PHP - Can't Sign In To Mysql Using Posted $user And $pass1

Hi,

I am getting frustrated beyond belief at the moment with trying to get a very simple script to run, I am using PHP 5.3.3 and MySQL 5.1 on a Win2k8 server with IIS7.5. Basically my script is connecting to a local database, running a single select query, returning those rows and building up a string from them.

The problem is that I am receiving complete BS responses from PHP that the access is denied for the user being specified. This is complete rubbish since the user can connect via mysql, sqlyog, ASP.NET MVC without issue but for some bizarre reason it is not working via PHP.

The code for the script is here :

Code: [Select]
<?php

$mysql = mysql_connect('127.0.0.1:3306', 'myuser', 'mypass', 'mydatabase');


if (!$mysql) {
  die(mysql_error());
  $content = "<nobr></nobr>";
} else {
  
  $result = mysql_query('SELECT * FROM tblEventGroup'); 
  $content = "<nobr>";
  
  if ($result) {     
      while($row = mysql_fetch_assoc($result)) {
       $content .= "<span>";
       $content .= $row['GroupName'];
       $content .= "</span>";
       $content .= "<a href=\"../Event/EventSearch?groupid=";
       $content .= $row['GroupId'];
       $content .= "\" target=\"_blank\">Book here</a> ";
      }
  }
  
  mysql_close($mysql);
  $content .= "</nobr>";

}

?>
I cannot for the life of me understand what the problem is, the return error is

Access denied for user 'myuser'@'localhost' (using password: YES)

This could be PHP or MySql so putting it in PHP forum for now...
I have code below (last code listed) which processes a dynamically created Form which could have anywhere from 0 to 6 fields.  So I clean all fields whether they were posted or not and then I update the mySQL table.

The problem with this code below is that if, say, $cextra was not posted (i.e. it wasnt on the dynamically created form), then this code would enter a blank into the table for $cextra (i.e. if there was already a value in the table for $cextra, it gets overwritten, which is bad).

What is the best way to handle this?  I'm thinking i have to break my SQL query into a bunch of if/else statements like this...

Code: [Select]
$sql = "UPDATE cluesanswers SET ";
if (isset($_POST['ctext'])){
echo "ctext='$ctext',";
} else {
//do nothing
}
and so on 5 more times....

That seems horribly hackish/inefficient.  Is there a better way?

Code: [Select]
if (isset($_POST['hidden']) && $_POST['hidden'] == "edit") {

$cimage=trim(mysql_prep($_POST['cimage']));
$ctext=trim(mysql_prep($_POST['ctext']));
$cextra=trim(mysql_prep($_POST['cextra']));
$atext=trim(mysql_prep($_POST['atext']));
$aextra=trim(mysql_prep($_POST['aextra']));
$aimage=trim(mysql_prep($_POST['aimage']));


//update the answer edits
$sql = "UPDATE cluesanswers SET ctext='$ctext', cextra='$cextra', cimage='$cimage', atext='$atext', aextra='$aextra', aimage='$aimage'";
$result = mysql_query($sql, $connection);
if (!$result) {
die("Database query failed: " . mysql_error());
} else {
}

create table mimi (mimiId int(11) not null, mimiBody varchar(255) );
<?php
//connecting to database
include_once ('conn.php');
$sql ="SELECT mimiId, mimiBody FROM mimi";

$result = mysqli_query($conn, $sql );

$mimi = mysqli_fetch_assoc($result);

$mimiId ='<span>No: '.$mimi['mimiId'].'</span>';

$mimiBody ='<p class="leading text-justify">'.$mimi['mimiBody'].'</p>';
?>
//what is next?

i want to download pdf or text document after clicking button or link how to do that

In ubuntu 19.04 with php version 7.2 , i want to add mysql user with php when i run the code below get the error:

SQLSTATE[HY000] [1698] Access denied for user 'root'@'localhost'

I didn't set any password for root , this is php code:

<?php

$server = "localhost";
$dbuser = "root";
$dbpassword = "";

try {
    $connection = new PDO("mysql:host=$server", $dbuser, $dbpassword);


    $connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    $user = 'test' . '@' . 'localhost';

    $sqlQuery = "CREATE USER . $user . ";

    $connection->exec($sqlQuery);

    echo "User created successfully!";
    }
catch(PDOException $e){
	  echo $sqlQuery . "<br>" . $e->getMessage();
}

$connection = null;
?>

 

Hi,

I have a fully pledged membership system and want to integrate my own user referral system but want some tips, advice really on the logic of it. Basically already registered users on my site will have the option to refer people, only registered users. I will try to explain my logic and what i have done so far.

