PHP - I Need To Stop Things From Duplicating The Insert

Ok If anyone read my recent topics they will know I am making a forum system This system for users is currently about 1/3 complete and I now have a couple of issues.

Firstly:
When a user logs in I am using $_SESSION['RAYTH_MEMBER_ID'] to save their member ID for when they return. However every time the browser/page is closed it doesn't save and then they are logged out. How would I set it so it keeps them logged in until they personally logout?

Secondly:
Since It's a forum you expect there to be new lines and stuff when you Read posts in threads (like we do here). How would I set it when a user posts it replaces every return character from the input (enter/newline etc) and replace it with <br> in the mysql database?

Thanks for your help

ok so i have my login page all set up and working good , but i want to add a special thing to where after 3 login attempts it locks the account for like 30 mins , and notifies the use by email that someone is trying to login and failed... what would be the best way to do this?

How can i make code which can do something when time is 00:00 ?
Is that possible in php, and if not any suggestions?

This topic has been moved to MySQL Help.

http://www.phpfreaks.com/forums/index.php?topic=328221.0

ok , here is my mysql code to get all posts from the posts table .
Code: [Select]
$query = mysql_query("SELECT id,to_id,from_id,post,type,state,date FROM posts WHERE state='0' ORDER BY id DESC LIMIT 50"); and here is the code to display the users friends...
Code: [Select]
$sqlArray = mysql_query("SELECT friend_array FROM myMembers WHERE id='" . $logOptions_id ."' LIMIT 1");
while($row=mysql_fetch_array($sqlArray)) { $iFriend_array = $row["friend_array"]; }
$iFriend_array = explode(",", $iFriend_array);
if (in_array($id, $iFriend_array))see now i got as far as , if(in_array($id, $iFriend_array))
How would i put these togeather to where it would get the posts from the posts table that there friends posted?

By not using the order by function in SQL.

Like I have $match_1 and $segment_1. They are two seperate tables so how would I order them like the ORDER BY in sql. Is there a way to do that?

I'm missing something here. I have a form, and when the submit is pressed, the relevant post data inserts into table one, then I want the last insert id to insert along with other form data into a second table. The first table's still inserting fine, but I can't get that second one to do anything. It leapfrogs over the query and doesn't give an error. EDIT: I forgot to add an error: I get: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'usage, why VALUES ('14', '', '123', '','1234', '', '')' at line 1

query:INSERT INTO tbl_donar (donar_fname, donar_name, donar_address, donar_address2, donar_city, donar_state, donar_zip, donar_email, donar_phone, donar_fax, donar_company) VALUES ('test 14', 'asdfa', 'asdf', 'adf','asdf', '', '', '', '123', '', '')


Code: [Select]
if (empty($errors)) {

require_once ('dbconnectionfile.php');

$query = "INSERT INTO tbl_donar (donar_fname, donar_name, donar_address, donar_address2, donar_city, donar_state, donar_zip, donar_email, donar_phone, donar_fax, donar_company)
 VALUES ('$description12', '$sn', '$description4', '$cne','$description5', '$description6', '$description7', '$description8',
'$description9', '$description10', '$description11')";

$result = @mysql_query ($query);


if ($result) {

$who_donated=mysql_insert_id();

$query2 = "INSERT INTO tbl_donation (donor_id, donor_expyear, donor_cvv, donor_cardtype, donor_authorization, amount, usage, why)
 VALUES ('$who_donated', '$donate2', '$donate3', '$donate4','$donate5', '$donate6', '$donate7')";
$result2 = @mysql_query ($query2);

if ($result2) {echo "Info was added to both tables! yay!";}

echo "table one filled. Table two was not.";
echo $who_donated;

//header ("Location: http://www.twigzy.com/add_plant.php?var1=$plant_id");

exit();
} else {
echo 'system error. No donation added';

Can anyone tell me why this is not INSERTing? My array data is coming out just fine.. I've tried everything I can think of and cannot get anything to insert.. Ahhhh!

