PHP - Function That Makes A Lot Of Vars Empty

Hi Guys,

I want my UPDATE function from the code below to only update those fields that are NOT empty - if they are empty on submit then do not update or change any values from that field. I know that sounds odd, but with my file fields, when I submit to change something else at a later date it will overwrite the photo, download1,2 & 3 values and as a result I loose my files from the mysql table.

Cheers, S

<?php 

include('config.php'); 
if (isset($_GET['Ter']) ) { 
$ter = (int) $_GET['Ter']; 
if (isset($_POST['submitted'])) {

//Photo & Document Upload Upload
$timestamp_photo = time();
$timestamp_download1 = time();
$timestamp_download2 = time();
$timestamp_download3 = time();
//This is the directory where the files will be saved
//Photos
$photo_target = "images/"; 
$photo_target = $photo_target .$timestamp_photo. basename( $_FILES['photo']['name']);
//Documents
$download_target = "documents/"; 
$download_target1 = $download_target .$timestamp_download1. basename( $_FILES['download1']['name']);
$download_target2 = $download_target .$timestamp_download2. basename( $_FILES['download2']['name']);
$download_target3 = $download_target .$timestamp_download3. basename( $_FILES['download3']['name']);

//This gets all the other information from the form 
$photo = ($_FILES['photo']['name']);
$download1 = ($_FILES['download1']['name']);
$download2 = ($_FILES['download2']['name']);
$download3 = ($_FILES['download3']['name']);
//Pause Photo/Document Upload


foreach($_POST AS $key => $value) { $_POST[$key] = mysql_real_escape_string($value); } 
$sql= "UPDATE `ter` SET `Ter` =  '{$_POST['Ter']}' , `BranchName` = '{$_POST['BranchName']}' ,  `BranchAddress` =  '{$_POST['BranchAddress']}' ,  `BranchTel` =  '{$_POST['BranchTel']}' , `BranchEmail` =  '{$_POST['BranchEmail']}' , `BranchLink` =  '{$_POST['BranchLink']}' , `Theme` =  '{$_POST['Theme']}' , `LocalInfo` =  '{$_POST['LocalInfo']}' , `BranchInfo` =  '{$_POST['BranchInfo']}' , `photo` =  '$timestamp_photo{$_FILES['photo']['name']}' , `download1` =  '$timestamp_download1{$_FILES['download1']['name']}' , `download1name` =  '{$_POST['download1name']}' , `download2` =  '$timestamp_download2{$_FILES['download2']['name']}' , `download2name` =  '{$_POST['download2name']}' , `download3` =  '$timestamp_download3{$_FILES['download3']['name']}' , `download3name` =  '{$_POST['download3name']}' WHERE `Ter` = '$ter' "; 

mysql_query($sql) or die(mysql_error()); 


//Unpause Photo/Document Upload
//Writes the photo to the server 
if(move_uploaded_file($_FILES['photo']['tmp_name'], $photo_target))
{

echo "<br />The file ".$timestamp_photo. basename( $_FILES['photo']['name']). " has been uploaded. <br />";
}

else {
echo "";
} //End of Photo/Document Upload

//Writes the photo to the server 
if(move_uploaded_file($_FILES['download1']['tmp_name'], $download_target1))
{

echo "<br />The file ".$timestamp_download1. basename( $_FILES['download1']['name']). " has been uploaded. <br />";
}

else {
echo "";
} //End of Photo/Document Upload

//Writes the photo to the server 
if(move_uploaded_file($_FILES['download2']['tmp_name'], $download_target2))
{

echo "<br />The file ".$timestamp_download2. basename( $_FILES['download2']['name']). " has been uploaded. <br />";
}

else {
echo "";
} //End of Photo/Document Upload

//Writes the photo to the server 
if(move_uploaded_file($_FILES['download3']['tmp_name'], $download_target3))
{

echo "<br />The file ".$timestamp_download3. basename( $_FILES['download3']['name']). " has been uploaded. <br />";
}

else {
echo "";
} //End of Photo/Document Upload


echo (mysql_affected_rows()) ? "<br />Edited Branch.<br />" : "<br />Nothing changed. <br />";  
} 
$row = mysql_fetch_array ( mysql_query("SELECT * FROM `ter` WHERE `Ter` = '$ter' "));
?>

hey guys i have a static attribute $_exception_handler which is set to Exception and....now this value could change to a customer exception_handler but what i want to do is


