PHP - Up For A Small Challenge Question?

HI all,

I have a book with some nice examples, but often i wonder if they are that secure for displaying and using outside the production area.

One of them is this.
A form is created by using a while loop that gets data(email addresses) from a database and shows them with check boxes. after that someone can select the e-mailaddress they don't like and delete them from the database.
here is some code:

<?php
        //....
        $result = mysqli_query($dbc,$query);

        while ($row = mysqli_fetch_array($result)){
            echo '<input type="checkbox" value"'.$row['id'].'"name="todelete[]"/>';
            echo $row['firstname'];
        }

        //.........deleting part
        if (isset($_POST['submit'])){
        foreach($_POST['todelete'] as $delete_id){
            
            $query = "DELETE FROM email_list WHERE ID = $delete_id";
                mysqli_query ($dbc, $query)
                        or die ('error querying databse');
                       
            }
        }
        //....
?>

I have two questions:
-> is this a smart way of deleting stuff? since you are going to use multiple queries instead of 1 in the for each loop.
-> besides not using mysqli_real_escape_string, isn't this application allowing someone to alter the POST-array (todelete) to any value he likes? At least that's what i think can happen. If anyone knows a nice way to do this more secure , I would love to here it, because i don't really trust the html array created.

Thanks in advance!

Hi all,

I thought instead of just simple do all the security stuff automatically, why not see for myself what the it can do.
So I made a simple table besides the other tables named delete_me,  made a form and started testing. But for some reason I can get that table to drop.

this is what i did on the front end with help from he http://en.wikipedia.org/wiki/SQL_injection

in all 3 fields (firstname, lastname email) put a value and in the last one i put:

but nothing happend.

if someone knows what i am doing wrong please tell me because I think it's vital in order to protect yourself one needs to know what he or she is up against.

Hi guys,

 

I’d appreciate a little guidance but I’m gonna struggle to explain what the problem is first… so apologies in advance.

$drawOrder is an array of 1 to 10 letters that are drawn at random

Array

(

    [101] => C

    [102] => F

    [103] => D

    [104] => J

    [105] => B

    [106] => H

    [107] => I

    [108] => G

    [109] => E

    [110] => A

)

 

$bestOrder contains the same values as $drawOrder but the letters are given a priority.

Array

(

    [0] => A

    [1] => B

    [2] => C

    [3] => D

    [4] => E

    [5] => F

    [6] => G

    [7] => H

    [8] => I

    [9] => J

)

$bestPossibleOrder – I want this to contain the closest order possible to $bestOrder based on the draw order and 3 letter draw limit 

Array

(

    [101] => C

    [103] => D

    [105] => B

    [102] => F

    [106] => H

    [108] => G

    [109] => E

    [110] => A

    [107] => I

    [104] => J

)

$availableLetters contains 3 letters that are drawn according to $drawOrder.

 

Array

(

    [101] => C

    [102] => F

    [103] => D

)

 

 

add “[101] => C” to $bestPossibleOrder array

remove “[2] => C” from the $bestOrder array because the letters are not always unique

add “[104] => J “ to $availableLetters because it is next in the draw order.

 

Array

(

    [102] => F

    [103] => D

    [104] => J

)

 

add “[103] => D” to my $bestPossibleOrder array

remove “[103] => D” from the $bestOrder array because the letters are not always unique

add “[102] => B“ to $availableLetters because it is next in the draw order.

 

Array

(

    [102] => F

    [104] => J

    [102] => B

)

 

 

Repeat the process until all letters are in the $bestPossibleOrder array

 

 

Array

(

    [101] => C

    [103] => D

    [105] => B

    [102] => F

    [106] => H

    [108] => G

    [109] => E

    [110] => A

    [107] => I

    [104] => J

)

 

I’ve attached what I’ve written so far but I’m not sure if it’s a good approach

<?php

$BR = "<br />";



echo "best order:" . $BR;

$bestOrder = array("A","B","C","D","E","F","G","H","I","J");
print ("<pre>" . print_r($bestOrder, true) . "</pre>");

echo "draw order:" . $BR;

$drawOrder = shuffle_assoc($bestOrder);
$drawOrder = array_combine(range(101,(count($bestOrder)+100)),$drawOrder);// $drawOrder array keys have to start from 101
print ("<pre>" . print_r($drawOrder, true) . "</pre>");




echo "available Letters (FIRST DRAW):" . $BR;

