PHP - Please Help With Edit Page

I'm using php edit function to edit an php file online. I think the portion that writing the file is below. My issue is that wherever there's a quote ("), it's automatically adding a slash (\). For example, if I had class="abc", it changes to class=\"abc\". How do I fix this?

Code: [Select]
<?php

$file = $_GET['f'];
$script = $_POST['script'];
      if($file&&$script) {
      $fp=fopen($file, "w");
      fwrite($fp,$script);
      fclose($fp);
   }
?>

hello mates,

I am needing help on editing a line in Flat File Database.

I got it to pull the data i need out by using id but not sure on how i would go about getting it to update the FFD

heres what i got so far


$id2 = $_REQUEST['id'];

 $id = array();
 $username = array();
 $title = array();
 $date = array();
 $message = array();
$lines = file('../news/news.db'); 
foreach($lines as $line){ 
if($id != $id2) {
    $explode = explode("||",$line);
$id = $explode[0]; 
    $username = $explode[1];
$title = $explode[2];
$date = $explode[3];
$message = $explode[4];
} 
}
?>
      <form action="edit_news2.php?id=<?php echo $id; ?>" method="post" name="editnews">
        <table width="100%">
  <tr><td><input name="id" value="<?php echo "$id;" ?>" type="hidden" />UserName:</td><td> <input name="userName" value="<?php echo "$username" ?>" type="text" readonly="true"  /></td></tr>
          <tr><td>News Title:</td><td> <input name="title" type="text" value="<?php echo "$title"; ?>" /></td></tr>
          <tr><td>Date/Time:</td><td> <input name="datetime" value="<?php echo "$date"; ?>" type="text" readonly="true" /></td></tr>
          <tr><td colspan="2">Message:</td></tr>
  <tr><td colspan="2"><textarea name="message" cols="50" rows="15"><?php echo "$message"; ?></textarea></td></tr>
          <tr><td colspan="2" align="center"><input type="submit" name="submitBtn" value="Post News" /></td></tr>
        </table>
      </form>



thank you
Valkeri2010

Hello people, well the question couldn't be more explicit.  I just learned how to view the php.ini configuration of my server using the phpinfo()script.  But apparently it is a read only file.  So how does one edit it?  I am trying to extend session timeout.  Thanks.

Hi Guys,

I have a list of branches in a database table with the following collumns,

Ter BranchName BranchAddress BranchTel BranchEmail BranchLink
Ter = Terriotory ID

However every time i update a branch using the edit.php code it always sets the Ter as 1 again! Rather than leaving it the same. The actual field is read-only to prevent that from happening.

It then always comes up with the error Duplicate entry '1' for key 1 but thats because there is already a branch with Ter=1

 
include('config.php'); 
if (isset($_GET['Ter']) ) { 
$ter = (int) $_GET['Ter']; 
if (isset($_POST['submitted'])) { 
foreach($_POST AS $key => $value) { $_POST[$key] = mysql_real_escape_string($value); } 
$sql = "UPDATE `ter` SET `Ter` =  `BranchName` =  '{$_POST['BranchName']}' ,  `BranchAddress` =  '{$_POST['BranchAddress']}' ,  `BranchTel` =  '{$_POST['BranchTel']}' , `BranchEmail` =  '{$_POST['BranchEmail']}' , `BranchLink` =  '{$_POST['BranchLink']}'   WHERE `Ter` = '$ter' "; 
mysql_query($sql) or die(mysql_error()); 
echo (mysql_affected_rows()) ? "Edited Branch.<br />" : "Nothing changed. <br />";  
} 
$row = mysql_fetch_array ( mysql_query("SELECT * FROM `ter` WHERE `Ter` = '$ter' ")); 