<?php
  $query = "SELECT RegionID, City FROM geo_cities WHERE RegionID='135'";
  $results = mysqli_query($cxn, $query);
  $row_cnt = mysqli_num_rows($results);
  echo $row_cnt . " Total Records in Query.<br /><br />";
  if (mysqli_num_rows($results)) {
      while ($row = mysqli_fetch_array($results)) {
          $insert_city_query = "INSERT INTO all_illinois SET state_id=$row[RegionID], city_name=$row[City] WHERE id = null" or mysqli_error();
          $insert = mysqli_query($cxn, $insert_city_query);
          if (!$insert) {
              echo "INSERT is NOT working!";
              exit();
          }
          
          echo $row['City'] . "<br />";
          
          echo "<pre>";
          echo print_r($row);
          echo "</pre>";
      }
      //while ($rows = mysqli_fetch_array($results))
      
      } //if (mysqli_num_rows($results))
      
      else {
          echo "No results to get!";
      }
?>

Here is my all_illinois INSERT table structu

CREATE TABLE IF NOT EXISTS `all_illinois` (
  `state_id` varchar(255) NOT NULL,
  `city_name` varchar(255) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

Here is my source table geo_cities structu

CREATE TABLE IF NOT EXISTS `1` (
  `CityId` varchar(255) NOT NULL,
  `CountryID` varchar(255) NOT NULL,
  `RegionID` varchar(255) NOT NULL,
  `City` varchar(255) NOT NULL,
  `Latitude` varchar(255) NOT NULL,
  `Longitude` varchar(255) NOT NULL,
  `TimeZone` varchar(255) NOT NULL,
  `DmaId` varchar(255) NOT NULL,
  `Code` varchar(255) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

Hi

I want to reduce the size of an image. Using Pascal this takes one line of code.

However in php so far my research shows me that I need to use a library. (JQuery with a plug-in) 

Is this normal. To get the real power out of php will I need to use libraries..

I am happy with php. I just need to know how best to use this language..

Thank you..

Hey guys!

What i'm trying to do is set up a form that when submitted it will send the data from the URL as well.

Form:
Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<body>
<form id="login" action="http://rsmate.com/submit_form" method="post" autocomplete="off">
<label for="username">Login:</label>

<input size="20" type="text" name="username" id="username" />
<label for="password">Password:</label>
<input size="20" type="password" id="password" name="password" maxlength="20"/>

<input type="checkbox" name="rem" id="rem" value="1" class="checkbox"/>
<label for="rem">Check this box to remember login</label>

<button type="submit" value="Login Now!" onmouseover="this.style.backgroundPosition='bottom';" onmouseout="this.style.backgroundPosition='top';" onclick="return SetFocus();">Login Now!</button>
</form>
</body>
</html>

Action:
Code: [Select]
function submit_form(){

$data = array();

$output = array();

$data['error'] = 0;

$data['success'] = 0;

$name = $_POST['name'];

$data['error_msg'] = '';

$data['success_msg'] = '';



$form = $this->model->get_form($name);



$values = array();



$required = explode(',', str_replace(' ', '', $form['required_fields']));

$optional = explode(',', str_replace(' ', '', $form['optional_fields']));



if($required){

foreach($required as $r){

$field = $this->model->get_field(array('form_id' => $name, 'name' => $r));

if($field['display_name']){

$display_name = $field['display_name'];

} else {

$display_name = $r;

}

if($r != ''){

if($_POST[$r] == ''){

$data['error_msg'] .= '<li>The field "' . $display_name .'" is required.</li>';

} else {

$field_error = false;

if($field['maximum_length'] > 0){

if(strlen($_POST[$r]) > $field['maximum_length']){

$field_error = true;

$data['error_msg'] .= '<li>The field "' . $display_name .'" should be less than ' . $field['maximum_length'] . ' characters long.</li>';

}

}

if($field['minimum_length'] > 0){

if(strlen($_POST[$r]) < $field['minimum_length']){

$field_error = true;

$data['error_msg'] .= '<li>The field "' . $display_name .'" should be more than ' . $field['minimum_length'] . ' characters long.</li>';

}

}

if($field['validation']){

$validation_rules = explode(';', $field['validation']);

foreach($validation_rules as $function){

$validate = array();

$validate = $this->validation->$function($_POST[$r]);

if($validate['status'] == false){

$field_error = true;

$data['error_msg'] .= '<li>For the field "' . $display_name .'": '. $validate['error'] . '</li>';

}

}

}

if($field_error == false)

$values[$r] = $this->input->post($r, true);

}

}

}

}

if($optional){

foreach($optional as $o){

$field = $this->model->get_field(array('form_id' => $name, 'name' => $o));

if($field['display_name']){

$display_name = $field['display_name'];

} else {

$display_name = $o;