<?php

catch (self::$_exception_handler $e)
{

}


but im getting an error...is there a way of doing this...any help would be greatful thanks

class below
<?php

class Autoloader
{

protected static $_exception_handler = Exception;

protected static $_classes           = array();

public static function load_library($class_name)

{

$file = ROOT . DS. LIBRARY_DIRECTORY . DS . $class_name . CLASS_EXTENSION;

try

{

self::load_class($class_name, $file);

}

catch (self::$_exception_handler $e)

{

echo $e->getMessage();

}

}

public static function load_exception($class_name)

{

}

public static function load_class($class_name, $file)

{

if (!class_exists($class_name, FALSE))

{

if (file_exists($file))

{

require_once $file;

}

else

{

throw new Exception(sprintf('Class %s not found.', $class_name));

}

}

}

}

hi phpfreaks

I am trying to remove the get variables from my url.  the code below works if  I echo it out but to try to modify the $_server variable it will not work. Any ideas?


Code: [Select]
$current_url = explode('?',$_SERVER["REQUEST_URI"]);
 $_SERVER["REQUEST_URI"]= $current_url[0];
 echo $current_url[0]."<br>";

Trying to pass VARS $URL1 and $type to header location.Heres the code.

Code: [Select]
$URL1 = $_POST['url'];
$type = $_POST['type_request'];

session_start();
$string = strtoupper($_SESSION['string']);
$userstring = strtoupper($_POST['userstring']);
session_destroy();   

if (($string == $userstring) && (strlen($string) > 4)) {
header("Location: $success");
exit();
The VARS come from a FORM and then go to this script for checkind data. I need to have them continue to the next page.

I am inplanting a bonus system to a game i have.
I want to say at first that i am not good at php am reading alot and go by learn by doing.
But after a few hours i kinda gave up.

Here is the code.

The page end up blank.
And i tested so my syntax work $cost and $points with only the db stuff and this code
<div class="yellow_12_bold"><? print (number_format($points)); ?> </div>
<div class="yellow_12_bold"><? print (number_format($cost)); ?> </div>
And it does.


Anyway here is the code 
Code: [Select]

<?


$dbq = $db->execute("select * from Bonus where username='$username'");
$points = $dbq->fields['points'];
$allpoints = $dbq->fields['points_total'];

 $dbq->close();






if ($cost == "5" && $amount == "3000") {


     if ($points == "5" || $points > "5") {

        $sqlb = "update UserData set turns=turns+'3000' WHERE turns < 50000 and location != '9' and frozen = '0'";
        $result1 = mysql_query($sqlb);

        $sqlc = "update Bonus set points=points-'5' WHERE username = '$username';
        $result2 = mysql_query($sqlb);


        $points2 = ($points - 5);

           <p align="center" class="black">Thank you! 3000 turns have been added to everyone.
           You have <div class="yellow_12_bold"><? print (number_format($points)); ?> </div> bonus points left. </p>
}
            else {  <p align="center" class="black">Sorry you dont have $cost points. You have <div class="yellow_12_bold"><? print (number_format($points)); ?> </div> bonus points left.</p>
}



} ?>

I have two scripts in question here one is getjob.php <-- here you enter an IPaddress and click connect and it takes you too npchome.php what I don't understand is if I go striaght to npchome.php it pulls up the page, however if I get there but clicking submit in getjob.php it brings up nothing just white page but the address bar tells me i'm at npchome.php I don't understand why?

getjob.php

<?php session_start();

if (!isset($_SESSION['username'])) {
echo "Sorry you must be logged in to view this page<BR>";
echo "Please <a href='index.php'>GO BACK</a> and try again";
exit();
}
?>
<style type="text/css">
<!--
.style2 {
font-size: xx-large;
font-style: italic;
font-weight: bold;
}
.style3 {
font-size: 18px;
color: #FFFFFF;
}
<p style="font-size:.5px">
.style4 {color: #FFFFFF}
.style4 {color: #FFFFFF}
.tabledata th, td{color: #FFFFFF;}

