PHP - Creating Strleading Function

I have this function completely written in my class file that I am working on.  The point to this function is to be able to check the login of a user or administrator for either of the control panels associated with my site.

It will check the session intime as well as the page / module referenced.  Once it passes all those checks, it will check and ensure the emailaddress/password stored in the current session still holds true and the account is still active...  if the account is still active it will update the lastActivity as well as update all of the session variables with what is currently in the database.

What I am looking for is basically a look at the function, see if it looks good..  If there is any part to it that could create security holes for the site just off the login function itself...

Usage: $q->validUser($_SESSION['user'], $_mod);

<?php
 function validUser($sess, $p) {

if ($sess['inTime'] == '' && $p != 'login' && $p != 'logout') {
session_destroy();
$login = '0';
$_int = '';
return $login;
} else if ($sess['inTime'] < time()-3600 && $p != 'login') {
$sess['inTime'] = '';
session_destroy();
$this->check_login($sess, $p);
} else {
$this->user = $sess['emailAddress'];
$this->pass = $sess['password'];

$login = $this->sql_query("SELECT * FROM users WHERE emailAddress = '".$this->user."' AND password = '".$this->pass."' 
   AND status = '1' LIMIT '1'");
if ($login = $this->sql_numrows($login) < 1) {
$sess['inTime'] == '';
session_destroy();
$login = '0';
} else {
// logged in, lets update the database for last_activity AND the session.

$this->sql_query("UDATE users SET lastActivity = '".now()."' WHERE
  emailAddress = '".$this->user."'");
$login = $this->sql_query("SELECT * FROM users WHERE emailAddress = '".$this->user."' AND password = '".$this->pass."' 
       AND status = '1' LIMIT '1'");
$login = mysql_fetch_assoc($login);
foreach ($login as $key => $value)
{ 
$sess[$key] = $value;
}
$sess['inTime'] = time();
$login = '1';
}
return $login;
}
}

?>

That is the main function, sql_query and sql_numrows is:

<?php
function sql_query($query = "", $transaction = FALSE) {
unset($this->query_result);

if ($query != "") {
$this->num_queries++;
if ($transation == BEGIN_TRANSACTION && !$this->in_transation) {
$result = mysql_query("BEGIN", $this->db_connect_id);
if (!$result) {
return false;
}
$this->in_transaction = TRUE;
}

$this->query_result = mysql_query($query, $this->db_connect_id);
} else {
if ($transaction == END_TRANSACTION && $this->in_transaction ) {
$result = mysql_query("COMMIT", $this->db_connect_id);
}
}
if ($this->query_result) {
unset($this->row[$this->query_result]);
unset($this->rowset[$this->query_result]);

if ($transaction == END_TRANSACTION && $this->in_transaction ) {
$this->in_transaction = FALSE;
if (!mysql_query("COMMIT", $this->db_connect_id)) {
mysql_query("ROLLBACK", $this->db_connect_id);
return false;
}
}
return $this->query_result;
} else {
if ($this->in_transaction ) {
mysql_query("ROLLBACK", $this->db_connect_id);
$this->in_transaction = FALSE;
}
return false;
}
}

function sql_numrows($query_id = 0) {
if(!$query_id) {
$query_id = $this->query_result;
}
return ($query_id) ? mysql_num_rows($query_id) : false;
} ?>

Any insight that can help to benefit these functions would be appreciated.

When I put this chunk of code into it's own function:


function fetch_all ($dbc, $query) {

include ('knuffix_list_func.php');

pagination_start ($dbc, $query);

$offset = $pag_array[0];

$rows_per_page = $pag_array[1];

$query = $query . " LIMIT $offset, $rows_per_page";

echo "test query: " . $query;

knuffix_list ($query, $dbc);

pagination_end ($pag_array);
}


And when I echo out the query as you can see in the example, then I notice that the variables $offset and $rows_per_page never get appended.
I set the variable $pag_array to a global inside the function pagination_start(). It usually works when I DON'T wrap a function around this chunk of code, but if I do wrap a function around everything then the global suddenly won't work anymore.

Btw, this also won't work if I wrap a function around the function DECLARATIONS.

Any ideas, how I could make it work?