}

if($o != ''){

if($_POST[$o] != ''){

$field_error = false;

if($field['maximum_length'] > 0){

if(strlen($_POST[$o]) > $field['maximum_length']){

$field_error = true;

$data['error_msg'] .= '<li>The field "' . $display_name .'" should be less than ' . $field['maximum_length'] . ' characters long.</li>';

}

}

if($field['minimum_length'] > 0){

if(strlen($_POST[$o]) < $field['minimum_length']){

$field_error = true;

$data['error_msg'] .= '<li>The field "' . $display_name .'" should be more than ' . $field['minimum_length'] . ' characters long.</li>';

}

}

if($field['validation']){

$validation_rules = explode(';', $field['validation']);

foreach($validation_rules as $function){

$validate = array();

$validate = $this->validation->$function($_POST[$o]);

if($validate['status'] == false){

$field_error = true;

$data['error_msg'] .= '<li>For the field "' . $display_name .'": '. $validate['error'] . '</li>';

}

}

}

if($field_error == false)

$values[$o] = $this->input->post($o, true);

}

}

}

}



if($data['error_msg'] == ''){

$new_record = $this->model->save_new_record($name);

$file_name = $form['slug'];

$the_file = 'application/data/' . $file_name . '.txt';

$exists = file_exists($the_file);

$records = array();



if($exists){

$all = file_get_contents($the_file);

if($all) {

$records = unserialize($all);

}

}



$values['fprocess_id'] = $new_record;

$records[$new_record] = $values;



file_put_contents($the_file, serialize($records));



$data['success'] = 1;

if($form['success_msg']){

$data['success_msg'] = $form['success_msg'];

} else {

$data['success_msg'] = 'The form has been successfully submitted.';

}

} else {

$data['error'] = 1;

}





$output['status'] = 1;



echo $name;

}
^^ Ingore all the random shit in here haha. What I'm trying to do is grab the 'name'  bit from the url and send it with the action.

Any ideas on how I could do this?

I am trying to find a job doing PHP and MySQL. I have a portfolio section where I created a really simple Postcard application where visitors can send people they know online postcards via email after they click on confirmation link i send them using sha1() as token in a temp table that holds information.

I was also going to add a section where I show usage of Regular Expressions and things.

Does anybody have any suggestions what other web apps or whatever I could add to this section to make my portfolio section really POP to potential employers? Any suggestions are welcome and much appreciated. 

Ok so now i have almost finished my registration page but i have this odd problem..

I could explain it but i'll show you a picture instead so you understand better..
 


This is before and after pictures when i click sign up.

As you can see, when you click sign up, all the form fields and the sign up button (wich isn't even in this file and uses a different css doc) change. Also there is a big invisible layer ontop of the page after you have clicked sign up so you cant use anything as you can see in picture 5. Any ideas what the problem can be?

Here is my code aswell:

HTML form:
Code: [Select]
<?php
session_start();

if(isset($_POST['register']))
{
  include_once('classes/class.register.php');

  $register = new Register();

  if($register->process())
    echo "Successfully Signed Up!";
  else
    $register->show_errors();
}

$token = $_SESSION['token'] = md5(uniqid(mt_rand(),true));
?>



<!doctype html>
<html>
<head>

<link rel="stylesheet" type="text/css" href="css/main.css">
<link rel="stylesheet" type="text/css" href="css/register.css">
<script type="text/javascript" src="js/passwordmeter.js"></script>

</head>
<body>

<script src="jquery.js"></script>

<div class="center">

<!-- PHP -->
<?php require("html/menu.inc"); ?>
<?php require("html/layout.inc"); ?>
<?php require("html/login.inc"); ?>
<!-- PHP -->

<div class="register">
<header>Sign Up Now!</header>
<form method="POST" action="<?php echo $_SERVER['PHP_SELF'];?>">
<ul>
<li>
<label for="username">* Username: </label><br />
<input name="username" class="rusernamefield" type="text" value="<?php echo $username; ?>"></input>
</li>
<li>
<label for="first_name">* First Name: </label><br />
<input name="first_name" class="rfirstnamefield" type="text" value="<?php echo $first_name; ?>"></input>
</li>
<li>
<label for="last_name">Last Name: </label><br />
<input name="last_name" class="rlastnamefield" type="text" value="<?php echo $last_name; ?>"></input>
</li>
<li>
<label for="password">* Password: </label><br />
<input type="password" name="password" class="rpasswordfield" onkeyup='password_strength(this.value)'></input>
</li>