$availableLetters = array_slice($drawOrder, 0, 3,true);
print ("<pre>" . print_r($availableLetters, true) . "</pre>");



$numberToPick = selectNextNumber($bestOrder,$availableLetters);
echo "The key with the closest letter to best order is [" . $numberToPick . "]";



function selectNextNumber($bestOrder,$availableLetters){
	for ($x = 0; $x <= count($bestOrder); $x++){
	$numberToPick = array_search($bestOrder[$x], $availableLetters);
		if ($numberToPick !== false) {
			//unset($bestOrder[$x]);
			//print ("<pre>" . print_r($bestOrder, true) . "</pre>");
			return $numberToPick;
		} 
	}
}

function shuffle_assoc($list) { 
  if (!is_array($list)) return $list; 

  $keys = array_keys($list); 
  shuffle($keys); 
  $random = array(); 
  foreach ($keys as $key) { 
    $random[$key] = $list[$key]; 
  }
  return $random; 
}

 

 

 

 

Hi,

My code below only allows me to search exact terms and therefore does not allow for spelling mistakes of names etc. Please can somebody advise how I can alter the code below to allow a user to search part of the search criteria and still retrieve results e.g. a search for "business" would return "business analysis", "business architecture" and so on. Any help would be greatly appreciated.

$sql="SELECT DISTINCT First_Name, Last_Name, l.Resource_ID FROM ((resource l inner join resource_skill ln on l.Resource_ID = ln.Resource_ID) inner join skill n on ln.Skill_ID = n.Skill_ID) WHERE First_Name LIKE '$fname' OR Last_Name LIKE '$lname' OR Skill_Name LIKE '$skill'";

Thanks a lot!

Paul

Hi All!

First post here - I'm a bit of a self taught PHP junkie

I'm having some issues with the following php/MySQL code.

The issue is with Internet Explorer (surprise, surprise)

I have setup an if statement so that the long description field in the form comes up as a text area (based on the max-length property of the mySQL field.), while the shorter fields come up as text fields.

The issue is that in IE, none of the shorter fields preceding the Long Description Text Field show up - ie. the form is lacking a couple of necessary fields.

Works perfectly well in Firefox.


<form id="addprod" name="addprod" action="" method="get" enctype="multipart/form-data">
    <?php 
        require_once($_SERVER['DOCUMENT_ROOT'].'/resources/db/viewer_connect.php');
        $table = 'products';
        $fieldQuery = "SELECT * from $table";
        $result = mysql_db_query($dbname,$fieldQuery) or die('<span class="body_text">Query Error: '.mysql_error().'</span>');
        
        $i = 0;
        $prInfo = array('PROD_ID'=>'Product ID',
                        'PROD_NAME'=>'Product Name',
                        'PROD_DESC_SHORT'=>'Product Description (Short)',
                        'PROD_DESC_LONG'=>'Product Description (Long)',
                        'MODEL_1'=>'Model 1',
                        'MODEL_2'=>'Model 2',
                        'MODEL_3'=>'Model 3',
                        'MODEL_4'=>'Model 4',
                        'MODEL_5'=>'Model 5',
                        'RRP_1'=>'Model 1 RRP($)',
                        'RRP_2'=>'Model 2 RRP($)',
                        'RRP_3'=>'Model 3 RRP($)',
                        'RRP_4'=>'Model 4 RRP($)',
                        'RRP_5'=>'Model 5 RRP($)',
                        'PROD_IMG'=>'Main Image',
                        'IMAGE_2'=>'Image 2',
                        'IMAGE_3'=>'Image 3');
                        
        while ($i < mysql_num_fields($result)) {
            $meta = mysql_fetch_field($result, $i);
            if (!$meta) {
                echo "No information available<br />\n";
                }
            if($meta->max_length<=256){
                if($meta->name=='PROD_IMG'||$meta->name=='IMAGE_2'||$meta->name=='IMAGE_3'){
                    echo '<p class="body_text"><label for="'.$meta->name.'">'.$prInfo[$meta->name].':<input name="'.$meta->name.'" type="file" size="50" maxlength="'.$meta->max_length.'" /></label></p>';
                }
                else{
                    echo '<p class="body_text"><label for="'.$meta->name.'">'.$prInfo[$meta->name].':<input name="'.$meta->name.'" type="text" size="50" maxlength="'.$meta->max_length.'" /></label></p>';
                }
            }
            else{
                echo '<p class="body_text" style="line-height:150px; vertical-align:top;"><label for="'.$meta->name.'">'.$prInfo[$meta->name].':<textarea name="'.$meta->name.'" cols="50" rows="10" /></p>';
            }
            $i++;
}
mysql_free_result($result);
?>

<p class="body_text"><input type="submit" value="Add New Record" /><input type="reset" value="Clear Form" /></p>
        
</form>

Any thoughts would be awesome!!