<form action='' method='POST'> 
<p><b>Territory:</b><br /><input name='Ter' type='text' value='<?= stripslashes($row['Ter']) ?>' size="3" readonly="readonly" />
<p><b>Branch Name:</b><br /><input name='BranchName' type='text' value='<?= stripslashes($row['BranchName']) ?>' size="50" /> 
<p><b>Address:</b><br />
  <textarea name="BranchAddress" cols="40" rows="5"><?= stripslashes($row['BranchAddress']) ?></textarea> 
<p><b>Telephone:</b><br /><input name='BranchTel' type='text' value='<?= stripslashes($row['BranchTel']) ?>' size="15" />
<p><b>Email:</b><br /><input name='BranchEmail' type='text' value='<?= stripslashes($row['BranchEmail']) ?>' size="50" />
<p><b>Link:</b><br /><input name='BranchLink' type='text' value='<?= stripslashes($row['BranchLink']) ?>' size="50" />
<p><input type='submit' value='Save' /><input type='hidden' value='1' name='submitted' /> 
</form> 
<? } ?> 

Any Ideas?
Cheers, S

Ok I have a file with my emails and passwords like this

email:pass
email:pass
email:pass
email:pass

and so on..

Is it possible to make a script that will delete everything after the ":" and replace the ":" with a comma?

Im not sure what functions or w/e I could use to make this possible?
Any ideas? Thanks

hi...again got in a mess...i m developing this ticketing system where once i check the checkbox and press the edit button,it takes me to the edit page with the same ticket no to be printed there....how do i do this
i have attached the two pages for your smooth understanding
attachment 1-->page where i check the ticket no from a list of ticket nos
attachment2-->page where the ticket no must be displayed as checked on the previous page

help is appreciated in advance....

Hi. I am working on a website that has restriction level. An admin, a staff, and ordinary user. In my admin page when I click the button "View Users" it shows all the listed users in a table, from admin to ordinary users. And on each entry is an option to either "Delete" or "Edit" the users account.

Now I have a problem with editing user profile because it appears blank fields. Not like in the admin side wherein if I click "Edit" the fields are filled with the users info.

How do I do this in the staff's page.

Here is the view users code from the admin's page:
Code: [Select]
if (@$_GET['action'] == "View Users")
{
     print "<font size=6 color=yellow><center>View User's Records</center><br></font>";
     
$result = mysql_query ("SELECT * FROM users order by user_lvl, lname asc");
     
$rows = mysql_num_rows($result);
     
if ($rows!=0)
{
        print "<table border=1 align=center cellspacing=10>";

        print " <tr bgcolor=yellow align=center>

                <td>First Name</td>
 
                <td>Last Name</td>
   
                <td>Email</td>

        <td>Username</td>

                <td>Password</td>
 
                <td>Phone Number</td>

<td>User Privilege</td>

<td>Options</td>


       </tr>";


        for ($i=0; $i< $rows; $i++)
 
         {
           $row = mysql_fetch_row ($result);

           print "<tr bgcolor= white align=center>";

           print "<td>$row[0]</td>";

             print "<td>$row[1]</td>";            
 
   print "<td>$row[2]</td>";

           print "<td>$row[3]</td>";

   print "<td>$row[4]</td>";

   print "<td>$row[5]</td>";

   print "<td>$row[6]</td>";

   print "<td>[ <a href=admin_main.php?action=Delete&username=$row[3]>Delete</a> ]";

           print "[ <a href=admin_main.php?action=Edit&username=$row[3]>Edit</a> ]";

           print "</td>";

           print "</tr>";

  }
       
print "</table>";

        print "<font size=1 color=yellow>Number of entries found: $rows";
     }

     else {
           print "No records found!";
          }

     mysql_free_result ($result);
 
}
Now here is the code when I click "Edit" from the "View Users" table:
Code: [Select]
if (@$_GET['action'] == "Edit") {

$result = mysql_query ("Select * from users where username='$_GET[username]'");
 $row = mysql_fetch_row ($result);

 print "<font size=6 color=yellow><center>Edit Records </center></font>";
 print "<form method = get>
 <table border = 1  align=center>
 <tr> <td><font color=yellow>First Name:</font></td>
  <td><input type=text name=fname value=$row[0] ></td></tr>
 <tr> <td><font color=yellow>Last Name:</font></td>
<td><input type=text name=lname value=$row[1]></td></tr>
 <tr> <td><font color=yellow>Email Address: </font></td>
  <td><input type=text name=email value=$row[2] </td></tr>
 <tr> <td><font color=yellow>Username: </font></td>
  <td><input type = text name = username value=$row[3] ></td></tr>
 <tr> <td><font color=yellow>Password:</font></td>
  <td><input type=text name=password value=$row[4]></td></tr>
 <tr> <td><font color=yellow>Contact Number:</font></td>
      <td><input type = text name = phone_number value=$row[5]></td></tr>
 <tr> <td><font color=yellow>User Privilege:</font></td>
<td><input type = txt name = user_lvl value=$row[6]></td></tr>