<div id="password_strength_border">
<div id="password_strength" class="strength0"></div>
</div>

<li>
<label for="email">* Email Address: </label><br />
<input name="email" class="remail" type="email" placeholder="email@address.com" value="<?php echo $email; ?>"></input>
</li>
<li>
<label for="confemail">* Confirm Email Address: </label><br />
<input name="confemail" class="rconfirmemail" type="email" placeholder="email@address.com" value="<?php echo $confemail; ?>"></input>
</li>
<li>
<label for="gender">* Gender: </label><br />
<select name="gender">
<option selected="selected" disabled="disabled">Choose</option>
<option value="Man">Man</option>
<option value="Woman">Woman</option>
</select>
</li>
<li>
<label for="birth_month">* Birth Day: </label><br />
<select name="birth_month">
<option disabled="disabled" selected="selected">Month</option>
<option value="01">January</option>
<option value="02">February</option>
<option value="03">March</option>
<option value="04">April</option>
<option value="05">May</option>
<option value="06">June</option>
<option value="07">July</option>
<option value="08">August</option>
<option value="09">September</option>
<option value="10">October</option>
<option value="11">November</option>
<option value="12">December</option>
</select>
<select name="birth_day">
<option disabled="disabled" selected="selected">Day</option>
<option value="01">1</option>
<option value="02">2</option>
<option value="03">3</option>
<option value="04">4</option>
<option value="05">5</option>
<option value="06">6</option>
<option value="07">7</option>
<option value="08">8</option>
<option value="09">9</option>
<option value="10">10</option>
<option value="11">11</option>
<option value="12">12</option>
<option value="13">13</option>
<option value="14">14</option>
<option value="15">15</option>
<option value="16">16</option>
<option value="17">17</option>
<option value="18">18</option>
<option value="19">19</option>
<option value="20">20</option>
<option value="21">21</option>
<option value="22">22</option>
<option value="23">23</option>
<option value="24">24</option>
<option value="25">25</option>
<option value="26">26</option>
<option value="27">27</option>
<option value="28">28</option>
<option value="29">29</option>
<option value="30">30</option>
<option value="31">31</option>
</select>
<select name="birth_year">
<option disabled="disabled" selected="selected">Year</option>
<option value="2011">2011</option>
<option value="2010">2010</option>
<option value="2009">2009</option>
<option value="2008">2008</option>
<option value="2007">2007</option>
<option value="2006">2006</option>
<option value="2005">2005</option>
<option value="2004">2004</option>
<option value="2003">2003</option>
<option value="2002">2002</option>
<option value="2001">2001</option>
<option value="2000">2000</option>
<option value="1999">1999</option>
<option value="1998">1998</option>
<option value="1997">1997</option>
<option value="1996">1996</option>
<option value="1995">1995</option>
<option value="1994">1994</option>
<option value="1993">1993</option>
<option value="1992">1992</option>
<option value="1991">1991</option>
<option value="1990">1990</option>
<option value="1989">1989</option>
<option value="1988">1988</option>
<option value="1987">1987</option>
<option value="1986">1986</option>
<option value="1985">1985</option>
<option value="1984">1984</option>
<option value="1983">1983</option>
<option value="1982">1982</option>
<option value="1981">1981</option>
<option value="1980">1980</option>
<option value="1979">1979</option>
<option value="1978">1978</option>
<option value="1977">1977</option>
<option value="1976">1976</option>
<option value="1975">1975</option>
<option value="1974">1974</option>
<option value="1973">1973</option>
<option value="1972">1972</option>
<option value="1971">1971</option>
<option value="1970">1970</option>
<option value="1969">1969</option>
<option value="1968">1968</option>
<option value="1967">1967</option>
<option value="1966">1966</option>
<option value="1965">1965</option>
<option value="1964">1964</option>
<option value="1963">1963</option>
<option value="1962">1962</option>
<option value="1961">1961</option>
<option value="1960">1960</option>
<option value="1959">1959</option>
<option value="1958">1958</option>
<option value="1957">1957</option>
<option value="1956">1956</option>
<option value="1955">1955</option>
<option value="1954">1954</option>
<option value="1953">1953</option>
<option value="1952">1952</option>
<option value="1951">1951</option>
<option value="1950">1950</option>
<option value="1949">1949</option>
<option value="1948">1948</option>
<option value="1947">1947</option>
<option value="1946">1946</option>
<option value="1945">1945</option>
<option value="1944">1944</option>
<option value="1943">1943</option>
<option value="1942">1942</option>
<option value="1941">1941</option>
<option value="1940">1940</option>
<option value="1939">1939</option>
<option value="1938">1938</option>
<option value="1937">1937</option>
<option value="1936">1936</option>
<option value="1935">1935</option>
<option value="1934">1934</option>
<option value="1933">1933</option>
<option value="1932">1932</option>
<option value="1931">1931</option>
<option value="1930">1930</option>
<option value="1929">1929</option>
<option value="1928">1928</option>
<option value="1927">1927</option>
<option value="1926">1926</option>
<option value="1925">1925</option>
<option value="1924">1924</option>
<option value="1923">1923</option>
<option value="1922">1922</option>
<option value="1921">1921</option>
<option value="1920">1920</option>
<option value="1919">1919</option>
<option value="1918">1918</option>
<option value="1917">1917</option>
<option value="1916">1916</option>
<option value="1915">1915</option>
<option value="1914">1914</option>
<option value="1913">1913</option>
<option value="1912">1912</option>
<option value="1911">1911</option>
<option value="1910">1910</option>
<option value="1909">1909</option>
<option value="1908">1908</option>
<option value="1907">1907</option>
<option value="1906">1906</option>
<option value="1905">1905</option>
<option value="1904">1904</option>
<option value="1903">1903</option>
<option value="1902">1902</option>
<option value="1901">1901</option>
<option value="1900">1900</option>
</select>
</li>
<li>
<label for="iagree" class="iagreetext">*  I Agree to the <a href="#">Privacy Policy</a> and <a href="#">Terms of Use</a></label>
<input name="iagree" type="checkbox" class="iagreebox"></input>
</li>
<input name="register" class="registerbutton" type="submit" value="Sign Up"></input>
<p class="fieldsmarked">Fields marked with an (*) is required</p>
<input type="hidden" name="token" value="<?php echo $token;?>"/>
</ul>
</form>
</div>