My current registered users table is something like

Quote

    users (table)
    - id (user id)
    - email (user email)
    - password (hash of users password)
    - reg_date (date user registered)


I have some other fields but not relevant to what I want to do and to keep things as simple as possible I left them out.

I am thinking of creating a new table called referrals and for example when a registered user on my site from the users table goes to a member only page called referral.php it will display a form so they can enter an email address of someone they want to refer and it also displays the people they referred.

My referral table is like this so far and not sure if it's best way to go about the database logics and php logic.

my table so far looks like this:

Quote

    referrals (table)
    - id (auto incremented every time a new referral (row) is added to referrals table)
    - referrer_uid (id of referrer, this would be the unique id of a registered user from the users table)
    - referred_email (email address of person who has been referred)
    - status (when someone is first referred default will be `referred`, if they signup to site via referral link this will update to `completed`)
    - created_on (date the referral was made, unix timestamp)
    - updated_on (date the referred person actually clicks the referral link and completes signup)


Currently i added the database table above to my site on local. added some sample data for testing and created a referral.php page where there's a form so a registered member can enter a persons email and refer them to my site to signup. On referral.php there is also  the total people they referred and a table showing all the people they referred as follows:

Referred Email | Referred Date | Status | Completed On

Now so far everything is seems fine. I have my sample (pretend referrals i made) data showing in my test account. The part i am now not sure about is this:

Obviously to stop abuse i do my usual validation checks like: check to ensure the email being entered on referrals page does not exist in users table (registered member), check to ensure the email has not already been referred previously (for spam reasons) only allowed to refer an email address once and not allowed to refer someone who has previously been referred by someone else to (again for spam reasons)

Now onto the tracking the referral and link building.

I was first thinking this:

on sign up form have a hidden field. The sign up form would do a simple check to see if isset $_GET['ref'] like signup.php?ref=something_here

if it is prefill the hidden field, when user then signs up if the ref=something_here matches what's in the database then update referral to complete so the referrer knows that their friend for example signed up via their referral, unix timestamp of when referred person completed signup.

Now i was going to use the email address of referred person or username of person who made the referral signup.php?ref=username or signup.php?ref=referred_email . Now what i am thinking is what would be better and i guess stop random abuse is create another column and call it referred_id; this would be a random md5 hash that is unique to that referral and it will be appended to the url like signup.php?ref=md5_hash_here.



So my questions a

1) Is there anything you think i should change, improve on, alter etc ?

2) Do you think i am going about it the rite way or making a mess of it ?

3) Have i left anything out that i may have not thought of that could cause the system to be abused ?

Any suggestions, feedback, help on the whole logic would be great.

I coded allot of it last night and won't take me long to do the rest but need some help in terms of ensuring i am doing it the best way possible etc, the logic behind it all.

Thanks for any suggestions, help, advice, tips!

PHPFAN

I have a family site with a member list and a forum that both run on MySql.
One of the items in the member list is the birthday.

What I like to achieve is that a day or 2 before a member's birthday, a post wil be automaticly inserted in the forum, (a post that contains that this persons birthday is comming up in a few days) without any user input.
I like to have this done automaticly because I don't feel like setting up a cron job for every member seperatly. There are just too many members.
What I need is a script that will create a cron job or something simular the moment a new member registers and updates his profile and sets his birthday.

Hi,

I have wondered if just one user should be used (e.g. root) for connecting to the database is the right way of doing things? (which is what I have always done).

Would it be better to have a new user created in the privileges section in MySQL and have all operation/table access assigned appropriately for every single user that signs up? I would think that this would give a lot more security but would need a bit more work.

What are your thoughts?