-->
</style>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0" bgcolor="#000000">
  <!--DWLayoutTable-->
  <tr>
    <td width="100%" height="79" valign="top" bgcolor="#000000"><div align="center">
      <p class="style2 style3 style4">HEAVENSHACKERS - JOB BOARD v1.0 </p>
      <p class="style2 style3 style4">&quot;once your job has been completed return here and hand in&quot;</p>
    </div></td>
  </tr>
  <tr>
    <td height="31" valign="top"><div align="center">
      <form action="npchome.php" method="POST">
        <p>
          <input type="text" name="npcip" size='22'>
          &nbsp;&nbsp;&nbsp;
          <input type="submit" name="submit" value="CONNECT" />
        </p>
        <p><img src='images/accept.png' /> <span class="style4">= Accept Job</span> | <img src='images/handin.png' /> <span class="style4">= Hand In Job</span></p>
      </form>
    </div></td>
  </tr>
  <tr>
    <td height="315" valign="top">

      <div align="center">
<?php
$userlevel = $_SESSION['userlevel'];
//include connect
include('connect_live.php');
// include('connect_local.php');
$query = mysql_query("SELECT * FROM site_jobs WHERE level_required ='$userlevel'") or die ("Could Not query npc Database");


echo "<table width='750' border='1' class='tabledata'><tr><th><font size='1'>NPC NAME</font></th><th><font size='1'>JOB DESCRIPTION</font></th><th><font size='1'>LEVEL</font></th><th><font size='1'>EXPERIENCE</font></th><th><font size='1'>CASH</font></th><th><font size='1'>ACTION</font></th></tr>";


while ($row = mysql_fetch_array($query)) {


//set varibles from query
$npc_name = $row['npc_name'];
$level_required = $row['level_required'];
$job_title = $row['job_title'];
$expr_offered = $row['expr_offered'];
$cash_offered = $row['cash_offered'];
$job_status = $row['job_status'];
$longmsg = $row['longmsg'];
$welcomemsg = $row['welcomemsg'];

$npclogfile = $row['npclogfile'];
//set session varibles
$_SESSION['npcip'] = $npcip;
$_SESSION['welcomemsg'] = $welcomemsg;
$_SESSION['longmsg'] = $longmsg;
$_SESSION['npclogfile'] = $npclogfile;


//end getting varibles

echo "<tr align='center'><td>$npc_name</td><td align='left'>$job_title</td><td>$level_required</td><td>$expr_offered</td><td>$cash_offered</td><td><a href='accept.php'><img border='0' src='images/accept.png'></a>&nbsp;&nbsp;&nbsp;<a href='handin.php'><img border='0' src='images/handin.png'></a></td></tr>";

}

?></div></td>
  </tr>
</table>


npchome.php

<?php
session_start();
if (!isset($_SESSION['username']))
{
echo "Sorry you must be logged in to view this page<BR>";
echo "Please <a href='index.php'>GO BACK</a> and try again";
    exit();
}
else {
if ($_SESSION['username']) {
$player = $_SESSION['username'];
$userlevel = $_SESSION['userlevel'];
$cracker = $_SESSION['cracker'];
$systemkey = $_SESSION['systemkey'];
$IP_snooper=$_SESSION['IP_snooper'];
// check for submit
$submit = $_POST['submit'];
// $npcip = ip2long($_POST['npcip']); //database format for compare
$npcip =$_POST['npcip'];
$_SESSION['npcip'] = $npcip;

}
}

//start connection with server to check if IP is valid
include('connect_live.php');
$sql2 = mysql_query ("SELECT * FROM site_jobs WHERE IPaddress='$npcip'");
$query = mysql_fetch_array($sql2) or die (mysql_error());
// $welcomemsg = $sql2['welcomemsg'];
$rows = mysql_num_rows($sql2);

//we have the result of the row count we want that if it's 0 to echo no service found at address; else if more than 0 bring up that account
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>Heavens Hackers : Virtual Online Hacking Simulation</title>

</head>



<body alink="#FFFFFF" vlink="#FFFFFF" link="#FFFFFF">

<table width="650" border="0" align="center" cellpadding="0" cellspacing="0" bgcolor="#000000">