Thanks in advance,

Tim

Hi
If any one has any spare time or is intrigued in any way.
I am constructing a website forum like the one you use.
This one requires a log on.

It works in FF 6.0, Opera Safari and Chrome  but not in IE 8.0.

I have filled in the passwords(s) extra security.

http://www.des-otoole.co.uk/streetangels/

Many thanks if you can work it out. You just need to push the button (login)

LOL note the topic is a pun at Help Vampires... I actually have an unchallenging question.

I'm trying to echo out a column in a MySQL table. I'm getting one field echoing, but not the others:
I'm using this code style, but I've made a small mistake somewhere at the end, I've tried many combinations trying to fix it, but haven't succeeded..
$query = "select email from newsletters"; $result = mysql_query($query); $row = mysql_fetch_array($result); foreach ($row as $email) {echo $email;}
I got the argument foreach() straight out of the manual and copied the syntax style exactly as was demonstrated in the example, but its still not working. What have I done wrong?

Hi All
Thanks in advance for your help.

I want to have to following query string Type=myparam&Username=dazd&Password=nk98830&id=0&Cols_Returned=numfrom,sentdata

But my code returns the following
Type=myparam&Username=dazd&Password=nk98830&id=0&Cols_Returned=%2F%22numfrom%2F%22%2C%2F%22sentdata%2F%22

Below is the code:
$data= array(
"Type"=> "myparam",
"Username" => "dazd",
"Password" => "nk98830",
"id" => "0",
"Cols_Returned" => '/"numfrom/",/"sentdata/"'

) ; //This contains data that you will send to the server.
$data = http_build_query($data); //builds the post string ready for posting
echo "The Query String is                   ";
echo $data;


Regards

I'm trying to find the write coding to pull the First and Second words from the 2nd line and the entire 3rd line from this file and have them as $subject1 and $subject2  And I have no php background.


http://www.weatherserver.net/text/CWTO/WOCN11.txt

so $subject1 = WOCN11 CWTO
and $subject2 = SPECIAL WEATHER STATEMENT

Hey guys i have a contact form for my site working fine but when i receive the emails i get some unwanted texts after the email section.
 here they r :

name1: ryan

number: 343244

message1: hey

email: ss@yahoo.com

clearField: [type Function]

label1: NAME

label2: E-MAIL

label3: PHONE

label5: MESSAGE

countField: 5

arrayLabel: undefined,NAME,E-MAIL,PHONE,undefined,MESSAGE

i: 6

txtField: _level0.topmenu.page.pages.contactform.txtField5

_request: contact/email.php

the script

Code: [Select]
<?php

/***************************************************\

 * PHP 4.1.0+ version of email script. For more

 * information on the mail() function for PHP, see

 * http://www.php.net/manual/en/function.mail.php

\***************************************************/





// First, set up some variables to serve you in

// getting an email.  This includes the email this is

// sent to (yours) and what the subject of this email

// should be.  It's a good idea to choose your own

// subject instead of allowing the user to.  This will

// help prevent spam filters from snatching this email

// out from under your nose when something unusual is put.



$sendTo = "hey@email.com";

$subject = "helloy";



// variables are sent to this PHP page through

// the POST method.  $_POST is a global associative array

// of variables passed through this method.  From that, we

// can get the values sent to this page from Flash and

// assign them to appropriate variables which can be used

// in the PHP mail() function.





// header information not including sendTo and Subject

// these all go in one variable.  First, include From:

$headers = "From: " . $_POST["firstName"] ." ". $_POST["lastname"] . "<" . $_POST["email"] .">\r\n";

// next include a replyto

$headers .= "Reply-To: " . $_POST["email"] . "\r\n";

// often email servers won't allow emails to be sent to

// domains other than their own.  The return path here will

// often lift that restriction so, for instance, you could send

// email to a hotmail account. (hosting provider settings may vary)

// technically bounced email is supposed to go to the return-path email

$headers .= "Return-path: " . $_POST["email"];



// now we can add the content of the message to a body variable

$message = $_POST['message'];

$message = ""; 
foreach($_POST as $key=>$value) 
{ 
$message .= $key.": ".$value."\n\r"; 
} 





// once the variables have been defined, they can be included

// in the mail function call which will send you an email

mail($sendTo, $subject, $message, $headers);



?>

can some1 suggest me something iam a complete noob !