 <tr><td><input type=submit value='Update Users' Submit name=action></td></tr>
 </table>  
</form> ";
}

  if (@$_GET['action']=="Update Users") {
     $result = mysql_query ("UPDATE users
             SET
             fname='$_GET[fname]',
             lname='$_GET[lname]',
             email='$_GET[email]',
             username='$_GET[username]',
             password='$_GET[password]',
             phone_number='$_GET[phone_number]',
     user_lvl='$_GET[user_lvl]'
     where username= '$_GET[username]'");
     print "<font size=6 color=yellow><center><blink>Record of User successfully updated!</blink></center></font>";
  }

hi all, i have a page which lists all of my registered users from the mysql database but i want the ability to edit an account,

here is my list users code (just shown the appropiate code and not the rest):

Code: [Select]
<?php

require ('../secure/connect.php');


$sql = "SELECT * FROM users ORDER BY user_level ASC";
$result=mysql_query($sql);

echo '<table width="80%" border="0" cellspacing="5" cellpadding="0">';

echo ' <tr>
    <th><p align="left">User ID:</th>
    <th><p align="left">User Level:</th>
<th><p align="left">Username:</th>
<th><p align="left">User Title:</th>
<th><p align="left">Email:</th>
<th><p align="left">Actions:</th>
  </tr>';

while($rows=mysql_fetch_array($result)){
?>



<tr>
<td><?php echo $rows['userid']; ?></td>
<td><?php echo $rows['user_level']; ?></td>
<td><?php echo $rows['username']; ?></td>
<td><?php echo $rows['user_title']; ?></td>
                <td><?php echo $rows['email']; ?></td>
<td><a href="edit_account.php?id=">Edit Account</a></td>
</tr>

<?php
}
?>

this lists my users nicely, as you can see i put it a edit account action at the end with a empty id= because that may be a way of doing it but im not sure what else to do or if there is a better way of doing it. any help would be great!

Hi all,

I don't know if it is possible but i need to edit one word document, write the name of the customer in it, but at the right place and print it from a php form.

The user write in that php form the customer id and if he exists, the system should modify the word template and print it. Do you think this is possible and if so how can i do that?

Thanks in advance.

Hugo

Hello

I work on my school project where we have to create a website with front and back end. So I decided to create a lyrics website.

I created a DB, with a table table called "lyrics"

This is the structu

CREATE TABLE lyrics (
    lyricsId int(8) PRIMARY KEY AUTO_INCREMENT,
    artist varchar(100),
    song varchar(100),
    cover varchar(100),
    lyrics varchar(9999),
    chartId int(8),
    commentId int(8),
    FOREIGN KEY (chartId) REFERENCES charts(chartId),
);

So right now I dont know how I can create a Editlyrics.php button where I can edit he lyrics by the ID page

for example I have 2 sogns with lyrics and when i press on a song i go to the lyris of that song, and on that page I want to have a button where i can edit the lyrics.

Tjis is what i did:

I created a editlyrics.php file and added this code, but its not working and I know for a fact that nothing is right here, there are so many errors, but I dont know what the errors are or how can i fix this...

<?php

session_start();

    include("connectdb.php");

    $id = $_SESSION['id'];
    $lyricsId = $_POST['lyricsId'];

    $col = "UNDEFINED";
    if(isset($_POST['lyricsId'])){
        $col = "lyrics";
        $val = $_POST['lyrics'];
    }

    $query = "UPDATE lyrics SET $col='$val' WHERE lyricsId=$id;";

    if(mysqli_query($dbc_form,$query)){
        
        header("Location: index.php");
    }else{ 
        
        $_SESSION['error_msg'] = "Same Lyrics!";
        header("Location: index.php");
    }

?>

Any help? thanks

Hi,
I hope this can be done and need some advise as to how.