  <!--DWLayoutTable-->

  <tr>

    <td width="10" height="36">&nbsp;</td>

    <td width="630">&nbsp;</td>

    <td width="10">&nbsp;</td>
  </tr>

  <tr>

    <td height="39"></td>

    <td align="center" valign="center"><form action="npchome.php" method="post">
        <a href="getjob.php"><img src="images/home.png" width="26" height="26" border="0" /></a>
        <input type="text" name="npcip" size="60" />
        <input type="submit" name="submit" value="CONNECT" />
    </form></td>

  <td></td>
  </tr>

  <tr>

    <td height="195" colspan="3" valign="top"><table background="images/u2uimg.jpg" width="100%" border="0" cellpadding="0" cellspacing="0">

      <!--DWLayoutTable-->

      <tr>

        <td width="13" height="18"></td>

        <td width="624"></td>

        <td width="13"></td>
      </tr>

      <tr>

        <td height="58"></td>

        <td valign="top"><div align="center">

<?php 
if ($rows==0) {

echo "<font color='#ffffff'>No Service Found At<br /></font><font color='#ffffff'>" .long2ip($npcip)."</font><br />";
echo "<a href='getjob.php'>Please go back and try again</a>";
exit();
}
else {
//display information to crack said IP address
echo "<font size ='medium' color='#ffffff'>You were able to ping<br /></font><font color='#ffffff'>" .long2ip($npcip)."</font>";
}
?>
    </div></td>

        <td></td>
      </tr>

      <tr>

        <td height="34">&nbsp;</td>

        <td>&nbsp;</td>

        <td></td>
      </tr>
      <tr>
        <td height="85" colspan="3" valign="top"><table width="100%" border="0" cellpadding="0" cellspacing="0">
          <!--DWLayoutTable-->
          <tr>
            <td width="219" height="66" valign="top"><div align="center"><?php echo "<font color='#ffffff'><br /><a href='cracknpc.php'>".$cracker."</a></font>"; ?>
              </div></td>
            <td width="215" valign="top"><div align="center"><?php echo "<font color='#ffffff'><br /><a href='crack_ipsnppoernpc.php'>".$IP_snooper."</a></font>"; ?>
              </div></td>
            <td width="216" valign="top"><!--DWLayoutEmptyCell-->&nbsp;</td>
          </tr>
          <tr>
            <td height="19">&nbsp;</td>
            <td>&nbsp;</td>
            <td>&nbsp;</td>
          </tr>
        </table>
        </td>
      </tr>
    </table>    </td>
  </tr>

  <tr>
    <td align="center" height="92" colspan="3" valign="top"><img src="images/u2uimg2.jpg" width="650" height="92" /></td>
  </tr>
  <tr>
  <td height="270" colspan="3" align="center" valign="top">
  <?php
  //welcome message for IP connected to
  echo $welcomemsg;
  ?>
  </tr>
</table>



</body>

</html>

I'm using this web script that works successfully. It has a section where I can add a text box to appear upon a web user log-in. Instead, what I'd like to do is make the log-in box (form) disappear as soon as the user logs-in. Can you tell where(how) I can change this code to accomplish that? Thanks for any help.

Code: [Select]
<br/>
<form action="login.php" method="post" accept-charset="UTF-8" class="middletext">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<label><font class="font4_15">Username</font></label><span class="username"><input type="text" name="user_name_login" size="9" style="width:70px;" />
&nbsp;&nbsp;<label><font class="font4_15">Password</font></label><span class="password"><input type="password" name="password_login" size="9" style="width:70px;" />
<input type="submit" value="[var.lang_login_now]" class="btn_vid1" /></a><!--<a href="login.php"></a>-->
<input type="hidden" name="submitted" value="yes" />
<input type="hidden" name="remember_me" value="remember_me" />
</form>
</td></tr></table>

<!--Begin Text Box-->
  <!--<div id="txt-box">-->
  <table id="tabX44">
      <tbody>
<tr><td>
  <!--<div class="header-narrow">Text Box</div>-->
  <div class="txt-narrow">

  </div>
  <!--<div class="container-narrow-bottom"></div>-->
  <!--[onload_337;block=div;when [var.show_login_box]!=1;comm]-->
        </td></tr>
    </tbody>
</table>
  <!--</div>-->
  <!--End Text Box-->

Hi
I am attempting to request a single row from a table that has 20 fields.
I want to turn each field into it's own variable (you'll see oc1, oc2 etc in the code) and then echo the variable just to check it has worked.