This topic has been moved to PHP Freelancing.

http://www.phpfreaks.com/forums/index.php?topic=348574.0

<?php
// SQL Connection
$username="root"; $password=""; $database="mydb";
$connection = mysql_connect("localhost", $username, $password) 
or die("Connection Failure to Database");
// Select Database
mysql_select_db($database, $connection) or die ($database . "No Database" . $username);

$id = $_GET['id'];
$MyQuery = "SELECT * FROM bookings WHERE id = '$id'";
$retrieve = mysql_query($MyQuery) or die(mysql_error());
if(mysql_num_rows($retrieve) != 0):
$row = mysql_fetch_assoc($retrieve);
endif;

$idX = ($row['id']);
echo $idX;

if(mysql_num_rows($retrieve) == 0)
{ echo '<blink><font color="red"><strong>No Booking Found</strong></font></blink>'; }
else
{ echo '<form action="' . $_SERVER['PHP_SELF'] . '" method="post">';
echo '<table width="350">';
echo ' <tr>';
echo ' <td width="100">Full Name</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['fullname']) . '" type="text" name="fullname"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Address</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['address']) . '" type="text" name="address"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">City</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['city']) . '" type="text" name="city"></td>';
echo ' <tr>';
echo ' <td width="100">Postcode</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['postcode']) . '" type="text" name="postcode"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Country</td>';
echo ' <td width="100"><select style="width: 235px" name="country">';
echo ' <option value="' . ($row['country']) . '">' . ($row['country']) . '</option>';
echo ' <option></option><option value="Abkhazia">Abkhazia</option><option value="Afghanistan">Afghanistan</option><option value="Aland">Aland</option><option value="Albania">Albania</option><option value="Algeria">Algeria</option><option value="American Samoa">American Samoa</option><option value="Andorra">Andorra</option><option value="Angola">Angola</option><option value="Anguilla">Anguilla</option><option value="Antarctica">Antarctica</option><option value="Antigua and Barbuda">Antigua and Barbuda</option><option value="Argentina">Argentina</option><option value="Armenia">Armenia</option><option value="Aruba">Aruba</option><option value="Ascension">Ascension</option><option value="Ashmore and Cartier Islands">Ashmore and Cartier Islands</option><option value="Australia">Australia</option><option value="Australian Antarctic Territory">Australian Antarctic Territory</option><option value="Austria">Austria</option><option value="Azerbaijan">Azerbaijan</option><option value="Bahamas, The">Bahamas, The</option><option value="Bahrain">Bahrain</option><option value="Baker Island">Baker Island</option><option value="Bangladesh">Bangladesh</option><option value="Barbados">Barbados</option><option value="Belarus">Belarus</option><option value="Belgium">Belgium</option><option value="Belize">Belize</option><option value="Benin">Benin</option><option value="Bermuda">Bermuda</option><option value="Bhutan">Bhutan</option><option value="Bolivia">Bolivia</option><option value="Bosnia and Herzegovina">Bosnia and Herzegovina</option><option value="Botswana">Botswana</option><option value="Bouvet Island">Bouvet Island</option><option value="Brazil">Brazil</option><option value="British Antarctic Territory">British Antarctic Territory</option><option value="British Indian Ocean Territory">British Indian Ocean Territory</option><option value="British Sovereign Base Areas">British Sovereign Base Areas</option><option value="British Virgin Islands">British Virgin Islands</option><option value="Brunei">Brunei</option><option value="Bulgaria">Bulgaria</option><option value="Burkina Faso">Burkina Faso</option><option value="Burundi">Burundi</option><option value="Cambodia">Cambodia</option><option value="Cameroon">Cameroon</option><option value="Canada">Canada</option><option value="Cape Verde">Cape Verde</option><option value="Cayman Islands">Cayman Islands</option><option value="Central African Republic">Central African Republic</option><option value="Chad">Chad</option><option value="Chile">Chile</option><option value="China, Peoples Republic of">China, Peoples Republic of</option><option value="China, Republic of (Taiwan)">China, Republic of (Taiwan)</option><option value="Christmas Island">Christmas Island</option><option value="Clipperton Island">Clipperton Island</option><option value="Cocos (Keeling) Islands">Cocos (Keeling) Islands</option><option value="Colombia">Colombia</option><option value="Comoros">Comoros</option><option value="Congo, Democratic Republic of the (Congo  Kinshasa)">Congo, Democratic Republic of the (Congo  Kinshasa)</option><option value="Congo, Republic of the (Congo  Brazzaville)">Congo, Republic of the (Congo  Brazzaville)</option><option value="Cook Islands">Cook Islands</option><option value="Coral Sea Islands">Coral Sea Islands</option><option value="Costa Rica">Costa Rica</option><option value="Cote dIvoire (Ivory Coast)">Cote dIvoire (Ivory Coast)</option><option value="Croatia">Croatia</option><option value="Cuba">Cuba</option><option value="Cyprus">Cyprus</option><option value="Czech Republic">Czech Republic</option><option