I have a search results page that has a URL of:

results-page.php?make=FORD&model=TRANSIT--2000-on++Standard+LOW+ROOF+Models&submit.x=22&submit.y=7

Can i create a button or link on that page to adjust the start of the URL but keeping the dynamically created end part?

i.e:

new-results-page.php?make=FORD&model=TRANSIT--2000-on++Standard+LOW+ROOF+Models&submit.x=22&submit.y=7

I Hope this makes sense.

Hey guys,
i'm making an edit feature on my website so i can delete,edit or add more jobs,
so far i've made the delete and add function's work
however i can't seem to get the edit to work
This is the edit function
Code: [Select]
if ($action == "edit"){
print("<strong>Editing a Job:</strong>");
$editid = $_GET['editid'];
$s = 'SELECT * FROM jobs WHERE id="$editid"';
$sql = mysql_query($s) or die ('Error: '.mysql_error () . " IN $s");
while ($row = mysql_fetch_array($sql)) {
$id = $row['id'];
$job_title = $row['job_title'];
$job_description = $row['job_description'];
$job_type = $row['job_type'];
$job_area = $row['job_area'];
$query2 = "UPDATE  jobs SET (job_title, job_description, job_type, job_area, hot_job) VALUES ('$job_title', '$job_description', '$job_type', '$job_area', '$hot') WHERE id=$id";
echo("<form name='add' method='post' action='?action=edit'>");
echo("<input type='hidden' name='?action=edit'>");
echo("<table class=main cellspacing=0 cellpadding=5 width=50%>");
echo("<tr><td>Job Title: </td><td align='right'><input type='text' size=50 name='job_title' value='$job_title'></td></tr>");
echo("<tr><td>Job Description: </td><td align='right'><textarea size=50 name='job_description'>$job_description</textarea></td></tr>");
echo("<tr><td>Job Type: </td><td align='center'><select name='job_type'><option>Permanent</option><option>Locum or Contract</option></SELECT></td></tr>");
echo("<tr><td>Hot Job? </td><td align='center'>Yes <input type='radio' name='hot' value='Yes'> No <input type='radio' name='hot' value='no'></td></tr>");
echo("<tr><td>Job Area: </td><td align='center'><select name='job_area'><option>East Anglia</option><option>All UK</option><option>London / South East</option><option>Midlands</option><option>North West</option><option>Northern Ireland</option><option>Scotland</option><option>South</option><option>South West</option><option>Southern Ireland</option><option>Wales</option><option>Yorkshire / North East</option></SELECT></td></tr>");
echo("<tr><td></td><td><div align='right'><input type='Submit'></div></td></tr>");
echo("</table>");
}
Here is the whole code,
Code: [Select]
<?php
include'modules/sides/header.php';
?>
      <table cellpadding="0" cellspacing="0" width="100%" id="mainTable">
      <tr>
         <td class="left">
        <?php include'modules/sides/left.php';?>
          </td>
        <td id="centercolumn">
          <table class="cont" cellspacing="0">
            <tr>
              <td id="centerCcolumn">
                    <div class="block">
<?php 