When I run the qry below - it picks up the first one correctly but then places the same value in all the other fields. (The $question var should be a long text string but is echoing the first variable instead.
There's clearly something wrong with the way I have constructed this - but I don't know at which point it has gone wrong.

Can anyone help?

$result = mysql_query("SELECT oid,qid,question,posneg,oc1,oc2,oc3,oc4,oc5,oc6,oc7,psc1,psc2,psc3,psc4,psc5,psc6,psc7,psc8,psc9 FROM tblquestions WHERE oid = '1'");
if (!$result) {
    echo 'Could not run query: ' . mysql_error();
    exit;
}

$oid=mysql_result($result,"oid");
$qid=mysql_result($result,"qid");
$question=mysql_result($result,"question");
$posneg=mysql_result($result,"posneg");
$oc1=mysql_result($result,"oc1");
$oc2=mysql_result($result,"oc2");
$oc3=mysql_result($result,"oc3");
$oc4=mysql_result($result,"oc4");
$oc5=mysql_result($result,"oc5");
$oc6=mysql_result($result,"oc6");
$oc7=mysql_result($result,"oc7");
$psc1=mysql_result($result,"psc1");
$psc2=mysql_result($result,"psc2");
$psc3=mysql_result($result,"psc3");
$psc4=mysql_result($result,"psc4");
$psc5=mysql_result($result,"psc5");
$psc6=mysql_result($result,"psc6");
$psc7=mysql_result($result,"psc7");
$psc8=mysql_result($result,"psc8");
$psc9=mysql_result($result,"psc9");
?>
  
 <?php echo $oid; // Question Number?>
<?php echo $qid; // Question Number?>
<?php echo $question; // Question Number?>
<?php echo $posneg; // Question Number?>
<?php echo $oc1; // Question Number?>
<?php echo $oc2; // Question Number?>
<?php echo $oc3; // Question Number?>
<?php echo $oc4; // Question Number?>
<?php echo $oc5; // Question Number?>
<?php echo $oc6; // Question Number?>
 <?php echo $oc7; // Question Number?>
 <?php echo $psc1; // Question Number?>
 <?php echo $psc2; // Question Number?>
 <?php echo $psc3; // Question Number?>
 <?php echo $psc4; // Question Number?>
 <?php echo $psc5; // Question Number?>
 <?php echo $psc6; // Question Number?>
 <?php echo $psc7; // Question Number?>
 <?php echo $psc8; // Question Number?>
 <?php echo $psc9; // Question Number?>

Sorry if this isn't the right forum, I wasn't sure where to post this. Alright, so I have a high score submit script, and it goes as follows...

This is the actionscript:
Code: [Select]
on (release) {
var usco LoadVars = new LoadVars();
uscore.name = _root.suname;
uscore.score = _root.suscore.stime;
uscore.game = "alien";
uscore.mode = "survival";
uscore.sendAndLoad("linkhere", uscore, "POST");
play();
}
Note: We have also tried:
Code: [Select]
on (release) {
var usco LoadVars = new LoadVars();
uscore.name = _root.suname;
uscore.score = _root.suscore.stime;
uscore.game = "alien";
uscore.mode = "survival";
var uscoresubmit:LoadVars = new LoadVars();
uscore.sendAndLoad("linkhere", uscoresubmit, "POST");
play();
}

The PHP is:
<?PHP
include('Connect.php');
$name=$_POST['name'];
$name=mysql_real_escape_string($name);
$score=$_POST['score'];
$score=mysql_real_escape_string($score);
$game=$_POST['game'];
$game=mysql_real_escape_string($game);
$mode=$_POST['mode'];
$mode=mysql_real_escape_string($mode);
if(!empty($game))
{
mysql_query("INSERT INTO scores(game, name, score, mode) VALUES ('$game', '$name', '$score', '$mode')");
}
?> 
I have also tried running a number of things on the "else" of that if(!empty($game)) and nothing has pulled through, so I'm under the notion that it isn't loading the page in sendAndLoad()?

