PHP - Php Newsletter Script

Hi, I am using the phpmailer class and a little script I found online, I have a form with a textarea called "plain" which submits and takes the action through to this page:

Code: [Select]
<?php

#include PHPMailer class and database connection
include("class.phpmailer.php");
include("connect.php");

#remove slashes from content
$plain = stripslashes($_POST["plain"]);

#initiate PHPMailer class
$mail = new PHPMailer();
#set the from e-mail address
$mail->From = "email@email.com";
#set the from name
$mail->FromName = "myname";

#the subject of the email
$mail->Subject = "Our Newsletter";
#the HTML content of the email
$mail->Body = $plain;


#loop through e-mail addresses
$query = "SELECT email FROM member";
$result = mysql_db_query ("define_pete", $query);
while ($myrow = mysql_fetch_array($result)){

#add subscribers address as the recipient
$mail->AddAddress($myrow["fldEmail"]);
#sends the newsletter
$mail->Send();
#clears the recipient address
$mail->ClearAddresses();


}

?>

It gives no errors and goes through, yet it definitely sends no emails out, I have made sure the emails are correct in the field email in the table member but it is, anyone got any clue what is going wrong?

Appreciated

I am working on building a newsletter with PHP. I have gotten everything to work but the pulling of the email address.    First is the sendnl.php file 

<?php
require("../PHPMailer/class.phpmailer.php");
include 'includes.php';

        $mail = new PHPMailer;
        $subject = $_POST['subject'];
        $text = $_POST['newsletterBody'];
        $mail->IsSMTP();                                      
        $mail->Host = 'localhost';  
        $mail->Port = '465';
        $mail->SMTPAuth = true;                               
        $mail->Username = '******USERNAME';          
        $mail->Password = '*****PASSWORD';
        $mail->SMTPAuth = true;
        $mail->SMTPSecure = 'ssl';                           

        $mail->From = '***EMAIL';
        $mail->FromName = '****FROMNAME';
        
    
        $email = getEmail("73", $DBH);
        
        foreach ($email as $nlEmail)
        {
            $addEmail = $nlEmail->email;
            $mail->AddAddress($addEmail);
            $DBH = null;
            $addEmail = "";
        }
        

        $mail->AddReplyTo('******EMAIL', '*****EMAILNAME');
    
        $mail->WordWrap = 50;                                 
        $mail->IsHTML(true);                                  

        $mail->Subject = $subject;
        $mail->Body    = $text;
        $mail->AltBody = $text;

        if(!$mail->Send()) {
           echo 'Message could not be sent.';
           echo 'Mailer Error: ' . $mail->ErrorInfo;
           exit;
        }

        echo 'Message has been sent';

?>

Next is part of the includes file going over the function and class

function getEmail($inId, $DBH)
    {
        if (!empty($inId))
        {
            $blogstmt = $DBH->prepare("SELECT email_addr FROM newsletter_emails WHERE id = :userId");
            $blogstmt->bindParam(":userId", $inId, PDO::PARAM_STR, 6);
            $blogstmt->execute();
        }
        else
        {
            $blogstmt = $DBH->prepare("SELECT * FROM newsletter_emails");
            $blogstmt->execute();
        }
    
        $postArray = array();
        
        $results = $blogstmt->fetchAll(PDO::FETCH_ASSOC);
        foreach($results as $row){
            $myPost = new nlEmails($row["id"], $row['email'], $DBH);
            array_push($postArray, $myPost);
        }
        
        return $postArray;
        $DBH = null;
    }
 
class nlEmails {
    public $id;
    public $email;
    
    function __construct($inId=null, $inEmail=null, $DBH)
    {
        if(!empty($inId))
        {
            $this->id = $inId;
        }
        if(!empty($inEmail))
        {
        $this->email = $inEmail;
        }
    }
}

It gives me an Unidentified index error message for the "id" and "email" used in the getEmail function. Thanks for any help or pointers. 
Edited by travisco87, 08 October 2014 - 03:33 PM.