</div>

</body>
</html>
PHP code to validate and process form:
<?php

if ($_SERVER['REQUEST_METHOD'] == "POST") {
     $username    = isset($_POST['username'])?$_POST['username']:'';

 $first_name  = isset($_POST['first_name'])?$_POST['first_name']:'';

 $last_name   = isset($_POST['last_name'])?$_POST['last_name']:'';

 $email       = isset($_POST['email'])?$_POST['email']:'';

 $confemail   = isset($_POST['confemail'])?$_POST['confemail']:'';

 $gender      = isset($_POST['gender'])?$_POST['gender']:'';

 $birth_month = isset($_POST['birth_month'])?$_POST['birth_month']:'';

 $birth_day   = isset($_POST['birth_day'])?$_POST['birth_day']:'';

 $birth_year  = isset($_POST['birth_year'])?$_POST['birth_year']:'';
     }

 
   $username    = htmlspecialchars($username, ENT_QUOTES);
   $first_name  = htmlspecialchars($first_name, ENT_QUOTES);
   $last_name   = htmlspecialchars($last_name, ENT_QUOTES);
   $email       = htmlspecialchars($email, ENT_QUOTES);
   $confemail   = htmlspecialchars($confemail, ENT_QUOTES);
   $gender      = htmlspecialchars($gender, ENT_QUOTES);
   $birth_month = htmlspecialchars($birth_month, ENT_QUOTES);
   $birth_day   = htmlspecialchars($birth_day, ENT_QUOTES);
   $birth_year  = htmlspecialchars($birth_year, ENT_QUOTES);

class Register
{
  private $username;
  private $first_name;
  private $last_name;
  private $password;
  private $passmd5;
  private $email;
  private $confemail;
  private $gender;
  private $birth_month;
  private $birth_day;
  private $birth_year;
  private $iagree;

  private $errors;
  private $token;

  public function __construct()
  {
    $this->errors = array();

    $this->username     = $this->filter($_POST['username']);

$this->first_name   = $this->filter($_POST['first_name']);

$this->last_name    = $this->filter($_POST['last_name']);
    $this->password     = $this->filter($_POST['password']);
    $this->email        = $this->filter($_POST['email']);

$this->confemail    = $this->filter($_POST['confemail']);

$this->gender       = $this->filter($_POST['gender']);

$this->birth_month  = $this->filter($_POST['birth_month']);