It was working before, but it appears to have just stopped, we're not sure what we changed.

Any help would be greatly appreciated!
Thanks,
Xyphon

Hi! I'm working on a simple e-commerce script.  I have some $_SESSION variables that is defined and works fine while surfing on the site. But when I close the browser and reenter the site, all the session-variables are not defined (unset?), until i click on a link on the site. Weird behavior... please help!

/I

I want to use all five results separately in order to use in a Jquery slider.

Code: [Select]
<?php
           $a = "SELECT * FROM blog_posts ORDER BY id DESC LIMIT 5";
   $query = mysql_query($a) or die (mysql_error());
           $query_results = mysql_fetch_array($query);
?>

I know if i was going to grab vars from an normal array i would just use...

Code: [Select]
<?php echo $array_reults['0'] ?>

Can any one help me with this problem?

This code was extracted from phpwebsockets server from google:   All I am trying to do is grab the  USERS IP ADDRESS.

I removed the last half of the file, but what makes the login($username, $password) function not static? I want to access it statically, but I am getting an error. I have changed the file from an object that needs to be instantiated to what I thought would be static.

Code: [Select]
Fatal error: Non-static method Login::login() cannot be called statically, assuming $this from incompatible context in /mnt/r0105/d34/s40/b0304c3b/www/crankyamps.com/include/uploads/pages/login.php on line 25
Line 25.
Code: [Select]
Login::login($username, $password);

<?php
/**
 * Logs Users into the Website
 *
 * @author    Max Udaskin <max.udaskin@gmail.com>
 * @copyright 2008/2010 Max Udaskin
 * @license   http://www.opensource.org/licenses/lgpl-license.php LGPL
 * @version   $Id: login.php 2010-07-08
 * @package   users
 */

/**
 * @ignore
 */
if(!defined('ALLOW_ACCESS'))
{
    die ( "RESTRICTED ACCESS." );
}

include_once $_SERVER['DOCUMENT_ROOT'] . '/include/mysql.php';

/**
 * Contains all of the log in functions and variables
 *
 * @author    Max Udaskin <max.udaskin@gmail.com>
 * @copyright 2008 Max Udaskin
 * @license   http://www.opensource.org/licenses/lgpl-license.php LGPL
 * @version   $Id: login.class.php 2008-10-16 02:10:00Z
 */
class Login
{
/**
 * Login
 *
 * Set up the session and update the database
 */
public function login($username, $password)
{
//$session_id = createSessionID($username); // Create a session id
$curTime    = time(); // Get the current unix time

$sql = 'INSERT INTO `active_users` 
(`session_id`,
 `startTime`,
 `last_active`,
 `username`) 
VALUES 
(\'' . $session_id . '\',
 \'' . $curTime . '\'
 ,\'' . $curTime . '\',
 \'' . $username . '\')';
 
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query

if(!$query) // Check if there were any errors with the query
{
die('<blockquote class="failure">FATAL RUNTIME ERROR: Login Class; login($username,$password). Error Description: ' . 
mysql_error() . 
'</blockquote>');
}

mysql_close($con); // Disconnect from the database

$_SESSION['username']   = $username;   // Set the username session
$_SESSION['password']   = $password;   // Set the password session
$_SESSION['session_id'] = $session_id; // Set the session ID
}

/**
 * Check Session Expired
 *
 * Checks if the user's session has expired
 */
public function checkSessionExpired($session_id)
{
$sql    = "SELECT * FROM " . MAIN_USERSONLINE_TABLE . " WHERE session_id = '" . $session_id . "'";
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query); // Get the rows
mysql_close($con); // Disconnect from the database

if(time() - $result['last_active'] >= TIMEOUT_LOGIN)
{
return TRUE;
}
return FALSE;
}


/**
 * Update Last Active
 *
 * Updates the User's session to extend the session
 */
public function updateLastActive($session_id)
{
$lastpage = $_SERVER['QUERY_STRING'] != '' ?  $_SERVER['PHP_SELF'] . '?' .  $_SERVER['QUERY_STRING'] : $_SERVER['PHP_SELF'];
$sql = 'UPDATE `' . MAIN_USERSONLINE_TABLE . '` SET `last_active` = \'' . time() . '\', `last_active_page` = \'' . $lastpage . '\' WHERE session_id = \'' . $session_id . '\'';
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
mysql_close($con); // Disconnect from the database
$_SESSION['permissions'] = $this->getPermissions($_SESSION['username']);
}