value="Denmark">Denmark</option><option value="Djibouti">Djibouti</option><option value="Dominica">Dominica</option><option value="Dominican Republic">Dominican Republic</option><option value="Ecuador">Ecuador</option><option value="Egypt">Egypt</option><option value="El Salvador">El Salvador</option><option value="Equatorial Guinea">Equatorial Guinea</option><option value="Eritrea">Eritrea</option><option value="Estonia">Estonia</option><option value="Ethiopia">Ethiopia</option><option value="Falkland Islands (Islas Malvinas)">Falkland Islands (Islas Malvinas)</option><option value="Faroe Islands">Faroe Islands</option><option value="Fiji">Fiji</option><option value="Finland">Finland</option><option value="France">France</option><option value="French Guiana">French Guiana</option><option value="French Polynesia">French Polynesia</option><option value="French Scattered Islands in the Indian Ocean">French Scattered Islands in the Indian Ocean</option><option value="French Southern and Antarctic Lands">French Southern and Antarctic Lands</option><option value="Gabon">Gabon</option><option value="Gambia, The">Gambia, The</option><option value="Georgia">Georgia</option><option value="Germany">Germany</option><option value="Ghana">Ghana</option><option value="Gibraltar">Gibraltar</option><option value="Greece">Greece</option><option value="Greenland">Greenland</option><option value="Grenada">Grenada</option><option value="Guadeloupe">Guadeloupe</option><option value="Guam">Guam</option><option value="Guatemala">Guatemala</option><option value="Guernsey">Guernsey</option><option value="Guinea">Guinea</option><option value="Guinea-Bissau">Guinea-Bissau</option><option value="Guyana">Guyana</option><option value="Haiti">Haiti</option><option value="Heard Island and McDonald Islands">Heard Island and McDonald Islands</option><option value="Honduras">Honduras</option><option value="Hong Kong">Hong Kong</option><option value="Howland Island">Howland Island</option><option value="Hungary">Hungary</option><option value="Iceland">Iceland</option><option value="India">India</option><option value="Indonesia">Indonesia</option><option value="Iran">Iran</option><option value="Iraq">Iraq</option><option value="Ireland">Ireland</option><option value="Isle of Man">Isle of Man</option><option value="Israel">Israel</option><option value="Italy">Italy</option><option value="Jamaica">Jamaica</option><option value="Japan">Japan</option><option value="Jarvis Island">Jarvis Island</option><option value="Jersey">Jersey</option><option value="Johnston Atoll">Johnston Atoll</option><option value="Jordan">Jordan</option><option value="Kazakhstan">Kazakhstan</option><option value="Kenya">Kenya</option><option value="Kingman Reef">Kingman Reef</option><option value="Kiribati">Kiribati</option><option value="Korea, Democratic Peoples Republic of (North Korea)">Korea, Democratic Peoples Republic of (North Korea)</option><option value="Korea, Republic of  (South Korea)">Korea, Republic of  (South Korea)</option><option value="Kosovo">Kosovo</option><option value="Kuwait">Kuwait</option><option value="Kyrgyzstan">Kyrgyzstan</option><option value="Laos">Laos</option><option value="Latvia">Latvia</option><option value="Lebanon">Lebanon</option><option value="Lesotho">Lesotho</option><option value="Liberia">Liberia</option><option value="Libya">Libya</option><option value="Liechtenstein">Liechtenstein</option><option value="Lithuania">Lithuania</option><option value="Luxembourg">Luxembourg</option><option value="Macau">Macau</option><option value="Macedonia">Macedonia</option><option value="Madagascar">Madagascar</option><option value="Malawi">Malawi</option><option value="Malaysia">Malaysia</option><option value="Maldives">Maldives</option><option value="Mali">Mali</option><option value="Malta">Malta</option><option value="Marshall Islands">Marshall Islands</option><option value="Martinique">Martinique</option><option value="Mauritania">Mauritania</option><option value="Mauritius">Mauritius</option><option value="Mayotte">Mayotte</option><option value="Mexico">Mexico</option><option value="Micronesia">Micronesia</option><option value="Midway Islands">Midway Islands</option><option value="Moldova">Moldova</option><option value="Monaco">Monaco</option><option value="Mongolia">Mongolia</option><option value="Montenegro">Montenegro</option><option value="Montserrat">Montserrat</option><option value="Morocco">Morocco</option><option value="Mozambique">Mozambique</option><option value="Myanmar (Burma)">Myanmar (Burma)</option><option value="Nagorno-Karabakh">Nagorno-Karabakh</option><option value="Namibia">Namibia</option><option value="Nauru">Nauru</option><option value="Navassa Island">Navassa Island</option><option value="Nepal">Nepal</option><option value="Netherlands">Netherlands</option><option value="Netherlands Antilles">Netherlands Antilles</option><option value="New Caledonia">New Caledonia</option><option value="New Zealand">New Zealand</option><option value="Nicaragua">Nicaragua</option><option value="Niger">Niger</option><option value="Nigeria">Nigeria</option><option value="Niue">Niue</option><option value="Norfolk Island">Norfolk Island</option><option value="Northern Cyprus">Northern Cyprus</option><option value="Northern Mariana Islands">Northern Mariana