I have created a button which when pressed should present the user with their details (whoever is logged in), here is the form code:

<form id="form1" name="form1" method="post" action="getdetails.php">
 
  <input type="submit" name="Get Details" value="Get Details" />
   </label>
   
  </p>
</form>

Here is the getdetails.php file

<?php
 mysql_connect("localhost","root","");
 mysql_select_db("test");
 $username = $_POST['textfield'];
  echo '</br>';
 $query = mysql_query("SELECT * FROM membersdetails WHERE name=`$username` ");

while($result = mysql_fetch_array($query)) {
//display
echo $result['firstname'];
echo $result['surname'];
}
?>

Its not workin at all I have attacthed the error i am getting

Any help please?

Hi there,    I'm fairly new to PHP and I'm self teaching.    I'm sure this will be out there somewhere but I can't for the life of me think of the terminology to search the net and find the solution.    I'm creating a Task Manager;    Each task can be assigned to many users at once.    I'm creating a text field in the task field, this text field will include user ids separated by commas.   I believe I can explode this data to handle each id.   However how can I build a php script that will show the user all the task assigned too them.   If it did a search LIKE in the text field. The id could be confused with others.   If someone knows the solutions I would be very greatful.   thanks for reading   

I have
members.php:
<?php
/**********************************************************************
Filename: members.php
Version: $Id: members.php 17 2007-04-09 09:40:35Z Jez $

Description:
This file displays the members screen once they've logged in.
**********************************************************************/
/*
Members script:

*/
include_once("config.php");

// Check user logged in already:
checkLoggedIn("yes");
doCSS();
print("Welcome to the members page <b>".$_SESSION["login"]."</b><br>\n");
print("Your password is: <b>".$_SESSION["password"]."</b><br>\n");
print("<a href=\"logout.php"."\">Logout</a>");
?>

and functions.php:
<?php
/**********************************************************************
Filename: functions.php
Description:
This file contains main stock of functions.

This file is automatically 'include()'d by every page that include()'s
the file 'config.php'.  This has the benefit that every page that
includes 'config.php' will have access to all of the functions in
this file.
**********************************************************************/


/******************************************************\
 * Function Name : connectToDB()
 *
 * Task : create connection to db
 *
 * Arguments : none
 *
 * Globals: all defined in config.php
 *
 * Returns : none, sets $link
 *
 \******************************************************/
function connectToDB() {
global $link, $dbhost, $dbuser, $dbpass, $dbname;

/*
Database connection:
The PHP function mysql_pconnect() connects to a MySQL
database with the arguments it is given.  mysql_pconnect()
creates a persistent database connection which can save
some time when a number of mysql connections are made to
the same db with the same user/password/dbhost triple.
Further, when the execution of the PHP script ends, the
connection to the database is NOT closed.  In some rare
cases this can cause problems.

Alternatively mysql_connect() can be used and takes the
same arguments as mysql_pconnect().  However mysql_connect()
does not maintain a persistent connection - every call to
mysql_connect() creates a new db connection.  On a busy
server this can significantly increase the amount of time
taken to execute queries on the db.
*/
($link = mysql_pconnect("$dbhost", "$dbuser", "$dbpass")) || die("Couldn't connect to MySQL");

// select db:
mysql_select_db("$dbname", $link) || die("Couldn't open db: $dbname. Error if any was: ".mysql_error() );
} // end func dbConnect();


/******************************************************\
 * Function Name : newUser($login, $pass)
 *
 * Task : Create a new user entry in the users table
based on args passed
 *
 * Arguments : string($login, $pass)
 *
 * Returns : int($id), $id of new user
 *
 \******************************************************/
function newUser($login, $password) {
/*
Creating a New User Record in the DB:
In this function we create a new user record in the db.

We first build a query and save it into the $query variable.
The query statement says:

'Insert the value of $login and $password into the 'login'
and 'password' columns in the 'users' table'
*/

global $link;

$query="INSERT INTO users (login, password) VALUES('$login', '$password')";
$result=mysql_query($query, $link) or die("Died inserting login info into db.  Error returned if any: ".mysql_error());

return true;
} // end func newUser($login, $pass)


/******************************************************\
 * Function Name : displayErrors($messages)
 *
 * Task : display a list of errors
 *
 * Arguments : array $messages
 *
 * Returns : none
 *
 \******************************************************/
function displayErrors($messages) {
/*
Error Handling functions:
An error handling function is useful to have in any project.