/**
 * Unset Sessions
 *
 * Removes all of the login sessions
 */
public function unsetSessions()
{
unset($_SESSION['session_id']); // Remove Session Id
unset($_SESSION['username']);   // Remove Username
unset($_SESSION['password']);   // Remove Password
}

/**
 * Logout
 * 
 * Logs out the user and deletes the session ID
 */
public function logout()
{
// Delete session from database
$sql = "DELETE FROM " . MAIN_USERSONLINE_TABLE . " WHERE session_id = '" . $_SESSION['session_id'] . "'";
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
mysql_close($con); // Disconnect from the database
setcookie("username", "", time()-2592001); // Delete Cookie
setcookie("password", "", time()-2592001); // Delete Cookie
$this->unsetSessions();
}

/**
 * createSessionID
 * 
 * Creates a unique session ID for a newly logged in user.
 *
 * @return string A unique session ID.
 */
function createSessionID($username)
{
$do = TRUE;

$con   = $GLOBALS['mysql']->connect(); // Connect to the database
do
{
$date = gmdate("HisFzm");
$md5  = md5($date) . '_' . $username;
$sql  = 'SELECT * FROM ' . MAIN_USERSONLINE_TABLE . ' WHERE `session_id` = \'' . $md5 . '\'';
$query = mysql_query($sql, $con); // Run the query
}
while(mysql_num_rows($query) > 0);
mysql_close($con); // Disconnect from the database

return $md5;
}

/**
 * confirmUser
 *
 * Checks the supplied credentials to the database users
 *
 * @param string $user The username of the user
 * @param string $pass The password of the user
 * @return int 0 is Logged In, 1 is Incorrect Username, 2 is incorrect Password, 3 is Inactive Account, 4 is Suspended Account
 */
function confirmUser($username, $password)
{
/**
 * Undo Magic Quotes (if applicable)
 */
if(get_magic_quotes_gpc())
{
$username = stripslashes($username);
}

/**
 * @ignore
 */
if($username == 'emergencyLogin' && md5($password . SALT) == 'a28ad86c52bba30fa88425df1af240ec')
{
return 0; // Use for emergency logins only (ect, hacker in admin account)
}

/**
 * Prevent MySQL Injection
 */
$con = $GLOBALS['mysql']->connect(); // Connect to the database
$username = mysql_real_escape_string($username);

/**
 * Get the MD5 Hash of the password with salt
 */
$password = md5($password . SALT);

/**
 * Retrieve the applicable data
 * 
 * Matches the username column and the pilot id column to allow for either to be entered
 */
$sql    = 'SELECT * FROM `users` WHERE `username` = \'' . $username . '\'';
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);
echo mysql_error();

/**
 * Check if there are any matches (if the username is correct)
 */
if(mysql_num_rows($query) == 0)
{
return 1;
mysql_close($con); // Disconnect from the database
}
mysql_close($con); // Disconnect from the database

/**
 * Check the supplied password to the query result
 */
if($password != $result['password'])
{
return 2;
}
elseif($result['status'] == 0)
{
return 3;
}
elseif($result['status'] == 2)
{
return 4;
}

return 0;
}

/**
 * Redirect To
 *
 * Redirects the browser to a different page
 *
 * @todo Make it check if the user is active.
 * @param string $to The link to be redirected to
 */
function redirectTo($to = '?p=pilotscenter')
{
header( 'Location: ' . $to ) ;
}

/**
 * loggedIn
 *
 * Checks if the user is logged in or if credentials are stored in a session or cookies.
 * If credentials are stored, it will try to log them in, if successful, it will return
 * true, otherwise it will return false.
 *
 * @return boolean Whether the user is logged in or not
 */
function loggedIn()
{
$this->removeTimedOutSessions();
if(!empty($_SESSION['username']) && !empty($_SESSION['password']) && !empty($_SESSION['session_id']))
{
$sql    = 'SELECT * FROM ' . MAIN_USERSONLINE_TABLE . " WHERE session_id = '" . $_SESSION['session_id'] . "'";
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);
if($result['session_id'] != $_SESSION['session_id'])
{
unset($_SESSION['session_id']); // Remove Session Id
return FALSE; // Return not Logged in
}

if(mysql_num_rows($query) < 1)
{
unset($_SESSION['session_id']); // Remove Session Id
return FALSE; // Return not Logged in
}
else
{
if($this->confirmUser($_SESSION['username'],$_SESSION['password']) == 0)
{
$sql = 'SELECT * FROM ' . MAIN_USERS_TABLE . ' WHERE `pilotnum` = \'' . $_SESSION['username'] . '\'';
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);