Islands</option><option value="Norway">Norway</option><option value="Oman">Oman</option><option value="Pakistan">Pakistan</option><option value="Palau">Palau</option><option value="Palestine">Palestine</option><option value="Palmyra Atoll">Palmyra Atoll</option><option value="Panama">Panama</option><option value="Papua New Guinea">Papua New Guinea</option><option value="Paraguay">Paraguay</option><option value="Peru">Peru</option><option value="Peter I Island">Peter I Island</option><option value="Philippines">Philippines</option><option value="Pitcairn Islands">Pitcairn Islands</option><option value="Poland">Poland</option><option value="Portugal">Portugal</option><option value="Pridnestrovie (Transnistria)">Pridnestrovie (Transnistria)</option><option value="Puerto Rico">Puerto Rico</option><option value="Qatar">Qatar</option><option value="Queen Maud Land">Queen Maud Land</option><option value="Reunion">Reunion</option><option value="Romania">Romania</option><option value="Ross Dependency">Ross Dependency</option><option value="Russia">Russia</option><option value="Rwanda">Rwanda</option><option value="Saint Helena">Saint Helena</option><option value="Saint Kitts and Nevis">Saint Kitts and Nevis</option><option value="Saint Lucia">Saint Lucia</option><option value="Saint Pierre and Miquelon">Saint Pierre and Miquelon</option><option value="Saint Vincent and the Grenadines">Saint Vincent and the Grenadines</option><option value="Samoa">Samoa</option><option value="San Marino">San Marino</option><option value="Sao Tome and Principe">Sao Tome and Principe</option><option value="Saudi Arabia">Saudi Arabia</option><option value="Senegal">Senegal</option><option value="Serbia">Serbia</option><option value="Seychelles">Seychelles</option><option value="Sierra Leone">Sierra Leone</option><option value="Singapore">Singapore</option><option value="Slovakia">Slovakia</option><option value="Slovenia">Slovenia</option><option value="Solomon Islands">Solomon Islands</option><option value="Somalia">Somalia</option><option value="Somaliland">Somaliland</option><option value="South Africa">South Africa</option><option value="South Georgia and the South Sandwich Islands">South Georgia and the South Sandwich Islands</option><option value="South Ossetia">South Ossetia</option><option value="Spain">Spain</option><option value="Sri Lanka">Sri Lanka</option><option value="Sudan">Sudan</option><option value="Suriname">Suriname</option><option value="Svalbard">Svalbard</option><option value="Swaziland">Swaziland</option><option value="Sweden">Sweden</option><option value="Switzerland">Switzerland</option><option value="Syria">Syria</option><option value="Tajikistan">Tajikistan</option><option value="Tanzania">Tanzania</option><option value="Thailand">Thailand</option><option value="Timor-Leste (East Timor)">Timor-Leste (East Timor)</option><option value="Togo">Togo</option><option value="Tokelau">Tokelau</option><option value="Tonga">Tonga</option><option value="Trinidad and Tobago">Trinidad and Tobago</option><option value="Tristan da Cunha">Tristan da Cunha</option><option value="Tunisia">Tunisia</option><option value="Turkey">Turkey</option><option value="Turkmenistan">Turkmenistan</option><option value="Turks and Caicos Islands">Turks and Caicos Islands</option><option value="Tuvalu">Tuvalu</option><option value="U.S. Virgin Islands">U.S. Virgin Islands</option><option value="Uganda">Uganda</option><option value="Ukraine">Ukraine</option><option value="United Arab Emirates">United Arab Emirates</option><option value="United Kingdom">United Kingdom</option><option value="United States">United States</option><option value="Uruguay">Uruguay</option><option value="Uzbekistan">Uzbekistan</option><option value="Vanuatu">Vanuatu</option><option value="Vatican City">Vatican City</option><option value="Venezuela">Venezuela</option><option value="Viet Nam">Viet Nam</option><option value="Wake Island">Wake Island</option><option value="Wallis and Futuna">Wallis and Futuna</option><option value="Western Sahara">Western Sahara</option><option value="Yemen">Yemen</option><option value="Zambia">Zambia</option><option value="Zimbabwe">Zimbabwe</option></SELECT></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Tel</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['tel']) . '" type="text" name="tel"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Email</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['email']) . '" type="text" name="email"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Info</td>';
echo ' <td width="100"><input style="width: 235px" value="' . ($row['info']) . '" type="text" name="info"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Checkin Date</td>';
echo ' <td width="100"><input style="width: 70px" value="' . ($row['checkin']) . '" type="text" name="checkin"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100">Checkout Date</td>';
echo ' <td width="100"><input style="width: 70px" value="' . ($row['checkout']) . '" type="text" name="checkout"></td>';
echo ' </tr>';
echo ' <tr>';
echo ' <td width="100"></td>';
echo ' <td width="100"><input type="submit" name="editbooking" value="Update Booking"></td>';
echo ' </tr>';
echo '</table>';
echo '<input type="hidden" name="source">';
echo '</form>'; } 