if(session_is_registered('username')){
if ($userlevel = 3){ ?>
                        <div class="blockTitle">Administration - Add/Remove Jobs</div>
                      <div class="blockContent">
  <?php
  $action = $_GET["action"];
if ($action == "delete"){
$delid = $_GET['delid'];
$query = "DELETE FROM jobs WHERE id=".$delid." LIMIT 1";
$sql = mysql_query($query);
echo("Job succesfully deleted! [ <a href='add_jobs.php'>Back</a> ]");
}
if ($action == "edit"){
print("<strong>Editing a Job:</strong>");
$editid = $_GET['editid'];
$s = 'SELECT * FROM jobs WHERE id="$editid"';
$sql = mysql_query($s) or die ('Error: '.mysql_error () . " IN $s");
while ($row = mysql_fetch_array($sql)) {
$id = $row['id'];
$job_title = $row['job_title'];
$job_description = $row['job_description'];
$job_type = $row['job_type'];
$job_area = $row['job_area'];
$query2 = "UPDATE  jobs SET (job_title, job_description, job_type, job_area, hot_job) VALUES ('$job_title', '$job_description', '$job_type', '$job_area', '$hot') WHERE id=$id";
echo("<form name='add' method='post' action='?action=edit'>");
echo("<input type='hidden' name='?action=edit'>");
echo("<table class=main cellspacing=0 cellpadding=5 width=50%>");
echo("<tr><td>Job Title: </td><td align='right'><input type='text' size=50 name='job_title' value='$job_title'></td></tr>");
echo("<tr><td>Job Description: </td><td align='right'><textarea size=50 name='job_description'>$job_description</textarea></td></tr>");
echo("<tr><td>Job Type: </td><td align='center'><select name='job_type'><option>Permanent</option><option>Locum or Contract</option></SELECT></td></tr>");
echo("<tr><td>Hot Job? </td><td align='center'>Yes <input type='radio' name='hot' value='Yes'> No <input type='radio' name='hot' value='no'></td></tr>");
echo("<tr><td>Job Area: </td><td align='center'><select name='job_area'><option>East Anglia</option><option>All UK</option><option>London / South East</option><option>Midlands</option><option>North West</option><option>Northern Ireland</option><option>Scotland</option><option>South</option><option>South West</option><option>Southern Ireland</option><option>Wales</option><option>Yorkshire / North East</option></SELECT></td></tr>");
echo("<tr><td></td><td><div align='right'><input type='Submit'></div></td></tr>");
echo("</table>");
}
}
if ($action == "add"){
$add = $_POST['add'];
$job_title = $_POST['job_title'];
$job_description = $_POST['job_description'];
$job_type = $_POST['job_type'];
$job_area = $_POST['job_area'];
$hot = $_POST['hot'];
$id = mysql_insert_id();
$query = "INSERT INTO jobs (id, job_title, job_description, job_type, job_area, hot_job) VALUES ('$id', '$job_title', '$job_description', '$job_type', '$job_area', '$hot')";
$sql = mysql_query($query) or die (mysql_error());
}
print("<strong>Add A New Job!</strong>");
print("<br />");
print("<br />");
echo("<form name='add' method='post' action='?action=add'>");
echo("<input type='hidden' name='?action=add'>");

echo("<table class=main cellspacing=0 cellpadding=5 width=50%>");
echo("<tr><td>Job Title: </td><td align='right'><input type='text' size=50 name='job_title'></td></tr>");
echo("<tr><td>Job Description: </td><td align='right'><textarea size=50 name='job_description'></textarea></td></tr>");
echo("<tr><td>Job Type: </td><td align='center'><select name='job_type'><option>Permanent</option><option>Locum or Contract</option></SELECT></td></tr>");
echo("<tr><td>Hot Job? </td><td align='center'>Yes <input type='radio' name='hot' value='Yes'> No <input type='radio' name='hot' value='no' checked></td></tr>");
echo("<tr><td>Job Area: </td><td align='center'><select name='job_area'><option>East Anglia</option><option>All UK</option><option>London / South East</option><option>Midlands</option><option>North West</option><option>Northern Ireland</option><option>Scotland</option><option>South</option><option>South West</option><option>Southern Ireland</option><option>Wales</option><option>Yorkshire / North East</option></SELECT></td></tr>");
echo("<tr><td></td><td><div align='right'><input type='Submit'></div></td></tr>");
echo("</table>");
if($success == TRUE) {
print("<strong>Success!</strong>");
}
echo("<br>");
echo("</form>");
print("<strong>Existing Jobs:</strong>");
print("<br />");
print("<br />");
echo("<table class=main cellspacing=0 cellpadding=5>");
echo("<td>ID:</td><td>Title:</td><td>Description:</td><td>Type:</td><td>Area:</td><td>Edit (DO NOT USE YET):</td><td>Delete:</td>");
$query = "SELECT * FROM jobs WHERE 1=1";
$sql = mysql_query($query);
while ($row = mysql_fetch_array($sql)) {
$id = $row['id'];
$job_title = $row['job_title'];
$job_description = $row['job_description'];
$job_type = $row['job_type'];
$job_area = $row['job_area'];
$position=18;
$job_description2 = substr($job_description, 0, $position); 
echo("<tr><td><strong>$id</strong></td><td><strong>$job_title</strong></td><td><strong>$job_description2...</strong></td><td><strong>$job_type</strong></td><td><strong>$job_area</strong></td><td><a href='add_jobs.php?action=edit&editid=$id'>Edit</a></td><td><a href='add_jobs.php?action=delete&delid=$id'>Delete</a></td></tr>");
}
?></p></table>
  </div>
                    </div>
<?php }else{echo'Stop hacking';}}?>
                </td>
            </tr>
          </table>
        <td class="right">
<?php
include"modules/sides/right.php";
?>
          </td>
        </tr>
    </table>
        <?php include'modules/sides/footer.php';?>

Any help would be great, thankyou!

ok I have text files with my logins to my emails and such..