This particular function takes an array of messages, and
for each message displays it in a list using HTML
<ul><li></li></ul> tags.
*/
print("<b>There were problems with the previous action.  Following is a list of the error messages generated:</b>\n<ul>\n");

foreach($messages as $msg){
print("<li>$msg</li>\n");
}
print("</ul>\n");
} // end func displayErrors($messages)


/******************************************************\
 * Function Name : checkLoggedIn($status)
 *
 * Task : check if a user is (isn't) logged in depending on $status
 *
 * Arguments : quasi(!) boolean $status - "yes" or "no"
 *
 * Returns :
 *
 \******************************************************/
function checkLoggedIn($status){
/*
Function to check whether a user is logged in or not:
This is a function that checks if a user is already logged
in or not, depending on the value of $status which is passed
in as an argument.

If $status is 'yes', we check if the user is already logged in;
If $status is 'no', we check if the user is NOT already logged in.
*/
switch($status){
// if yes, check user is logged in:
// ie for actions where, yes, user must be logged in(!)
case "yes":
if(!isset($_SESSION["loggedIn"])){
header("Location: login.php");
exit;
}
break;

// if no, check NOT logged in:
// ie for actions where user can't already be logged in
// (ie for joining up or logging in)
case "no":
/*
The '===' operator differs slightly from the '=='
equality operator.

$a === $b if and only if $a is equal to $b AND
$a is the same variable type as $b.

for example, if:

$a="2"; <-- $a is a string here
$b=2; <-- $b is an integer here

then this test returns false:
if($a===$b)

whereas this test returns true:
if($a==$b)
*/
if(isset($_SESSION["loggedIn"]) && $_SESSION["loggedIn"] === true ){
header("Location: members.php");
}
break;
}
// if got here, all ok, return true:
return true;
} // end func checkLoggedIn($status)


/******************************************************\
 * Function Name : checkPass($login, $password)
 *
 * Task : check login/passwd match that stored in db
 *
 * Arguments : string($login, $password);
 *
 * Returns : array $row  - array of member details on success
 * false on failure
 \******************************************************/
function checkPass($login, $password) {
/*
Password checking function:
This is a simple function that takes the $login name and
$password that a user submits in a form and checks that a
row exists in the database whe

the value of the 'login' column is the same as the value in $login
and
the value of the 'password' column is the same as the value in $password

If exactly one row is returned, then that row of data is returned.
If no row is found, the function returns 'false'.
*/
global $link;

$query="SELECT login, password FROM users WHERE login='$login' and password='$password'";
$result=mysql_query($query, $link)
or die("checkPass fatal error: ".mysql_error());

// Check exactly one row is found:
if(mysql_num_rows($result)==1) {
$row=mysql_fetch_array($result);
return $row;
}
//Bad Login:
return false;
} // end func checkPass($login, $password)


/******************************************************\
 * Function Name : cleanMemberSession($login, $pass)
 *
 * Task : populate a session variable
 *
 * Arguments : string $login, string $pass
taken from users table in db.
 *
 * Returns : none
 *
 \******************************************************/
function cleanMemberSession($login, $password) {
/*
Member session initialization function:
This function initializes 3 session variables:
  $login, $password and $loggedIn.

$login and $password are used on member pages (where you
could allow the user to change their password for example).

$loggedIn is a simple boolean variable which indicates
whether or not the user is currently logged in.
*/
$_SESSION["login"]=$login;
$_SESSION["password"]=$password;
$_SESSION["loggedIn"]=true;
} // end func cleanMemberSession($login, $pass)


/******************************************************\
 * Function Name : flushMemberSession($session)
 *
 * Task : unset session variables and destroy session
 *
 * Arguments : array $session
 *
 * Returns : true
 *
 \******************************************************/
function flushMemberSession() {
/*
Member session destruction function:
This function unsets all the session variables initialized
above and then destroys the current session.
*/
// use unset to destroy the session variables
unset($_SESSION["login"]);
unset($_SESSION["password"]);
unset($_SESSION["loggedIn"]);