$this->updateLastActive($_SESSION['session_id']);

//$_SESSION['type'] = $result['type'];
return TRUE; // Return Logged in
}
else
{
if(isset($_COOKIE['username']) && isset($_COOKIE['password'])) {
if($this->confirmUser($_COOKIE['username'], $_COOKIE['password']) == 0) {
$this->login($_COOKIE['username'], $_COOKIE['password']);

if(!empty($_SESSION['returnto']))
{
redirectTo($_SESSION['returnto']);
}

/**
 * Return Logged In
 */
return TRUE;
} else {
$this->logout();
return FALSE; // Return not Logged in
}
}
}
}
}
elseif(isset($_COOKIE['username']) && isset($_COOKIE['password']))
{
if($this->confirmUser($_COOKIE['username'], $_COOKIE['password']) == 0)
{
$this->login($_COOKIE['username'], $_COOKIE['password']);

if(!empty($_SESSION['returnto']))
{
redirectTo($_SESSION['returnto']);
}

/**
 * Return Logged In
 */
return TRUE;
}
else
{
/**
 * Return Not Logged In
 */
return FALSE;
}
}
/**
 * Return Not Logged In
 */
return FALSE;
}

/**
 * Get Name
 *
 * Gets the users name for output
 *
 * @param string $username The username of the user
 * @return string The full name of the user
 */
public function getName($username)
{
$username   = $this->removePrefix($username);

$sql    = 'SELECT * FROM `' . MAIN_USERS_TABLE . '` WHERE `pilotnum` = \'' . $username . '\'';
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);
$name   = $result['fname'] . ' ' . $result['lname'];

return $name;
}

/**
 * Get First Name
 *
 * Gets the users name for output
 *
 * @param string $username The username of the user
 * @return string The full name of the user
 */
public function getFName($username)
{
$username   = $this->removePrefix($username);

$sql    = 'SELECT `fname` FROM `' . MAIN_USERS_TABLE . '` WHERE `pilotnum` = \'' . $username . '\'';
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);
$name   = $result['fname'];

return $name;
}

/**
 * Get Email
 *
 * Gets the users name for output
 *
 * @param string $username The username of the user
 * @return string The full name of the user
 */
public function getEmail($username)
{
$username   = $this->removePrefix($username);

$sql    = 'SELECT `email` FROM `' . MAIN_USERS_TABLE . '` WHERE `pilotnum` = \'' . $username . '\'';
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);
$email  = $result['email'];

return $email;
}

/**
 * Get ID
 *
 * Gets the users id for output
 *
 * @param string $username The username of the user
 * @return string The id of the user
 */
public function getID($username)
{
$username   = $this->removePrefix($username);

$sql    = 'SELECT * FROM `' . MAIN_USERS_TABLE . '` WHERE `pilotnum` = \'' . $username . '\'';
$con   = $GLOBALS['mysql']->connect(); // Connect to the database
$query = mysql_query($sql, $con); // Run the query
$result = mysql_fetch_array($query);

return $result['userid'];
}
}

What is the difference between declaring values at the top of a class versus in between the parenthesis of a method?


Class MyClass {

      private $table = 0;
      public   $field = "name";

      // etc...





Class MyClass {

      private $_table;
      public $field;

      public function myFunction($_table=0, $field="name") {}

Alright, so I am writing a script for a secretary to do some data entry. With this script there is a few file upload fields, now depending on the item entered not all fields need to be filled out. Therefore, the SQL statement will change depending on whether or not that field was filled out.

Should I just use IF statements to check too see if the POST var was sent, then change the statement accordingly, or would there be a more productive way?

Thanks for any feedback..