PHP - Problem With Storing Info & Associated Id

This topic has been moved to Application Design.

http://www.phpfreaks.com/forums/index.php?topic=315057.0

Okay, I'll make this short and sweet, and all side comments are irrelevant.  I'm doing this for my own happies


So using Facebook.com's API you can extract all of a specific user's friends in an array.  Well I'm making a array check to see who on that users friend list was removed or deleted them that week using array_dif(); in this method:

1) User allows the application
2) Application catches the user's friends_id's in an array and stores them // this is where i'm having trouble, i'll come back to it
3) User then waits a few days and notices their friend count is no longer 400, it's now 399!
4) User logs into my application, and checks the previously uploaded array against their current array of friends.

Okay now to the part i'm struggling with is, what would you do?  Should i store them each uniquely in a database? Because some users have 4,000+ friends and that gets quite strenuous.  OR! Should i save them into a txt file unique to that person's user_id.

I kind of like the 2nd option, however it's less ( to my newbish mind ) customizable versus the sql_queries. 

Once again, i'd like to reiterate, i don't care that this is again Facebooks terms of service, it's for my own personal gain and just enjoy taking on projects in my spare time that force my brain to work hard.

That's all, hope you excuse the typos and poor grammar.  Typed this pretty quickly, any questions - feel free to ask!

So, I am your typical newbie to php. I am usually doing more design stuff, but now I am diving into PHP. The script in question is made for a user to upload an image to a respective directory. Also the path, category, and 2 tags representing the image will be uploaded to a mySQL database.

My problem is that I have pieced together some freeware scripts that I have found in order to accomplish my ultimate goal. I need the form to be processed on the same page, because I don't want to redirect users. I also need to upload the respective information to the database. Right now, when you upload an image it only seems to be processing a part of the form, and does not upload any of the information at all. Can someone spot the many things that I am doing wrong and provide me with some direction?

I have two files in question

image_upload.php (Sorry about all of the code)

<?php
require_once 'upload_config.php';

function VerifyForm(&$values, &$errors)
{

// Do all necessary form verification
    if($clear_folder_before_upload){
        $mydirectory = myUploadDir();
        EmptyDir($mydirectory);
    }

    $uploaded_file_counter=0;
    $UploadLimit = $_POST['counter'];
    
    for($i=0;$i<=$UploadLimit;$i++){
        $file_tag='filename'.$i;
        $filename=$_FILES[$file_tag]['name'];

            if($filename!=null) {
            $rand=time();
            $str="$rand$filename";

            // set folder name in here.
            $filedir= myUploadDir();

            //change the string format.
            $string= $filedir.$str;
            $patterns[0] = "/ /";
            $patterns[1] = "/ /";
            $patterns[1] = "/ /";
            $replacements[1] = "_";
            $dirname=strtolower(preg_replace($patterns, $replacements, $string));
            //end of changing string format

            //checking the permitted file types
                            if($check_file_extentions)    {
                            $allowedExtensions = allowedfiles();
                                foreach ($_FILES as $file) {
                                                    if ($file['tmp_name'] > '') {
                                                      if (!in_array(end(explode(".",
                                                            strtolower($file['name']))),
                                                            $allowedExtensions)) {
                                                            $fileUploadPermission=0;
                                                      }
                                                      else
                                                      {
                                                          $fileUploadPermission=1;
                                                      }
                                                    }
                                                  }
                            }
                            else{
                                $fileUploadPermission=1;
                            }
            //end of checking the permitted file types

                if($fileUploadPermission){
                    if(move_uploaded_file($_FILES[$file_tag]['tmp_name'],$dirname)) {
                            echo "<img src='$dirname'>";
                            $uploaded_file_counter+=1;
                        }
                }
                
            }

    }
 
if($uploaded_file_counter==0){
     echo "<br /> <b style='font-weight:bold;color:red'>Oops! Please select an image file</b>";
}else{
     echo "<br /> <b>You requested ".$i." image files to upload and ".$uploaded_file_counter." files uploaded sucessfully</b>";
echo $filename0;
$contentdiv = 'Upload succesful! Upload Again';
}


}

function DisplayForm($values, $errors)
{
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>JayGilford.com :: Name form example</title>
    <script type="text/javascript" src="js/jquery-1.4.2.js"></script>
    <script type="text/javascript" src="js/jquery-ui-1.8.custom.min.js"></script>

    <style type="text/css">
        div#upload_box_wrapper{width:350px;text-align:center; float: left;font-family: verdana; font-size: 12px;padding: 5px 5px 5px 5px; color: black;}
        div#upload_box_wrapper #upload_title_text{text-align:left;width: 100%;display: block;border: 0px solid green; margin-bottom: 5px;}
        div#upload_box_wrapper #FileUploadDiv{display: block;width: 98%;border: 0px solid green; text-align: left;padding: 0px 0px 0px 0px;}
        div#upload_box_wrapper p.add-new-upload-box{float: left;width: 100%;text-align: left;}
        div#upload_box_wrapper a.add-new-upload-link{font-weight: bold;font-size: 13px;padding-right: 3px;text-decoration: none; color: black;}
        div#upload_box_wrapper .upload-button{border: 0px solid lightgreen;height:30px; width:120px;cursor: pointer;background:url(./images/upload_button.png) no-repeat center left; color: white;} 
    </style>
</head>
<body>
<form method='post' action='' enctype='multipart/form-data'>
        <div id="upload_box_wrapper">