// and use session_destroy to destroy all data associated
// with current session:
session_destroy();

return true;
} // send func flushMemberSession()


/******************************************************\
 * Function Name : doCSS()
 *
 * Task : output the CSS for the screens
 *
 * Arguments :
 *
 * Returns :
 *
 \******************************************************/
function doCSS() {
/*
CSS Output:
This function simply outputs some cascading style sheet
data for markup by the user's browser.
*/
?>
<style type="text/css">
body{font-family: Arial, Helvetica; font-size: 10pt}
h1{font-size: 12pt}
</style>
<?php
} // end func doCSS()

# function validates HTML form field data passed to it:
function field_validator($field_descr, $field_data,
  $field_type, $min_length="", $max_length="",
  $field_required=1) {
/*
Field validator:
This is a handy function for validating the data passed to
us from a user's <form> fields.

Using this function we can check a certain type of data was
passed to us (email, digit, number, etc) and that the data
was of a certain length.
*/
# array for storing error messages
global $messages;

# first, if no data and field is not required, just return now:
if(!$field_data && !$field_required){ return; }

# initialize a flag variable - used to flag whether data is valid or not
$field_ok=false;

# this is the regexp for email validation:
$email_regexp="^([a-zA-Z0-9_\-\.]+)@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.)|";
$email_regexp.="(([a-zA-Z0-9\-]+\.)+))([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)$";

# a hash array of "types of data" pointing to "regexps" used to validate the data:
$data_types=array(
"email"=>$email_regexp,
"digit"=>"^[0-9]$",
"number"=>"^[0-9]+$",
"alpha"=>"^[a-zA-Z]+$",
"alpha_space"=>"^[a-zA-Z ]+$",
"alphanumeric"=>"^[a-zA-Z0-9]+$",
"alphanumeric_space"=>"^[a-zA-Z0-9 ]+$",
"string"=>""
);

# check for required fields
if ($field_required && empty($field_data)) {
$messages[] = "$field_descr is a required field.";
return;
}

# if field type is a string, no need to check regexp:
if ($field_type == "string") {
$field_ok = true;
} else {
# Check the field data against the regexp pattern:
$field_ok = ereg($data_types[$field_type], $field_data);
}

# if field data is bad, add message:
if (!$field_ok) {
$messages[] = "Please enter a valid $field_descr.";
return;
}

# field data min length checking:
if ($field_ok && ($min_length > 0)) {
if (strlen($field_data) < $min_length) {
$messages[] = "$field_descr is invalid, it should be at least $min_length character(s).";
return;
}
}

# field data max length checking:
if ($field_ok && ($max_length > 0)) {
if (strlen($field_data) > $max_length) {
$messages[] = "$field_descr is invalid, it should be less than $max_length characters.";
return;
}
}
}
?>

The db has an table users with  id, login, password, site
Question how can i get inf from "site" raw  for logged user on  members.php   ( as a link).
Pls help thanks

hi
i had database with field of name,title,post,content

i want to fetch the post and content for a specific user from giving name of that user by form help me to get that

ps just give me idea to how to do that/

Code: [Select]
<form id="form1" name="form1" method="post" action="view.php">
  <label>Name
  <input type="text" name="textfield" />
  </label>
  <p>
    <label>
    <input type="submit" name="Submit" value="Submit" />
    </label>
  </p>
</form>

Hello!

I want to make the users in the website able only to upload, for example, 1 GB, so that when a user finishes the 1 GB available for his files, he cannot upload more files.

I know how to set up upload limit for a single file in the upload page, or even globally for anyone to upload. But I would like to know how to make each user has specific capacity, and how it is updated so that if he uploads 0.5 GB he has only 0.5 GB left.

I thought of creating a column in the `users` or something concerning upload limit that I will set it (one GB for example). If I will do that, how will I be able to determine how much he uploaded?

Any help would be appreciated.

Thank you!

Hi All,

I am currently struggling with the my user info function which is supposed to display an image on my profile page along with the following parts of information taken from my database.

The error is a mysql error stating that the $info = mysql_fetch_assoc($result); is not a valid arguement.

