alternate numbers from a numeric string, for example I have written the following code to get all the numbers one by one into the array.

$imei = "356565451265856";
$lenOfStr= strlen($imei);
$myArray = array();

//Get all numbers one by one in array
for($i=0; $i < $lenOfStr; $i++){
  $myArray[] = substr($imei,$i,1);
}

// Checking the array
foreach($myArray as $seperatedNumbers){
  echo $seperatedNumbers;
}

No the problem is that I want to select every 2nd number from right to left e-g 5,5,2,... or 6,8,6 How can I get it done?   This logic may not be so good, there may be more brilliant solutions to write luhn algo, but I want to try myself once...    Thanks.
Edited by Digitizer, 31 August 2014 - 04:53 PM.

Someone showed me a while ago this trick for loading variables, but it creates an error when you go to the page initially:

$fname = $_POST['fname'] ? $_POST['fname'] : null;

How do I write the short hand to run correctly?

Alright, this is the code that i cant seem to get working. Its supposed to update the pin_lock field in my database. I have two databases that it needs to read from, the Account database to verify the login, then the Game database to modify the pin_lock field. It comes up that its sucessfully modified the entry but when i check it, its still the same as it was before.

session_start();
if ($_POST["vercode"] != $_SESSION["vercode"] OR $_SESSION["vercode"]=='') 
{ print("<center>Incorrect verification code!"); die(); }
require_once('config.php');
mysql_select_db($accdb);
$accountid=$_POST['accountid'];
$pass=$_POST['pass'];
$email=$_POST["email"];
$idnumber=$_POST["question"];
$phone=$_POST["answer"];
session_start(); 
if(!$_POST["accountid"]) { print("<center>Account ID Field Empty!"); die(); }
if(!$_POST["email"]) { print("<center>E-mail Address Field Empty!"); die(); }
if(!$_POST["question"]) { print("<center>Security Questions Field Empty!"); die(); }
if(!$_POST["answer"]) { print("<center>Answer Field Empty!"); die(); }
if(!ereg("^[0-9a-z]{4,12}$",$accountid)) { print("<center>Account ID Only letters from \"a\" to \"z\" and numbers, lenght of 4 to 12 characters"); die(); }
if(!ereg("^[0-9a-z]{4,14}$",$pass)) { print("<center>Password Only letters from \"a\" to \"z\" and numbers, lenght of 4 to 14 characters"); die(); }
if(!ereg("^[0-9a-zA-Z_]{4,128}$", (strtr($email, Array('@'=>'','.'=>'')))))  { print("<center>E-mail Only letters a to z and special chars @ . are allowed!"); die(); }
if($_POST["pass"]!=$_POST["pass2"]) { print("<center>Passwords do not match!"); die(); }

$ac = mysql_fetch_array(mysql_query(sprintf("SELECT * FROM account WHERE name='$accountid'")));
if (!$ac)
{ print("<center>Account ID does not exist!"); die(); }

$em = mysql_fetch_array(mysql_query(sprintf("SELECT * FROM account WHERE name='$accountid' AND email='$email'")));
if (!$em)
{ print("<center>E-mail is incorrect!"); die(); }

$q = mysql_fetch_array(mysql_query(sprintf("SELECT * FROM account WHERE name='$accountid' AND idnumber='$idnumber'")));
if (!$q)
{ print("<center>Security Question is incorrect!"); die(); }

$an = mysql_fetch_array(mysql_query(sprintf("SELECT * FROM account WHERE name='$accountid' AND phone='$phone'")));
if (!$an)
{ print("<center>Answer is incorrect!"); die(); }
$ac = mysql_fetch_array(mysql_query(sprintf("SELECT * FROM account WHERE name='$accountid'")));
mysql_select_db($gamedb);
$temp["query"] = sprintf("UPDATE cq_user SET lock_key='0' WHERE account_id='$selectedid'");
  if (!mysql_query($temp["query"])) { die(mysql_error()); }
  else { print("<center>You bank pin has been removed!"); }

Any ideas what is wrong with it?

I'm modifying a script I built a few months ago to allow someone to upload an attachment via a form and then email it off. It is expected that this form will receive a lot of hits and so it won't be possible to store the attachment in a folder before emailing it out (right away).

Problem: If I skip the move_uploaded_file part, and just attach the tmp_name the tmp_name is how I receive it rather than the PDF that it actually is.

How can i change the documents name before sending it off, without saving it to a general location. My worry with saving it is, someone uploads their copy and at the exact moment it's supposed to email off, someone somewhere else uploads theirs and it overwrites the first persons and then the email gets sent with the newest persons data.

index.php
Code: [Select]
<form action="process.php" method="post" enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="file" />
<br />
<input type="submit" name="submit" value="Submit" />
</form>

process.php
Code: [Select]
<?php
print_r($_FILES);
if ($_FILES["file"]["type"] == "text/plain") {
if ($_FILES["file"]["error"] > 0) {
echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
} else {
echo "Upload: " . $_FILES["file"]["name"] . "<br />";
echo "Type: " . $_FILES["file"]["type"] . "<br />";
echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";

if (file_exists("upload/" . $_FILES["file"]["name"])) {
echo $_FILES["file"]["name"] . " already exists. ";
} else {
move_uploaded_file($_FILES["file"]["tmp_name"],
"upload/" . $_FILES["file"]["name"]);
echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
}
}
} else {
echo "Invalid file";
}
?>