if (isset($_POST['editbooking'])) {

$fullname = $_POST['fullname'];
$address = $_POST['address'];
$city = $_POST['city'];
$postcode = $_POST['postcode'];
$country = $_POST['country'];
$tel = $_POST['tel'];
$email = $_POST['email'];
$info = $_POST['info'];
$checkin = $_POST['checkin'];
$checkout = $_POST['checkout'];
$source = 'Manual Add';

$id_update = ($row['id']);

$SQL = "UPDATE bookings SET fullname = '$fullname', address = '$address', city = '$city', postcode = '$postcode', country = '$country', tel = '$tel', email = '$email', info = '$info', checkin = '$checkin', checkout = '$checkout', source = '$source' WHERE id = '$id_update'";

error_reporting(0);
$result = mysql_db_query($database,"$SQL");
header("location:index.php#bookings");
}
?>

Where am I going wrong here? It simply won't update the query but if I change $id to 27 for example it will edit it??

I have made a php cart : check it out on http://fhcs.be/cart-demo4/

My question is: when I order something by clicking on the "voeg toe" button, I'm redirected to the shopping cart. But I don't want to be redirected to the shopping cart, I want to stay on de menu list. What is an easy way to fix this? thanks people

index.php
Code: [Select]
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>PHP Shopping Cart Demo &#0183; Bookshop</title>
<link rel="stylesheet" href="css/styles.css" />
</head>

<body>

<div id="shoppingcart">

<h1>Welkom, plaats uw order</h1>



</div>

<div id="booklist">

<h1>Warme dranken</h1>
<?php
$sql = 'SELECT * FROM products WHERE cat=2';
$result1 = $db->query($sql);
$output1[] = '<ul>';
while ($row = $result1->fetch()) {
$output1[] = '<li>'.$row['name'].': &euro;'.$row['price'].'<br /><a href="cart.php?action=add&id='.$row['id'].'">Voeg Toe</a></li>';
}
$output1[] = '</ul>';
echo join('',$output1);