I want to define a function instead of repeating query in all my php pages. I call a function by passing an $id value and from that function i have to get all the info related to that id, like name, description and uom.    I am trying to do this, but i dont know how to get these values seperately.   here is my function  

function items($item_id)
{
$details = array(); 
$result = mysql_query("select item_id, name, uom, description from items where item_id=".$item_id."") or die (mysql_error());
while($row = mysql_fetch_array($result))
{
$details[] = array((stripslashes($row['name'])), (stripslashes($row['uom'])), (stripslashes($row['description'])));
}
return $details;
}

and i call my function like this

$info = items($id);

Can somebody guide me in this    

im using a function which connects to a db called 'comments' and then inside that function i again called another function that will connect to the db 'main' to get avatars.... but as i put Code: [Select]
mysql_select_db("main") or die(mysql_error()); on the new function, the original function stops to fetch rows.

i tried to remove "mysql_select_db("main") or die(mysql_error());" and used the new function to return some text only and it worked, so i guess the connection to the db was the problem... i tried doing Code: [Select]
mysql_query("SELECT * FROM  main.avatar
INNER JOIN main.list ON main.avatar.title=main.list.id
WHERE main.avatar.page_id='$id'"); but it also didnt work

Hi all, I want to call a javascript function from a php function like this:

        public function Buscar()
        {
            $HoraInicio = $_POST['edtHoraInicio'];
            $HoraFin = $_POST['edtHoraFin'];
            $FechaInicio = $_POST['edtFec1'];
            $FechaFin = $_POST['edtFec2'];

            $FechaMax = $FechaFin." ".$HoraFin.":00";
            $FechaMin = $FechaInicio." ".$HoraInicio.":00";

            $_GET["FechaMax"] = $FechaMax;
            $_GET["FechaMin"] = $FechaMin;

            echo $FechaMin;

            echo "<script language=javascript>alert('Hi.')</script>";
           
        }

but the function Buscar never show the alert but shows the $FechaMin

I hopu u guys can help me out with this probem

Thanks,

Siddhartha

Hi I have a table class and functions I want to call in another function but can't get it working. Some help will be very welcome.

It seesm that the new table class is not working in this function if I pass the values to it, I have tested the class, it does get the post values I post to it so $_POST['id'] are being received as well as all the other $_POST's but the table class and find function is not working, it works fine if I don't put it in a function..

function edit() {
   
   if (isset($error)){ $error.="Please fix the error(s) above";}
   else {

      if ($_POST['id'] <> "") { 
                   
         $update =& new table($db, 'publisher');

         $update->find($_POST['id']);
         $update->name       = $_POST['name'];
         $update->url        = $_POST['url'];
         $update->contact    = $_POST['contact'];
         $update->address    = $_POST['address'];
         $update->phone        = $_POST['phone'];
         $update->email        = $_POST['email'];
         $update->save();

         $error = "The Publisher has been edited";   
                }
   }
  }

I've followed the PHP Freaks pagination tutorial which you can find here.

And I also got it to work, the only problem is that the script won't work when I use the query outside of the function.

Here's the function:



<?php 
function knuffix_list ($query, $dbc) {

// find out how many rows are in the table:
$query_row = "SELECT COUNT(*) FROM con";
$query_run = mysqli_query ($dbc, $query_row);
$row = mysqli_fetch_row($query_run);
$num_rows = $row[0];

// number of rows to show per page
$rows_per_page = 5;

// find total pages -> ceil for rounding up
$total_pages = ceil($num_rows / $rows_per_page);

// get the current page or set a default
if (isset($_GET['current_page']) && is_numeric($_GET['current_page'])) {

// make it an INT if it isn't

$current_page = (int) $_GET['current_page'];

} else {

// default page number

$current_page = 1;

}


// if current page is greater than total pages then set current page to last page
if ($current_page > $total_pages) {

$current_page = $total_pages;

}

// if current page is less than first page then set current page to first page
if ($current_page < 1) {

$current_page = 1;

}

// the offset of the list, based on current page
$offset = (($current_page - 1) * $rows_per_page);

echo "test " . $query;

// SCRIPT ONLY WORKS IF I INSERT QUERY HERE

$query

= "SELECT * FROM con, user WHERE con.user_id = user.user_id ORDER BY contributed_date DESC LIMIT $offset, $rows_per_page";