For my A level ICT i need to create a PHP newsletter email system for which people can sign up from one page and then a admin can log in and send out the email to the people that have signed up. My problem is i also need to attach a PDF to these emails, however i cant work out how to add this into the scripts i have for the newsletter system. Even my teacher cant help me  , please can someone help me    .
The code i have is below.
admin.php
<?php
  //load configuration
  require("config.php");
  
  //connect to database
  @mysql_connect($db_server,$db_user,$db_password) or die("Database server connection failed. Check variables \$db_server, \$db_user and \$db_password in config.php");
  @mysql_select_db($db_name) or die("Selecting database failed. Check variable \$db_name in config.php");
  
  //print header
  echo $header;
?>
<h1><?php echo $title; ?> - Administration</h1>
<hr>
<?php 
  $pwd = $_GET["pwd"];

  //simple login
  if(isset($pwd) && ($pwd == $password)){
    $submit = $_POST["submit"];
    $submit_newsletter = $_POST["submit_newsletter"];
    $del = $_GET["del"];
          
    //insert new address
    if(isset($submit)){
      $name = $_POST["name"];
      $email = $_POST["email"];
      
      @mysql_query("INSERT INTO $db_table (email,name) VALUES ('$email','$name');");
      
      //error occurred
      if(@mysql_error()){
        ?><p>Inserting entry failed: <?php echo @mysql_error(); ?></p>
        <p><a href="javascript&#38;#058;history.back();">Click here to go back.</a></p><?php
      //successful
      }else{
        ?><p>Entry has been inserted successfully. <a href="admin.php?pwd=<?php echo $pwd; ?>">Click here to continue.</a></p><?php
      }
    //delete an entry
    }else if(isset($del)){
      @mysql_query("DELETE FROM $db_table WHERE id=$del;");
      
      //error occurred
      if(@mysql_error()){
        ?><p>Deleting entry failed: <?php echo @mysql_error(); ?></p>
        <p><a href="javascript&#38;#058;history.back();">Click here to go back.</a></p><?php
      //successful
      }else{
        ?><p>Entry has been deleted successfully. <a href="admin.php?pwd=<?php echo $pwd; ?>">Click here to continue.</a></p><?php
      }
    //send newsletter
    }else if(isset($submit_newsletter)){
      $sent = 0;
      $result = @mysql_query("SELECT name,email FROM $db_table ORDER BY email ASC;");
      $subject = $_POST["subject"];
      $message = $_POST["message"];
      
      ?><p>Sending emails to ...</p>
      <ul><?php
      
      //send emails one by one
      while($row=@mysql_fetch_array($result)){
        $name = $row["name"];
        $email = $row["email"];
        
        ?><li><?php echo $name; ?> (<?php echo $email; ?>) ... <?php

        if(@mail($email,$subject,$message,"From: $admin <$admin>\n")){
          ?>sent<?php
          $sent++;
        }else{
          ?>failed<?php
        }
        
        ?></li><?php
      }
      
      ?></ul>
      <p><strong><?php echo $sent; ?> emails sent.</strong> <a href="admin.php?pwd=<?php echo $pwd; ?>">Click here to continue.</a></p><?php
    //print forms
    }else{
       ?><h2>Send newsletter</h2>
       <form method="post" action="<?php echo $_SERVER["PHP_SELF"]; ?>?pwd=<?php echo $pwd; ?>">
         <table>
           <tr>
             <td>Subject:</td>
             <td><input type="text" name="subject" class="fixedwidth"></td>
           </tr>
           <tr>
             <td valign="top">Message:</td>
             <td><textarea name="message" cols="60" rows="20" class="fixedwidth"><?php echo $signature; ?></textarea></td>
           </tr>
           <tr>
             <td>&nbsp;</td>
             <td><input type="submit" name="submit_newsletter" value="Send"></td>
           </tr>
         </table>
       </form>