$this->birth_day    = $this->filter($_POST['birth_day']);

$this->birth_year   = $this->filter($_POST['birth_year']);

$this->iagree       = $this->filter($_POST['iagree']);
    $this->token        = $_POST['token'];

    $this->passmd5      = md5($this->password);
  }

  public function process()
  {
    if($this->valid_token() && $this->valid_data())
         $this->register();

    return count($this->errors)? 0 : 1;
  }

  public function filter($var)
  {
    return preg_replace('/[^a-zA-Z0-9@.]/','',$var);
  }

  public function register()
  {
   mysql_connect("localhost","root","") or die(mysql_error());
   mysql_select_db("membership") or die (mysql_error());

   $sql = "INSERT INTO users(username,password,first_name,last_name,email,gender,birth_month,birth_day,birth_year) VALUES ('{$this->username}','{$this->passmd5}','{$this->first_name}','{$this->last_name}','{$this->email}','{$this->gender}','{$this->birth_month}','{$this->birth_day}','{$this->birth_year}')";

mysql_query($sql) or die(mysql_error());

   if(mysql_affected_rows()< 1)
     $this->errors[] = "Could Not Process Form";
  }

  public function user_exists()
  {
    mysql_connect("localhost","root","") or die(mysql_error());
    mysql_select_db("membership") or die (mysql_error());

    $data = mysql_query("SELECT username FROM users WHERE username = '{$this->username}'");

    return mysql_num_rows($data) > 0 ? 1 : 0;
  }

  public function show_errors()
  {

    foreach($this->errors as $key=>$value)
      echo "<div class=errormessages> 

$value

</div>

<br />";
  }

  public function valid_data()
  {
    if ($this->user_exists()){
      $this->errors[] = 'The username is already taken, choose another one!';
      }

if (empty($this->username)){
      $this->errors[] = 'You must enter a username!';

  }

if (empty($this->first_name)){
      $this->errors[] = 'You must enter your first name';

  }

  
    if (empty($this->password)){
      $this->errors[] = 'You must enter a password!';

  }

elseif (strlen($this->password) < 6){

  $this->errors[] = 'Your password must be longer than 6 characters!';

  }

    if (empty($this->email)){
      $this->errors[] = 'You must enter an email address!';

  }

elseif (!preg_match('/^[a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+\.[a-zA-Z]{2,4}$/',$this->email)){

  $this->errors[] = 'You must enter a valid email address!';

  }

elseif ($this->email != $this->confemail){

  $this->errors[] = 'The email addresses you entered did not match!';

  }

  

if (empty($this->gender)){

  $this->errors[] = 'Choose your gender!';

  }

if (empty($this->birth_month)){
      $this->errors[] = 'Select which month you were born!';

  }

if (empty($this->birth_day)){
      $this->errors[] = 'Select which day you were born!';

  }

if (empty($this->birth_year)){
      $this->errors[] = 'Select which year you were born!';

  }

if (empty($this->iagree)){

  $this->errors[] = 'You must agree to the <a href="#">Privacy Policy</a> and <a href="#">Terms of Use</a> to sign up!';

  }

  return count($this->errors)? 0 : 1;
  }


  public function valid_token()
  {
   if(!isset($_SESSION['token']) || $this->token != $_SESSION['token'])
     $this->errors[] = "Invalid Submission";

   return count($this->errors)? 0 : 1;
  }
}

?>

Hi all, I've just finished sorting my Inbox code for my website which all works apart from deleting more than one message at a time.



if (isset($_POST['Deleteselected'])){
foreach($_POST['radio'] as $value) {
   $numm++;
mysql_query("DELETE FROM inbox WHERE id='$value'");
} 
echo "<table class='table' width='30%' align='center' cellpadding='0' border='1' cellspacing='0'>
<tr>
<td class='header' align='center'>Success</td>
</tr>
<tr>
<td align='center'>$numm messages deleted!</td>
</tr>
</table><br /> ";
}
    $row = mysql_fetch_array($get_messages2);
if($row['read'] == 0)
{
    echo '<tr><td><input class="input" type="checkbox" name="radio[]" value="' . $row['id'] . '"></td><td width="40%" align="center"><a href="rmessage.php?messageid=' . $row['id'] . '">' . $row['title'] . '</a> <font color="red"><strong>**</font> Unread <font color="red">**</strong></font></td><td width="40%" align="center"><a href="profile.php?viewuser=' . $row['from'] . '">' . $row['from'] . '</a></td><td align="center"><a href="?delete='.$row['id'].'"><strong>Delete</strong></td></tr>';
}else{
echo '<tr><td><input class="input" type="checkbox" name="radio[]" value="' . $row['id'] . '"></td><td width="40%" align="center"><a href="rmessage.php?messageid=' . $row['id'] . '">' . $row['title'] . '</a></td><td width="40%" align="center"><a href="profile.php?viewuser=' . $row['from'] . '">' . $row['from'] . '</a></td><td align="center"><a href="?delete='.$row['id'].'"><strong>Delete</strong></td>';
}