$data = mysqli_query ($dbc, $query) or die (mysqli_error ($dbc));

// Loop through the array of data

while ($row = mysqli_fetch_array ($data)) {

global $array;

// Variables for the table

$con_id = $row['con_id'];

$likes_count = $row['likes'];

$dislikes_count = $row['dislikes'];

$dbuser_name = $row['nickname'];

$dbuser_avatar = $row['avatar'];

$user_id = $row['user_id'];

// The TABLE

echo "<table padding='0' margin='0' class='knuffixTable'>";

echo "<tr><td width='65px' height='64px' class='avatar_bg' rowspan='2' colpan='2'><img src='avatar/$dbuser_avatar' alt='avatar' /></td>";

echo "<td class='knuffix_username'><strong><a href='profile.php?user=$dbuser_name' title='Profile of $dbuser_name'>" . $dbuser_name . "</a> ___ " . $user_id . "____ <form action='' method='POST'><button type='submit' name='favorite' value='fav'>Favorite</button></form>";

echo "</strong><br />" . $row['category'] .  " | " . date('M d, Y', strtotime($row['contributed_date'])) . "</td></tr><tr><td>";

echo "<form action='' method='post'>

<button class='LikeButton' type='submit' name='likes' value='+1'>Likes</button>

<button class='DislikeButton' type='submit' name='dislikes' value='-1'>Dislikes</button>

<input type='hidden' name='hidden_con_id' value='" . $con_id . "' />

</form></td><td class='votes'>Y[" . $likes_count . "] | N[" . $dislikes_count . "]</td></tr>";

echo "<tr><td class='knuffix_name' colspan='3'><strong>" . htmlentities($row['name']) . "</strong><br /></td></tr>";

echo "<tr><td colspan='2' class='knuffix_contribution'><pre>" . $row['contribution'] . "</pre><br /></td></tr>";

echo "</table>";

// POST BUTTONS inside the table

$likes = $_POST['likes'];

$dislikes = $_POST['dislikes'];

$con_id = $_POST['hidden_con_id'];

$favorite = $_POST['favorite'];

$array = array ($likes, $dislikes, $con_id, $user_id, $favorite);

}

/********* build the pagination links *********/

// BACKWARD
// if not on page 1, show back links and show << link to go back to the very first page
if ($current_page > 1) {

echo " <a href='{$_SERVER['PHP_SELF']}?current_page=1'><<</a> ";

// get previous page number and show < link to go to previous

$prev_page = $current_page - 1;
 

echo " <a href='{$_SERVER['PHP_SELF']}?current_page=$prev_page'><</a> ";

}

// CURRENT
// range of number of links to show
$range = 3;

// loop to show links in the range of pages around current page
for ($x = ($current_page - $range); $x < (($current_page + $range) + 1); $x++) {

// if it's a valid page number...

if (($x > 0) && ($x <= $total_pages)) {

// if we're on current page

if ($x == $current_page) {

// highlight it but don't make a link out of it

echo "[<b>$x</b>]";

// if it's not the current page then make it a link

} else {

echo "<a href='{$_SERVER['PHP_SELF']}?current_page=$x'>$x</a>";

}

}
}


// FORWARD
// if not on the last page, show forward and last page links
if ($current_page != $total_pages) {

// get next page

$next_page = $current_page + 1;

// echo forward link for next page

echo " <a href='{$_SERVER['PHP_SELF']}?current_page=$next_page'>></a> ";

// echo forward link for last page

echo " <a href='{$_SERVER['PHP_SELF']}?current_page=$total_pages'>>></a> ";

}

/***** end building pagination links ****/

mysqli_close($dbc);

}

?>


As you can see above, the script will only work if I put the query right below the $offset variable and above the $data variable.

I put the test echo above the query to see how the query looks like when I induce the query from the outside through the function parenthesis into the function, and this is what I get printed out:


test SELECT * FROM con, user WHERE con.user_id = user.user_id ORDER BY contributed_date DESC LIMIT ,


Obviously the $offset and the $rows_per_page variables are not set, when I induce the query from the outside into the function.

So in that sense my question is:

How can I induce the query from the outside into the function SO THAT the $offset and the $rows_per_page variables are set as well and NOT empty?


p.s.

