PHP - Checking Email Exists In .txt File

Hi,

Im trying to generate a random 4- digit code, and then check if it is allready in the database.

My current code is below, but im not sure how to make it loop again, if the code exists.

Also, im not sure if this is the best way of doing this, maybe someone could suggest something better...


This is basicly what im trying to do:
1. hash the code
2. check if it exits in the DB
3. if it does, re-generate, and repeat 2., if not, return it





function getUniqueHash() {
global $mysql_server, $mysql_user, $mysql_password;

$code = substr(md5(uniqid(rand(), true)), 0, 4);

mysql_connect($mysql_server, $mysql_user, $mysql_password); // connect //
$sql = "SELECT * FROM `$mysql_db`.`short` WHERE `short` = '$code'";
$result = mysql_query($sql);
$results = mysql_numrows($result);
if($results > 0) {
//GO BACK AND RE-GENERATE CODE AND REPEAT CHECK
} else {
return $code;
}
mysql_close();
}

PasteBin:
Quote

http://paste.tgxn.net/?s=9

Hi,

I'm making a website that uses data stored in SQL.

One of my pages allows the user to enter a new product into a product table. I was wondering if somebody could help me with some validation or Query that will not allow the user to enter a product name that already exists in the table?

Code: [Select]

$nameNew = $_POST['new];
$nameID = $_POST['newID];
$namePrice = $_POST['newPrice];

INSERT INTO products
VALUES ($nameNew, $newID, $newPrice)

$describeQuery = "SELECT ID, Name, Price FROM Products";


$results = sqlsrv_query($conn, $describeQuery);

echo '<table border="1" BORDERCOLOR=Black>';
echo '<tr><th bgcolor = "LightBlue">Name</th><th bgcolor = "LightBlue" >ID</th> <th bgcolor = "LightBlue" >Price</th></tr>';


while($row = sqlsrv_fetch_array($results, SQLSRV_FETCH_ASSOC))
  {   
    echo '<tr>';
echo '<td >' .$row['Name'].'</td>';
echo '<td>' .$row['ID'].'</td>';
echo '<td>' .$row['Price'].'</td>';

echo '</tr>';
}

echo '</table>';
sqlsrv_close($conn);


   
Thanks

All,

In my registration script I am trying to check if an email address already exists (yawn I know), and I am stuck. The code highlighted in bold is where I want to check if the email exists (notice that form checking is done above that, including sorting out the email address that the user enters) and if it doesnt insert data into the table. Trouble is that on loading the page it simply states the 'already submitted' error before an email is even entered into the form:


Code: [Select]
         if(isset($_POST['name']) && !empty($_POST['name']) AND isset($_POST['email']) && !empty($_POST['email']) AND ($_POST['password']) && !empty($_POST['password'])){
        $name = mysql_escape_string($_POST['name']); // Turn our post into a local variable
        $email = mysql_escape_string($_POST['email']);
        $password = mysql_escape_string($_POST['email']);// Turn our post into a local variable
    }

$name = mysql_escape_string($_POST['name']);
$email = mysql_escape_string($_POST['email']);
$password = mysql_escape_string($_POST['password']);

if(!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $email)){
    // Return Error - Invalid Email
       $msg = 'The email you have entered is invalid, please try again.';
       
}else{
   // Return Success - Valid Email
$msg = 'Your account has been made, <br /> please verify it by clicking the activation link that has been sent to your email.';

}


    $hash = md5( rand(0,1000) ); // Generate random 32 character hash and assign it to a local variable.
    // Example output: f4552671f8909587cf485ea990207f3b

[b]$emailCheck = mysql_query("SELECT email FROM users WHERE email = '".$email."'");
if (mysql_num_rows($emailCheck) > 0) {
       echo "already submitted";
}

else
{[/b]

 
        // We have a match, activate the account
             mysql_query("INSERT INTO users (username, password, email, hash) VALUES(
    '". mysql_escape_string($name) ."',
    '". mysql_escape_string(md5($password)) ."',
    '". mysql_escape_string($email) ."',
    '". mysql_escape_string($hash) ."') ") or die(mysql_error());


Thanks in advance,


G

Hey, so I'm trying to check the database if the user and email already exists when registering.

<?php
include_once('includes/config.php');

if(isset($_POST['submit'])) {
	$username = $_POST['username'] ? trim($_POST['username']) : null;
	$password = md5($_POST['password']) ? trim($_POST['password']) : null;;
	$email = ($_POST['email']);
	$message = "";

	if(empty($username) || empty($password) || empty($email)) {
		$message = "All fields required";
	} else {
		$sql = "SELECT COUNT(username) AS userNum FROM users WHERE username = :username";
		$sql = "SELECT COUNT(email) AS emailNum FROM users WHERE email = :email";
		$stmt = $db->prepare($sql);

		$stmt->bindValue(':username', $username);
		$stmt->execute();

		$row = $stmt->fetch(PDO::FETCH_ASSOC);

		if($row['userNum'] >0) {
			die("That username already exists!");
		} elseif($row['emailNum'] > 0) {
			die("That email already exists!");
		}

		$sql = "INSERT INTO users (username, password, email) VALUES (:username, :password, :email)";
		$stmt = $db->prepare($sql);

		$stmt->bindValue(':username', $username);
		$stmt->bindValue(':password', $password);
		$stmt->bindValue(':email', $email);

		$result = $stmt->execute();

		if($result) {
			$message = "Registration was successful";
		}

	}
}
?>

If I remove this line "

$sql = "SELECT COUNT(email) AS emailNum FROM users WHERE email = :email";

the code works but only checks the username. How can I check both?