                <div id="upload_title_text">Image Upload:</div>
                    <div id="FileUploadDiv" DivValue="0">
                        <input name='filename0' type='file' id='filename'>
                        <select name="img_category">
<option value="Vacation">Vacation</option>
<option value="Holiday">Holiday</option>
</select>
                        <input name="tag1" type="text" id="tag1">
                        <input name="tag2" type="text" id="tag2">
                    </div>
                    <input type="hidden" value="0" id="counter" name="counter">
                    <div align='left'>
                        <input type='submit' name='submit' value='Upload Now!' class="upload-button">
                    </div>
</div>
</form>

</body>
</html>


<?php
}

function ProcessForm($values)
{

$filename0 = $_POST['filename'];
$filetype = $_POST[''];
$img_category = $_POST['img_category'];
$tag1 = $_POST['tag1'];
$tag2 = $_POST['tag2'];

////////
//figure out the image??
/////

session_start();
$img = $_POST[ 'imglink' ];
$filetypes = array( 'gif','jpg','jpeg','png' );
++$filetypes;
$filetype = strstr( $img, '.' );
if( $filetype != $filetypes )
{ echo 'not supported'; }
session_register( 'Image' );


$Img = $_SESSION[ 'Image' ];
mysql_query( "INSERT into `images` ( `image_id`, `filename`, `filetype`, `url`, `img_category`, `tag1`, `tag2` ) 
 VALUES ( '', '$filename0', '$filetype', '$Img', '$img_category', '$tag1', '$tag2' )" );
session_destroy();
mysql_close( $DB );
 
// Replace with actual page or redirect :P

}
 
if ($_SERVER['REQUEST_METHOD'] == 'POST')
{
$formValues = $_POST;
$formErrors = array();
 
if (!VerifyForm($formValues, $formErrors))
DisplayForm($formValues, $formErrors);
else
ProcessForm($formValues);
}
else
DisplayForm(null, null);
?>


and the upload_config.php file


<?php
///////////////////////////////////////////////////////////////////////////
//establish mysql connection (I have this set correctly on the original file)
///////////////////////////////////////////////////////////////////////////
$db = mysql_connect('RESPECTIVE', 'MYSQL', IDANDPW');
 
if (!$db) {
    echo "Unable to establish connection to database server";
    exit;
}
 
if (!mysql_select_db('chad_images', $db)) {
    echo "Unable to connect to database";
    exit;
}

///////////////////////////////////////////////////////////////////////////
// set your upload directory name in here.
///////////////////////////////////////////////////////////////////////////
function myUploadDir(){
    $myUploadDir = "./upload/";
    return $myUploadDir;
}

///////////////////////////////////////////////////////////////////////////
// if you want to imposs file type rescriction then
// $check_file_extentions=1  or if you want to off this option then
// $check_file_extentions=0
///////////////////////////////////////////////////////////////////////////

$check_file_extentions = 1;

////////////////////////////////////////////////////////////////////////////
// set your allowed type in the array.
// examples: zip, pdf, psd and many more.
//
////////////////////////////////////////////////////////////////////////////
function allowedfiles()
                {
                        $allowed_file_extensions=array("png","jpg","gif","bmp");
                        return $allowed_file_extensions;
                }

///////////////////////////////////////////////////////////////////////////
// if you want to delete all the files in uploaded directory
// $clear_folder_before_upload = 1  or if you want to off this option then
// $clear_folder_before_upload = 0
///////////////////////////////////////////////////////////////////////////

$clear_folder_before_upload = 1;

function EmptyDir($dir) {

    $handle=opendir($dir);
    while (($file = readdir($handle))!==false) {
    @unlink($dir.'/'.$file);
    }
    closedir($handle);
}

?>


Any help would be greatly appreciated!
 

I am having some problems with part of the code. What is going on is a user registers info with a form and is sent an email with a confirmation link. The info that was in a temp DB table is moved to a member table. All of this works fine, but I am trying to be able to store an ID and username associated with their passkey info and echo that variable out. This part I am having trouble with. Code is here.