       <h2>Add an email address</h2>
       <form action="<?php echo $_SERVER["PHP_SELF"]; ?>?pwd=<?php echo $pwd; ?>" method="post">
         <table>
           <tr>
             <td>Name:</td>
             <td><input type="text" name="name" value="" maxlength="255"></td>
           </tr>
           <tr>
             <td>Email address:</td>
             <td><input type="text" name="email" value="" maxlength="255"></td>
           </tr>
           <tr>
             <td>&nbsp;</td>
             <td><input type="submit" name="submit" value="Submit"></td>
           </tr>
         </table>
       </form>

       <h2>Email addresses</h2>
       <table cellpadding="5" cellspacing="2">
         <tr class="header">
           <td><strong>Name</strong></td>
           <td><strong>Email address</strong></td>
           <td>&nbsp;</td>
         </tr>
         <?php
           $result = @mysql_query("SELECT * FROM $db_table ORDER BY email ASC;");
           $colored = false;

           while($row=@mysql_fetch_array($result)){
             $colored = !$colored;
             ?><tr<?php if($colored){ ?> class="colored"<?php } ?>>
               <td width="200"><?php echo $row["name"]; ?></td>
               <td width="200"><?php echo $row["email"]; ?></td>
               <td><a href="<?php echo $_SERVER["PHP_SELF"]; ?>?pwd=<?php echo $pwd; ?>&del=<?php echo $row["id"]; ?>">remove</a></td>
             </tr><?php
           }
         ?>
       </table>
       <?php
    }
  }else{
    //print login form
    echo $login;
  }
  
  //print link to news
  ?><p align="right"><a href="index.php">Newsletter</a></p><?php
  
  //print footer
  echo $footer;

  //close database connection
  @mysql_close();
?>
config.php
<?php
/* ######################## DATABASE ######################## */

  // Database server
  $db_server = "localhost";
  
  // Database name
  $db_name = "zpwebsi1_news";
  
  // Database username
  $db_user = "zpwebsi1_zac";

  // Database password
  $db_password = "powell";
  
  // Database table to store news
  // (will be created automatically)
  $db_table = "easy_newsletter";

/* ##################### CONFIGURATION ###################### */

  // Complete URL of the script
  // (begins with http://, ends with slash)
  $url = "http://www.charsfieldthreehorseshoes.co.uk/alemail.html";
  
  // Password for the administration
  $password = "admin";
  
  // Administrator email address (will be used as sender of
  // the newsletter emails)
  $admin = "zac@zpwebsite.com";

  // Title (will be displayed in the browser's header
  $title  = "Ale Mail";

  // Signature (will be inserted when creating a fresh
  // newsletter but can be changed before submitting)
  $signature  = "\n\n\n\n\n---------------------\nYou receive this email because you have registered with our newsletter $title. Click the following link to unsubscribe: $url";

/* ######################### LAYOUT ######################### */

  // Header to be used on each page
  $header = <<<EOT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <link href="style.css" rel="stylesheet" type="text/css">
    <title>$title</title>
  </head>
  <body>
EOT;

  // Footer to be used on each page
  $footer = <<<EOT
  </body>
</html>
EOT;

  // Login form
  $login = <<<EOT
    <form action="admin.php" method="get">
      Password: <input name="pwd" type="password"> <input type="submit" value="Login">
    </form>
EOT;
?>

And index.php
<?php
  //load configuration
  require("config.php");
  
  //print header
  echo $header;
?>
<h1><?php echo $title; ?></h1>
<hr>
<?php  
  //form submitted
  if(isset($_POST["submit"])){
    //connect to database
    @mysql_connect($db_server,$db_user,$db_password) or die("Database server connection failed. Check variables \$db_server, \$db_user and \$db_password in config.php");
    @mysql_select_db($db_name) or die("Selecting database failed. Check variable \$db_name in config.php");

    $name = $_POST["name"];
    $email = $_POST["email"];
    
    //subscribe
    if($_POST["action"]=="subscribe"){
      //check if name is long enough
      if(strlen($name)<3){
        ?><p>Name must consist of at least 3 characters.</p><?php
      //check if email is valid
      }else if(!eregi("^[0-9a-z]([-_.]?[0-9a-z])*@[0-9a-z]([-.]?[0-9a-z])*\\.[a-z]{2,3}$",$email)){
        ?><p>Email address is not valid.</p><?php
      //check if email already exists
      }else if(@mysql_num_rows(@mysql_query("SELECT id FROM $db_table WHERE email='$email';"))){
        ?><p>Email address exists already.</p><?php
      //insert values
      }else{
        @mysql_query("INSERT INTO $db_table (email,name) VALUES ('$email','$name');");