Hi, suppose I want to write a PHP script that checks whether a valid email address exists or not. There are a number of GUI-based tools to verify this, but is there any command line tool to do the same so that I can use PHP to capture the output?

Hi there everyone,

I have the below code (needs to be sanitized for SQL injection - i know   ).  Submitting to a MYSQL database.  I wish to check on form submit if the users email address already exists, and if so display a simple error message (even just a windows error message) stating "the email address you have entered already exists".

I don't really know where to start with this, or what the code should look like, so any help and direction would be massively appreciated.  All i do know, is the email column is set to unique, and when i attempt to submit using an email i know exists the code appears to run successfully without spitting out any errors (i.e. the web url changes to the below php code) but the table doesn't update (which is correct).  I just don't know how to then return the user to the form (preferably with all their info still entered) when this happens along with a nice error message...

Kind regards,

Tom.

Code: [Select]
<?
$localhost="00.000.000.00";
$username="###";
$password="###";
$database="mfirst";

$firstname=$_POST['firstname'];
$surname=$_POST['surname'];
$dob="{$_POST['dobyear']}-{$_POST['dobmonth']}-{$_POST['dobday']}";

if (isset ($_POST['permissionnewsletter']) || (!empty ($_POST['permissionnewsletter'])))
{ $permissionnewsletter = "Yes"; }
else
{ $permissionnewsletter = "No"; }

$email=$_POST['email'];
$userpassword=$_POST['userpassword'];
$telephone=$_POST['telephone'];

mysql_connect($localhost,$username,$password);
@mysql_select_db($database) or die( "Unable to select database");

$insertintocustomerdetail = "INSERT INTO customerdetail VALUES (NULL,'$firstname','$surname','$dob','$permissionnewsletter','$email','$userpassword','$telephone',now())";
mysql_query($insertintocustomerdetail);

$addressline1=$_POST['addressline1'];
$addressline2=$_POST['addressline2'];
$cityortown=$_POST['cityortown'];
$county=$_POST['county'];
$postcode=$_POST['postcode']=strtoupper(@$_REQUEST['postcode']);

$insertintoaddresstable = "INSERT INTO addresstable VALUES (NULL,LAST_INSERT_ID(),'$addressline1','$addressline2','$cityortown','$county','$postcode',now())";
mysql_query($insertintoaddresstable);

mysql_close();
?>

preg_match("/^[a-zA-Z] [a-zA-Z0-9]{8, 13} [\_]{1, 1} \@ [a-zA-Z0-9]{1, 15} \. [a-zA-Z]{2, 4}$/", $string);

Basically what I want it to check to see is that the email starts with one lowercase or uppercase letter. Then make sure the email contains only a-zA-Z0-9 characters than can span up to 13 chars long. And that a hyphen may be used if necessary, but is not required. Then of course make sure there is an "@" sign. The rest is to make sure that the domain name is only consisted of a-zA-Z0-9 characters that may be up to 15 characters long. Also, require a period right after, and then the TLD, which I would imagine the largest is only 4 characters long.

Is that what the above does? If not, can someone guide me in the right direction and help correct any errors, if applicable?

What's the proper way to check if a file exists on a remote server? I know file_exists() works for you local files.

I think i need to use something like the following. BUT if the file is not found PHP throws a warning. I know i can put a '@' before fopen() but that just masks the error.

Code: [Select]
<?php
if(fopen("http://www.othersite.com/imageXYZ.jpg", "r"))
{
echo "File exists.";
}
else
{
echo "File does not exist.";
}
?>

Ok, here's my code: How do i make it so that it outputs a maximum of only 5 results from the query where the img file exists. When I add LIMIT to the sql query it doesnt work so I guess its something else, but I have no clue. Can anyone help?


$query = mysql_query("SELECT * FROM table WHERE date >= '$now' ORDER BY max(date) desc");
while ($row = mysql_fetch_assoc($query)) {
$cid = $row['cat_id'];
$title = $row['name'];
$seoname = $row['seourl'];

$img = 'images/'.$seoname.'.jpg';
if (!file_exists($img)) {
$img = '';
} else {
$img = 'images/'.$seoname.'.jpg';
}

if (!empty($img)) {
echo '<a href="images/'.$seoname.'/"><img src="'.$img .'" style="width:528px;" alt="" /></a>' . "\n";
}
}


Thanks.

This topic has been moved to PHP Applications.

http://www.phpfreaks.com/forums/index.php?topic=347298.0

Hello Pros...