Code: [Select]
function fetch_user_info($uid)
{

$uid=(int)$uid;
       
    $sql = "SELECT
`user_id AS `id`
                `user_username` AS `username`,
                `user_firstname` AS `firstname`,
                `user_lastname` AS `lastname`,
                `user_email` AS `email`,
                `user_location` AS `location`,
                `user_about` AS `about`,
                `user_gender` AS `gender`
FROM `users`
WHERE `user_id` = {$uid}";
                                 
        $result = mysql_query($sql);
       
        $info = mysql_fetch_assoc($result);
       
        $info['avatar'] = "core/user_avatars/{$info['id']}.jpg";

return $info;

}
I have looked through the code a few times, but I can tell what is wrong.

I have included below the profile page code in case it may be an issue there.

Code: [Select]
<?php

include('core/init.inc.php');

$userinfo = fetch_user_info($_GET['uid']);

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title><?php echo $userinfo ['username']; ?>'s Profile</title>
</head>
<body>
<div>
   
    <?php

if($userinfo == false)
{

echo 'Sorry, the user does not exist.';

}
else
{
?>
        <h1><?php echo $userinfo ['firstname']; ?> <?php echo $userinfo ['lastname']; ?></h1>
            <img src="<?php echo $userinfo['avatar'];?>" alt="avatar"/>
    <p>Username: <?php echo $userinfo ['username']; ?></p>
    <p>First Name: <?php echo $userinfo ['firstname']; ?></p>
    <p>Last Name: <?php echo $userinfo ['lastname']; ?></p>
            <p>Gender: <?php echo ($userinfo ['gender'] == 1) ? 'Male' : 'Female'; ?></p>
    <p>Email: <?php echo $userinfo ['email']; ?></p>
    <p>Location: <?php echo $userinfo ['location']; ?></p>
    <p>About: <?php echo $userinfo ['about']; ?></p>
           
    </div>
    <?php
}
?>
</body>
</html>
Thanks

Jamie

Hello all,

I have a membership website which is using sessions... and ive been asked to add some promotion points system. So that each user is able to see how many promotion points they have...

Now, I'm a beginner in mysql and php, but feel I'm learning fairly quickly. What I need help with, is to be able to display the amount of promotion points for the logged in user.

I created a new field in my "essenti1_Users" table for the promotion code.

database is called "essenti1_membership"
table is "essenti1_Users"
feild is "promo"


I think im going to have to manually add the points to each user manually through phpMyAdmin Navicat unfortunatly. Unless anyone has any other ideas just for adding the points to each user account?
ziggynerja is online now Add to ziggynerja's Reputation Report Post      Edit/Delete Message

Hi

I am using php5 and Mysql

I want to generate user id like phone format (Ex: xxx-xxx-xxxx). and check that user id exists in database or not. if yes, i have to generate new user id etc. If that user id not in database, i have to insert user id for new user. Means i have generate unique user id for login purpose.

Generating user id is working fine. availability of user id also ok for me by using mysql_num_rows() function. But if user id i exists in database, how can i generate new user id. All this will be done in single instance (When user click on submit button from registration form).

Here is my script.

Code: [Select]
<?php
function UserID()
{
$starting_digit=5;
$first_part1=rand(0,99);
if(strlen($first_part1)==1) { $first_part="0".$first_part1; } else { $first_part=$first_part1; }
$second_part1=rand(1,999);
if(strlen($second_part1)==1) { $second_part="00".$second_part1; } elseif(strlen($second_part1)==2) { $second_part="0".$second_part1; } else { $second_part=$second_part1; }
$third_part1=rand(1,9999);
if(strlen($third_part1)==1) { $third_part="000".$third_part1; } elseif(strlen($third_part1)==2) { $third_part="00".$third_part1; } elseif(strlen($third_part1)==3) { $third_part="0".$third_part1; } else { $third_part=$third_part1; }
$userid=$starting_digit.$first_part."-".$second_part."-".$third_part;
return $userid;
}

$random_userid=UserID();

$sql=mysql_query("select * from users where user_id='".$random_userid."'");
if(mysql_num_rows($sql)==0)
{
$insert=mysql_query("insert into users (user_id) values ('".$random_userid."')");
}
?>

If user id not exists in database, that user id inserting in database successfully. If not, empty value is inserting, not generating new user id.

Can any one help me out please.