        //error occurred
        if(@mysql_error()){
          ?><p>An unknown error occurred. Please try again later.</p><?php
        //successful
        }else{
          ?><p>Subscription was successful. Thank you!</p><?php
        }
      }
    //unsubscribe
    }else{
      @mysql_query("DELETE FROM $db_table WHERE email='$email';");

      //error occurred
      if(@mysql_error()){
        ?><p>An unknown error occurred. Please try again later.</p><?php
      //email not found
      }else if(@mysql_affected_rows()==0){
        ?><p>Email address not found.</p><?php
      //successful
      }else{
        ?><p>You have unsubscribed successfully!</p><?php
      }
    }
  }
?>
<form action="<?php echo $_SERVER["PHP_SELF"]; ?>" method="post">
  <table>
    <tr>
      <td>Your name:</td>
      <td><input type="text" name="name" value="" maxlength="255"></td>
    </tr>
    <tr>
      <td>Your email address:</td>
      <td><input type="text" name="email" value="" maxlength="255"></td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td><input type="radio" name="action" value="subscribe" id="action_subscribe" checked> <label for="action_subscribe">subscribe</label>&nbsp;<input type="radio" name="action" value="unsubscribe" id="action_unsubscribe"> <label for="action_unsubscribe">unsubscribe</label></td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td><input type="submit" name="submit" value="Submit"></td>
    </tr>
  </table>
</form>
<p align="right"><a href="admin.php">Administration</a></p>
<?php
  //print footer
  echo $footer;

  //close database connection
  @mysql_close();
?>

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=313625.0

help!

Hi everyone!

I've been working on a php script to replace links that contain a query with direct links to the files they would redirect to.

Hi i have this upload script which works fine it uploads image to a specified folder and sends the the details to the database.
but now i am trying to instead make a modify script which is Update set so i tried to change insert to update but didnt work can someone help me out please
this my insert image script which works fine but want to change to modify instead
Code: [Select]
<?php
mysql_connect("localhost", "root", "") or die(mysql_error()) ;
mysql_select_db("upload") or die(mysql_error()) ;

// my file the name of the input area on the form type is the extension of the file
//echo $_FILES["myfile"]["type"];

//myfile is the name of the input area on the form 
$name = $_FILES["image"] ["name"]; // name of the file
$type = $_FILES["image"]["type"]; //type of the file
$size = $_FILES["image"]["size"]; //the size of the file
$temp = $_FILES["image"]["tmp_name"];//temporary file location when click upload it temporary stores on the computer and gives it a temporary name
$error =array(); // this an empty array where you can then call on all of the error messages
$allowed_exts = array('jpg', 'jpeg', 'png', 'gif'); // array with the following extension name values
$image_type = array('image/jpg', 'image/jpeg', 'image/png', 'image/gif'); // array with the following image type values
$location = 'images/'; //location of the file or directory where the file will be stored
$appendic_name = "news".$name;//this append the word [news] before the name so the image would be news[nameofimage].gif

// substr counts the number of carachters and then you the specify how how many you letters you want to cut off from the beginning of the word example drivers.jpg it would cut off dri, and would display vers.jpg
//echo $extension = substr($name, 3);

//using both substr and strpos, strpos it will delete anything before the dot in this case it finds the dot on the $name file deletes and + 1 says read after the last letter you delete because you want to display the letters after the dot. if remove the +1 it will display .gif which what we want is just gif
$extension = strtolower(substr($name, strpos ($name, '.') +1));//strlower turn the extension non capital in case extension is capital example JPG will strtolower will make jpg
// another way of doing is with explode
// $image_ext strtolower(end(explode('.',$name))); will explode from where you want in this case from the dot adn end will display from the end after the explode