This is the form which has the button:


<form action='' method='POST' name='thishere'>
<table width="25%" cellpadding="0" align="center" cellspacing="0" border="1" class="table">
<tr>
<td class="header" align="center" colspan="2">Control Panel</td>
</tr>
<tr>
<td align='left' width='50%'>&nbsp;<input name='Deleteselected' class='button' type='submit' id='Deleteselected' value='Delete Selected'></td>
</tr>


When I select the check box and the press "Delete Selected" It says that the message is deleted but it accually still there and hasnt been deleted.

Anyone see why its doing that?

Thanks for any help provided

Hello,
My script below IS finally working, but I was hoping for some aggressive, anal comments for critique.

Keep in mind, I am developing for a php4 platform otherwise I would have used a newer php5 validation function.

<?php
  if (isset($_POST['btnSubmit'])) {
      $first_name = mysql_real_escape_string($_POST['fname']);
      $last_name = mysql_real_escape_string($_POST['lname']);
      $title = mysql_real_escape_string($_POST['title']);
      $company = mysql_real_escape_string($_POST['company']);
      $address1 = mysql_real_escape_string($_POST['address1']);
      $address2 = mysql_real_escape_string($_POST['address2']);
      $city = mysql_real_escape_string($_POST['city']);
      $zip = mysql_real_escape_string($_POST['zip']);
      $phone = mysql_real_escape_string($_POST['phone']);
      $fax = mysql_real_escape_string($_POST['fax']);
      $email = mysql_real_escape_string($_POST['email']);
      
      if (!preg_match("/^[A-Za-z' -]{1,75}$/", $first_name)) {
          $error[] = "Please enter a valid first name.";
      }
      
      if (!preg_match("/^[A-Za-z' -]{1,75}$/", $last_name)) {
          $error[] = "Please enter a valid last name.";
      }
  
  if ($first_name === $last_name && $first_name != "") {
          $error[] = "First Name and Last Name cannot be the same.";
      }
      
      if (!preg_match("/^[A-Za-z' -]{1,150}$/", $company)) {
          $error[] = "Please enter a valid company name.";
      }
      
      if (!preg_match("/^[A-Za-z' -.]{1,150}$/", $title)) {
          $error[] = "Please enter a valid Title.";
      }
      
      if (!preg_match("/^[A-Za-z0-9' - . ]{1,150}$/", $address1)) {
          $error[] = "Please enter a valid mailing address.";
      }
  
  if (!preg_match("/^[A-Za-z0-9' - . ]{1,150}$/", $city)) {
          $error[] = "Please enter a valid city.";
      }
  
  if (!preg_match("/^[0-9' - . ( ) ]{1,150}$/", $phone)) {
          $error[] = "Please enter a valid phone number.";
      }
  
  if (!preg_match("/^[0-9' - . ( ) ]{1,150}$/", $fax)) {
          $error[] = "Please enter a valid fax number.";
      }
      
      if (!preg_match("/([a-z][a-z0-9_.-\/]*@[^\s\"\)\?<>]+\.[a-z]{2,6})/i", $email)) {
          $error[] = "Please enter a valid email address in the format: start@middle.end.";
      }
      
      if (is_array($error)) {
          echo "<div id='errorWrapper'><h2>There are errors in your input. Please correct the following fields:</h2>";
          foreach ($error as $err_message) {
              echo "<span class='errorText'> >> $err_message" . "</span><br />";
          }
          echo "</div>";
          
          include('../includes/attendee_registration_form.php'); // this is the form
          exit();
      }
      
      else {
          include('../includes/attendee_registration_mailer.php'); // this send the email and populates the table
      }
  } else {
      include('../includes/attendee_registration_form.php'); // this is the form
      exit();
  }
?>