I need to check (from a Debian server to a Mac CLIENT (not server) machine) to see if a file exists on the file system...not an http server.

Here's what I've tried (based on reading at http://www.php.net/manual/en/function.ssh2-exec.php)

Code: [Select]
<?php
function check_remote_files($username, $hostname, $remote_file)
{
$connection = ssh2_connect($hostname, 22, array('hostkey'=>'ssh-rsa'));

if (ssh2_auth_pubkey_file($connection, $username,
                          '/root/.ssh/id_rsa.pub',
                          '/root/.ssh/id_rsa', '')) 
{
echo "Public Key Authentication On Server #2 Successful\n";
}

$url = "if ssh $hostname stat $remote_file \> /dev/null 2\>\&1";
$stream=ssh2_exec($connection,$url);
    stream_set_blocking( $stream, true );
    $cmd=fread($stream,4096);
fclose($stream);

$stream=ssh2_exec($connection,"then");
    stream_set_blocking( $stream, true );
    $cmd=fread($stream,4096);
fclose($stream);

$stream=ssh2_exec($connection,"echo File exists");
    stream_set_blocking( $stream, true );
    $cmd=fread($stream,4096);
fclose($stream);

$stream=ssh2_exec($connection,"else");
    stream_set_blocking( $stream, true );
    $cmd=fread($stream,4096);
fclose($stream);

$stream=ssh2_exec($connection,"echo Not found");
    stream_set_blocking( $stream, true );
    $cmd=fread($stream,4096);
fclose($stream);

$stream=ssh2_exec($connection,"fi");
    stream_set_blocking( $stream, true );
    $cmd=fread($stream,4096);
fclose($stream);

}
?>

NOTHING happens after the echo of Public Key Authentication On Server #2 Successful.

I'm running this script from a bash shell.

Any ideas what might be wrong?

Thanks.

Hi,
I'm creating an upload section that limits users to upload the following file types:

.pdf
.zip
.rar
.doc
.jpeg
.gif

When getting the type for .pdf files, it comes up as:
application/force-download

and for .rar files it comes up as:
application/x-download

If I do a check that says:

if ($type=="application/force-download" || $type=="application/x-download")

then will users only be able to upload .PDF and .RAR files? I'm assuming these two types will allow other formats as well.

If this is the case, how can I check the extension of the file before the user is able to upload it. I was thinking of somehow capturing the last 3 letters of the filename, and then doing the check that way, except I'm not sure how to go about this. Any insight appreciated!

Hi Community! :-) (Sorry for my average english)

I recently started coding in php, till now, i allready have advanced skills in programming with C# and thus, had no problems writing my own script.   Still, my script does not really work, i'm trying to check if a file contains a md5(string), but the script never finds the string.

This is the script: (please don't mind any security issues, this is just a test. But if you have any tips and tricks to improve the security, i'd be glad to receive them)

<?php
$webname = $_POST["webname"];
$webcode = $_POST["webcode"];
$webpass = $_POST["webpass"];
if (file_exists("web/". $webname . ".html")) {
$file = file_get_contents("web/". $webname . ".html", "r");

if (strpos(md5($webpass),$file) !== false) {
$usergen = fopen("web/" . $webname . ".html", "w")  or die("Unable to open file!");
fwrite($usergen, $webcode);
fwrite($usergen, "<!--- ". md5($webpass) . "--->");
fclose($usergen);
echo "Generated! You can view your site under /web/" . $webname . ".html";
}
else
{
echo "The file already exists but you entered the wrong Password.<br> Pressing the \"return\" Button will bring you back without loosing the code you entered.";
}
}
else
{
$usergen = fopen("web/" . $webname . ".html", "w")  or die("Unable to open file!");
fwrite($usergen, $webcode);
fwrite($usergen, "<br><!--- ". md5($webpass) . " --->");
fclose($usergen);
echo "Generated! You can view your site under /web/" . $webname . ".html";
}
echo "<FORM><INPUT Type=\"button\" VALUE=\"Back\" onClick=\"history.go(-1);return true;\"></FORM>";
?>

What it does it pretty simple, you enter some html-code that'll be stored in the "webcode" variable, a password, let's say "apple" in "webpass" and the filename is stored in "webname".
On first creation, a html-file is created with the
<!--- md5(apple) ---> at it's end, the HTML Tags are needed to hide the string from any visitors.

If someone wants to edit the File created before, he also enters "apple".
Then the string will be looked up as md5(apple) in the file.
If the strings match, it's true and the changes should be saved.
Whatever i do, though, i'm allways ending up here if i try to edit an existing file: "The file already exists but you entered the wrong Password.<br> Pressing the \"return\" Button will bring you back without loosing the code you entered.";
As i said, i'm a newbie, i'd appreciate any tips and help.

Thank you in advance!

Hi,

I'm trying to figure out the best way to determine if a user is currently downloading a file from my website.
The way my site works, is the user waits 30 seconds and views an ad. After the timer is up the download becomes available.
I heard that I could probably use a timestamp or something of the sort. I've read up on it but not sure how I could go about this.