$myfile = $_POST["myfile"];

     if (isset($image)) // if you choose a file name do the if bellow
       {
       
       // if extension is not equal to any of the variables in the array $allowed_exts error appears
        if(in_array($extension, $allowed_exts) === false )
       {
         $error[] = 'Extension not allowed! gif, jpg, jpeg, png only<br />'; // if no errror read next if line
       }
        // if file type is not equal to any of the variables in array $image_type error appears
        if(in_array($type, $image_type) === false)
       {
          $error[] = 'Type of file not allowed! only images allowed<br />';     
       }
       
        // if file bigger than the number bellow error message
        if($size > 2097152)
       {
          $error[] = 'File size must be under 2MB!';     
       }
       
       // check if  folder exist in the server
        if(!file_exists ($location))
       {
          $error[] = 'No directory ' . $location. ' on the server Please create a folder ' .$location;     
       }
            
     }
     // if no error found do the move upload function
       if (empty($error)){
           if (move_uploaded_file($temp, $location .$appendic_name))
           {
             // insert data into database first are the field name teh values are the variables you want to insert into those fields appendic is the new name of the image
mysql_query("INSERT INTO image (myfile ,image)
 VALUES ('$myfile', '$appendic_name')") ;
           exit();
           }
         }
       else
          {
        foreach ($error as $error)
           {
               echo $error;
           }
        }
      
     
  
//echo $type;
?>

I'm having trouble echoing $year in my script. Listed below is the script, just below ,$result = mysql_query("SELECT * FROM $dbname WHERE class LIKE '%$search%'") or die(mysql_error());, in the script I try to echo $year. It doesn't show up in the table on the webpage. Everything else works fine. Any help wold be appreciated greatly. Thanks in advance.



<?php
include 'config2.php';

$search=$_GET["search"];

// Connect to server and select database.
mysql_connect($dbhost, $dbuser, $dbpass)or die("cannot connect");
mysql_select_db("vetman")or die("cannot select DB");


$result = mysql_query("SELECT * FROM $dbname WHERE class LIKE '%$search%'") or die(mysql_error());
// store the record of the "" table into $row
//$current = '';
echo "<table align=center border=1>";
echo "<br>";
echo "<tr>";
echo "<td align=center>";
?>
<div style="float: center;"><a><h1><?php echo $year; ?></h1></a></div>


<?php
echo "</td>";
echo "</tr>";
echo "</table>";


// keeps getting the next row until there are no more to get
if($result && mysql_num_rows($result) > 0)

{
    $i = 0;
    $max_columns = 2;
    echo "<table align=center>";
echo "<br>";
    while($row = mysql_fetch_array($result))
   {
       // make the variables easy to deal with
       extract($row);

       // open row if counter is zero
       if($i == 0)

          echo "<tr>";

          echo "<td align=center>";
          ?>
          <div style="float: left;">
          <div><img src="<?php echo $image1; ?>"></div>

  </div>


          <?php
          echo "</td>";

       // increment counter - if counter = max columns, reset counter and close row
       if(++$i == $max_columns)
       {
           echo "</tr>";
           $i=0;
       }  // end if
   } // end while
} // end if results

// clean up table - makes your code valid!
if($i > 0)
{
    for($j=$i; $j<$max_columns;$j++)
        echo "<td>&nbsp;</td>";
   echo '</tr>';
}
mysql_close();
 ?>
</table>

Hello,

I stored a fsockopen function in a separate "called.php" file, in order to run it as another thread when it needs.
The called script should return results to the "master.php" script.
I'm able to run the script to get the socket working, and I'm able to get results from the called script. I tried for hours but I can't do the twice both 

My master.php script (with socket working):

Code: [Select]
<?php
$command = "(/mnt/opt/www/called.php $_SERVER[REMOTE_ADDR] &) > /dev/null";
$result = exec($command);
echo ("result = $result\r\n");
?>

and my called.php script
Code: [Select]
#!/mnt/opt/usr/bin/php-cli -q
<?php
$device = $_SERVER['argv'][1];
$port = "8080";
$fp = fsockopen($device, $port, $errno, $errstr, 5);
fwrite($fp, "test");
fclose($fp);
echo ("normal end of the called.php script");
?>