Well I have this script to prepare the logins for another script

the files with the logins are in this format

email pass
email pass
email pass
email pass

$filename = 'text.txt';
$file = file($filename); 
$begin = "$";
foreach($file as $b){ 
list($email,$password) = explode(" ",$b);
  $emails[] = $begin."header[]=get_header('".$email."','".$password."');";} 
  file_put_contents($filename,implode($emails));  
  echo "Text file edited";
  sleep(5);

Is what I am using to get the email and password in this format

$header[]=get_header('email','pass');

but it is putting it like this


$header[]=get_header('email','pass
');
$header[]=get_header('email','pass
');
$header[]=get_header('email','pass
');
$header[]=get_header('email','pass
');
$header[]=get_header('email','pass

Why is it putting '); on a new line?

 I need it to be right behind the password so it looks like this


$header[]=get_header('email','pass');
$header[]=get_header('email','pass');
$header[]=get_header('email','pass');
$header[]=get_header('email','pass');
$header[]=get_header('email','pass');

any ideas? Thanks

hey guys i have an array but want to add "n." infront of each key value...example
n.news_id, n.user_id etc...is there a simple way/function of doing it other than changing the values through a loop?
 
Array
(
    [news] => Array
        (
            => news_id [1] => user_id
            [2] => news
            [3] => date
            [4] => time
        )
)

guys in this code i get some data from myswl table and i display them in to and html table with dynamic textboxes

the first part works ok but how can i update the mysqltable with tha changes? i have try to work with one table and i get an error
Notice: Undefined index: name1 in D:\.......

<?php

session_start();
include($_SERVER['DOCUMENT_ROOT'].'/includes/connection.php');

$result = mysql_query( "SELECT * FROM serv " );


while($row = mysql_fetch_array($result, MYSQL_ASSOC))
{
echo "<tr>";
echo "<td ALIGN=\"center\"><form  method='POST'><input name=\"name1\" type=\"text\" value={$row['onoma-eponymo']} id=\"n1\" STYLE=\" border-color:black; border-style:none; border-width:1px; font-size:30pt; color:yellow; background-color:gray; \" size=\"25\" maxlength=\"24\" /></form></td>";
echo "<td ALIGN=\"center\"><form  method='POST'><input name=\"name2\" type=\"text\" value={$row['username']} STYLE=\" border-color:black; border-style:none; border-width:1px; font-size:30pt; color:yellow; background-color:gray; \" size=\"7\" maxlength=\"5\" /></form></td>";
echo "<td ALIGN=\"center\"><form  method='POST'><input name=\"name3\" type=\"text\" value={$row['password']}  STYLE=\" border-color:black; border-style:none; border-width:1px; font-size:30pt; color:yellow; background-color:gray; \" size=\"7\" maxlength=\"5\" /></form></td>";
echo "<td ALIGN=\"center\"><form  method='POST'><input name=\"name4\" type=\"text\" value={$row['serv_id']}  STYLE=\" border-color:black; border-style:none; border-width:1px; font-size:30pt; color:yellow; background-color:gray; \" size=\"9\" maxlength=\"15\" /></form></td>";
echo "</tr>\n";
}


echo "</table>";


if(isset($_POST['back']))    {header("location:admin.php");}

if(isset($_POST['sub_update']))       
                                    {
                                    $text = $_POST["name1"];
                                    mysql_query("INSERT INTO serv (password) VALUES ('$text') ");
                                    }




?>



<body>
<form method="post" action="">
<input type="Submit" name="sub_update" value="Ενημέρωση Αλλαγών"style="height:6em; width:16em; font-size:150%;">
<form method="post" action="">
<input type="Submit" name="back" value="Back"style="height:6em; width:16em; font-size:150%;">
</form>