<?
session_start();
include('config.php');

// Passkey t from link
$passkey=$_GET['passkey'];

$tbl_name1="Profile_temp";

// Retrieve data from table where row matches passkey
$sql1="SELECT * FROM $tbl_name1 WHERE confirm_code ='$passkey'";
$result1=mysql_query($sql1);


// If successfully queried
if($result1){

// Count how many row has this passkey
$count=mysql_num_rows($result1);

// if passkey is found retrieve info from temporary DB
if($count==1){

$rows=mysql_fetch_array($result1);
$FirstName=$rows['FirstName'];
$LastName=$rows['LastName'];
$UserName=$rows['UserName'];
$Password= md5($rows['Password']);
$Password2=md5($rows['Password2']);
$email=$rows['email'];
$Zip=$rows['Zip'];
$Birthday=$rows['Birthday'];
$Security=$rows['Security'];
$Security2=$rows['Security2'];

$tbl_name2="Profile";

// Insert data that retrieves from "temp_members_db" into table "registered_members"
$sql2="INSERT INTO $tbl_name2(`FirstName`,`LastName`,`Username`,`Password`,`Password2`,`email`,`Zip`,`Birthday`,`Security`,`Security2`) VALUES ('$FirstName','$LastName','$UserName','$Password','$Password2','$email','$Zip','$Birthday','$Security','$Security2')"; 
//echo $sql2;
$result2=mysql_query($sql2);
}

// if passkey is not found, display message "Wrong Confirmation code"
else {
echo "<h2>Sorry, Your passkey was not found.</h2>";
}
while ($row = mysql_fetch_assoc($result2)) {
    $_SESSION['id'] = $row['id'];
$_SESSION['UserName']=$user_name; 
}

// if successfully moved data from table"temp_members_db" to table "registered_members" displays message "Your account has been activated" and don't forget to delete confirmation code from table "temp_members_db"
if($result2){

echo "<h2>Your account has been activated,  </h2>";
echo "$user_name"; 
echo"<p>You may now upload a profile picture</p>";

// Delete information of this user from table "temp_members_db" that has this passkey
$sql3="DELETE FROM $tbl_name1 WHERE confirm_code = '$passkey'";
$result3=mysql_query($sql3);

}

}
?>


getting an error for this part

while ($row = mysql_fetch_assoc($result2)) {
    $_SESSION['id'] = $row['id'];
$_SESSION['UserName']=$user_name; 
}


the error is "Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in confirmation.php on line 62"

I have created a login form. I am sending values through Ajax for form validation. However, I am having problem with the code that I am unable to store values in Sessions & Cookies.   I have added a "Remember me" checkbox into login form. I want to validate Boolean value using Javascript Checked property and send the data to PHP for validation.    If user clicks on remember me checkbox then the data should be stored in either Sessions & Cookies. If it is not checked then data should be stored only in Sessions. I am posting here my login form code, Ajax code & PHP code.   Could you guys help me to point out my mistake what I am doing wrong in this code?   Login Form:

<input type="checkbox" id="cb" name="cb">
<label for="cb">Remember me</label>

Ajax Code:

function login(){var e = _("email").value;
var pass = _("password").value;
var cb = _("cb").value;
if(e == "" || pass == ""){
_("status").innerHTML = "Please fill out the form";
} else {
_("loginbtn").style.display = "none";
_("status").innerHTML = 'please wait ...';
var ajax = ajaxObj("POST", "handlers/login_handler.php");
        ajax.onreadystatechange = function() {
       if(ajaxReturn(ajax) == true) {
           if(ajax.responseText == "login_failed"){
_("status").innerHTML = "Login failed, please try again.";
_("loginbtn").style.display = "block";
} else {
window.location = "message.php?msg=Hello "+ajax.responseText;
}
  }
    } 
        ajax.send("e="+e+"&pass="+pass+"&cb="+cb);
}
} 

PHP Code:

$cb = cleanstr($_POST['cb']);
if(isset($cb) && ($cb == true)) {
// IF USER CLICKED ON REMEMBER ME CHECKBOX CREATE THEIR SESSIONS AND COOKIES
$_SESSION['userid'] = $db_id;
$_SESSION['username'] = $db_username;
$_SESSION['password'] = $db_pass;
setcookie("id", $db_id, strtotime( '+30 days' ), "/", "", "", TRUE);
setcookie("user", $db_username, strtotime( '+30 days' ), "/", "", "", TRUE);
     setcookie("pass", $db_pass, strtotime( '+30 days' ), "/", "", "", TRUE); 
// UPDATE THEIR "IP" AND "LASTLOGIN" FIELDS
$sql = "UPDATE users SET ip='$ip', lastlogin=now() WHERE id='$db_id' LIMIT 1";
            $query = mysqli_query($con, $sql);
echo $db_username;
   exit();
} else {
// IF USER HAS NOT CLICKED ON REMEMBER ME CHECKBOX CREATE THEIR SESSIONS ONLY
$_SESSION['userid'] = $db_id;
$_SESSION['username'] = $db_username;
$_SESSION['password'] = $db_pass;
// UPDATE THEIR "IP" AND "LASTLOGIN" FIELDS
$sql = "UPDATE users SET ip='$ip', lastlogin=now() WHERE id='$db_id' LIMIT 1";
            $query = mysqli_query($con, $sql);
echo $db_username;
   exit();
}