?>

<h1>Cocktails</h1>
<?php
$sql = 'SELECT * FROM products WHERE cat=3';
$result2 = $db->query($sql);
$output2[] = '<ul>';
while ($row = $result2->fetch()) {
$output2[] = '<li>'.$row['name'].': &euro;'.$row['price'].'<br /><a href="cart.php?action=add&id='.$row['id'].'">Voeg Toe</a></li>';
}
$output2[] = '</ul>';
echo join('',$output2);
?>
</div>
</body>

cart.php
Code: [Select]
<?php
// Include MySQL class
require_once('inc/mysql.class.php');
// Include database connection
require_once('inc/global.inc.php');
// Include functions
require_once('inc/functions.inc.php');
// Start the session

session_start();

// Process actions
$cart = $_SESSION['cart'];
$action = $_GET['action'];
switch ($action) {
case 'add':
if ($cart) {
$cart .= ','.$_GET['id'];
} else {
$cart = $_GET['id'];
}
break;
case 'delete':
if ($cart) {
$items = explode(',',$cart);
$newcart = '';
foreach ($items as $item) {
if ($_GET['id'] != $item) {
if ($newcart != '') {
$newcart .= ','.$item;
} else {
$newcart = $item;
}
}
}
$cart = $newcart;
}
break;
case 'update':
if ($cart) {
$newcart = '';
foreach ($_POST as $key=>$value) {
if (stristr($key,'qty')) {
$id = str_replace('qty','',$key);
$items = ($newcart != '') ? explode(',',$newcart) : explode(',',$cart);
$newcart = '';
foreach ($items as $item) {
if ($id != $item) {
if ($newcart != '') {
$newcart .= ','.$item;
} else {
$newcart = $item;
}
}
}
for ($i=1;$i<=$value;$i++) {
if ($newcart != '') {
$newcart .= ','.$id;
} else {
$newcart = $id;
}
}
}
}
}
$cart = $newcart;
break;
}
$_SESSION['cart'] = $cart;
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>PHP Shopping Cart Demo &#0183; Cart</title>
<link rel="stylesheet" href="css/styles.css" />
</head>

<body>

<div id="shoppingcart">

<h1>Uw bestelling</h1>


<?php
echo writeShoppingCart();

?>

</div>

<div id="contents">

<h2>Gelieve na te kijken voordat u bestelt</h2>

<?php
echo showCart();
?>

<p><a href="index.php">Terug naar lijst</a></p>

<form action="mail.php" method="post">
<input type="submit" name="sendemail" value="Bestel" />
<input type="hidden" name="cart" value="<?= $cart; ?>" />
</form>




</div>

</body>
</html>

Hi, my name is Michael Vallier and I am the director of Killer Film Fest.  This year I have incorporated some new features and need some php help.  If you are able to help with either or both problems, please let me know.  Thanks in advance.

1.
I am using a forum and I need help customizing it.  I have no idea what I am doing.  I have changed a few things, but don't know enough to do what I want.  I don't need anything crazy, just to fit the look of our website. The forum is not open yet but you can see it he http://www.killerfilmfest.com/forum/

2.
I found a add-on to my website which is a file manager.  People can create an account and upload files to my FTP server.  I want to use this for filmmakers to upload their films if they choose to do it this way. There is a 10mb limit and it is possible to make it unlimited. I contacted the creator of the application and he led me to a wiki page with the directions.  It looked real simple and I tried to do this but without any luck.

So if there is anyone out there who can help, that would be great.  Thanks

-Michael Vallier-

it says i have an error in in line 23 which is

i cant seem to find it
Code: [Select]
<?php

if($_POST['loginbtn']){

require "scripts/connect.php";

$email = mysql_real_escape_string($_POST['email']);
$password = mysql_real_escape_string($_POST['password']);

if($email && $password){

$password = md5("$password");

$query = mysql_query("SELECT * FROM ezadmin WHERE email = '$email'");
$numrows = mysql_num_rows($query);

if($numrows != 0){

                $row = mysql_fetch_assoc($query); //line 23

$dbemail = $row ['email'];
$dbpassword = $row ['password'];

if($dbemail === $email && $dbpassword === $password){

$_SESSION['email'] = $dbemail;
header("location: adminpanel");
exit();

}else
    $msg = "PLEASE CHECK YOU EMAIL OR PASSWORD!";
}else
    $msg = "PERSON DOES NO EXSIT!";
}else
    $msg = "YOU MUST FILL IN ALL FIELDS!";
 
    mysql_close();
}
?>