I need the query outside of the function because I'm using a sort by category functionality.

Hello everyone,

I found a tutorial on creating a pdf with php and I just tried to create a basic pdf to see if it worked and modify it from there.  Here is the link to the tutorial: http://www.astahost.com/info/tfclt-create-pdf-php-create-fly-pdf-web-server.html

Well, after uploading the following php file to the server and testing it, I got this error:

Fatal error: Call to undefined function pdf_new() in /home/caresa6/public_html/BubblyBounce.com/admin/pdftest.php on line 2

Here's the code that produced the error:
Code: [Select]
<?php
$mypdf = PDF_new();
PDF_open_file($mypdf, "");
PDF_begin_page($mypdf, 595, 842);
$myfont = PDF_findfont($mypdf, "Times-Roman", "host", 0);
PDF_setfont($mypdf, $myfont, 10);
PDF_show_xy($mypdf, "Sample PDF, constructed by PHP in real-time.", 50, 750);
PDF_show_xy($mypdf, "Made with the PDF libraries for PHP.", 50, 730);
PDF_end_page($mypdf);
PDF_close($mypdf);

$mybuf = PDF_get_buffer($mypdf);
$mylen = strlen($mybuf);
header("Content-type: application/pdf");
header("Content-Length: $mylen");
header("Content-Disposition: inline; filename=gen01.pdf");
print $mybuf;

PDF_delete($mypdf);
?>

Can anyone help me figure out what to do from here?  I have some PHP knowledge, but I'm treading in uncharted waters with this, so I am totally lost.  Thanks in advance.

I am trying to create a madlibs game ..

I have a txt file with paragraphs in it .. Some of the sentences have the following tags in it <#noun>, or <#verb>, etc ...

I need to parse the file in php and display the content in between the tags to the user.

The user can fill the the words in text box, and the story will be displayed with the new words instead of the tags.

I am new to php. Any help greatly appreciated.

Thanks in Advance,
Vladimir

I would to create my own php class for my website but i dunno the fundamentals of PHP CLASSES. Can anyone teach me how to create and use php class. best if you go into deeper explanations. My main subject is to create a social net site

hi i am not sure if i should be posting this problem hear.. so please direct me to the right place if i am.

I am trying to create a application form, for people wanting to apply for a apartment. I managed to connect to the database set up table, even make the actual form. Know that everything  is done i wanted to make it a little more interactive.

I want the form to automatically show the price per month and the size of the apartment if the applicant choses apartment 1 on the form, or if he chooses apartment 2.

a managed to tweak around with a filtering system by jquery but i am lost and tired, i wanted to know if there was something simple out there that could help me. Thank you so much for the help.

I want to add some text onto an image.
Sometimes I either get nothing returned or I get a shit load of garbage returned. Garbage in the form of little question mark symbols and other crap like that.

PHP File - show Tickets
Code: [Select]
include("createImage.php");

while( $row = mysql_fetch_array( $r ) ){
         echo generateTicket( $row['ticketNumber'] ) . "<br /><br />";
}

PHP - createImage.php
Code: [Select]
<?
header("Content-type: image/jpeg");

function generateTicket( $ticketNum ){

$imageFile = "images/ticket.jpeg";

if( file_exists( $imageFile ) ){

$im = @imagecreatefromjpg( $imageFile );

$text_color = imagecolorallocate( $im, 0, 0, 0 );

imagestring( $im, 6, 25, 150, $ticketNum, $text_color );
 
imagejpeg( $im );
}else
echo 'error';
}

?>

Hi,

I'm developing an iPhone app that's going to need data from a MySQL database, it's just a simple list of my bands upcoming gigs.

So I understand that I need to build an API - I've found some scripts here and there, I just need some advice as to 'what' I should build...JSON? XML? something else?

I don't know anything about it and cant really find anything that will tell me.

Hopefully, If I can get a good method going I will be able to use it for various other app ideas.


Any suggestions are greatly appreciated.

Hi All I have a a directory website but numereous listings don't have their own website so they are requesting a single page to show a summary of their business and products. I know how to do most of it the part I am unsure of is: I have a form where they upload text, images, etc to a database and upload the images. what I would like to do is to save it as a file under a subdirectory. Is it possible to save a file php file using php   Thank you in advance   Lional