In the master script, if I use
Code: [Select]
$command = "(/mnt/opt/www/called.php $_SERVER[REMOTE_ADDR] &) > /dev/null";
the socket works, but I have nothing in $result
(note also that I don't anderstand why the ( ... &) are needed!?)

and if I use
Code: [Select]
$command = "/mnt/opt/www/called.php $_SERVER[REMOTE_ADDR]";
I have the correct text "normal end of the called.php script" in $result but the socket connection is not performed (no errors in php logs)

Could you help me to find a way to let's work the two features correctly together?
Thank you.

I'm trying to use this script known as SimpleImage.php that can be found here <a href="http://www.white-hat-web-design.co.uk/articles/php-image-resizing.php">link</a> I'm trying to include what is on the bottom of the page to my existing script can anyone help me I've tried several ways but its not working.
Code: [Select]
<?php 
session_start();
error_reporting(E_ALL);
ini_set('display_errors','On');

//error_reporting(E_ALL); 


// image upload folder
    $image_folder = 'images/classified/'; 
// fieldnames in form
$all_file_fields = array('image1', 'image2' ,'image3', 'image4');
// allowed filetypes
$file_types = array('jpg','gif','png');
// max filesize 5mb
$max_size = 5000000;
//echo'<pre>';print_r($_FILES);exit;

$time = time();
$count = 1;

foreach($all_file_fields as $fieldname){ 
if($_FILES[$fieldname]['name'] != ''){

$type = substr($_FILES[$fieldname]['name'], -3, 3);

// check filetype
if(in_array(strtolower($type), $file_types)){

//check filesize
if($_FILES[$fieldname]['size']>$max_size){
$error = "File too big. Max filesize is ".$max_size." MB";

}else{

// new filename
$filename = str_replace(' ','',$myusername).'_'.$time.'_'.$count.'.'.$type;

// move/upload file
$target_path = $image_folder.basename($filename);
move_uploaded_file($_FILES[$fieldname]['tmp_name'], $target_path);

//save array with filenames
$images[$count] = $image_folder.$filename;
$count = $count+1;

}//end if

}else{ $error = "Please use jpg, gif, png files";

}//end if
}//end if
}//end foreach



if($error != ''){ echo $error;
}else{


/* --------------------------------------------------------------------------------------------------
SAVE TO DATABASE ------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------- */
?>

hey guys im really just after a bit of help/information on 2 things (hope its in the right forum).   1. basically I'm wanting to make payments from one account to another online...like paypal does...im wondering what I would need to do to be able to do this if anyone can shine some light please?   2.as seen on google you type in a query in the search bar and it generates sentences/keywords from a database   example:   so if product "chair" was in the database whilst typing "ch" it would show "chair" for a possible match   I know it would in tale sql & json but im after a good tutorial/script of some sort.   if anyone can help with some information/sites it would be much appreciated.   Thank you

Well the subject line is pretty explicit.  I found this script that uploads a picture onto a folder on the server called images, then inserts the the path of the image on the images folder onto a VACHAR field in a database table. 
Code: [Select]




<?php

//This file inserts the main image into the images table.

//address error handling

ini_set ('display_errors', 1);
error_reporting (E_ALL & ~E_NOTICE);





//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

//Check whether the session variable id is present or not. If not, deny access.
if(!isset($_SESSION['id']) || (trim($_SESSION['id']) == '')) {
header("location: access_denied.php");
exit();
}

        else{ 







// Check to see if the type of file uploaded is a valid image type

function is_valid_type($file)

{

     // This is an array that holds all the valid image MIME types

     $valid_types = array("image/jpg", "image/jpeg", "image/bmp", "image/gif");

 

     if (in_array($file['type'], $valid_types))

         return 1;

     return 0;

}

 

// Just a short function that prints out the contents of an array in a manner that's easy to read

// I used this function during debugging but it serves no purpose at run time for this example

function showContents($array)

{

     echo "<pre>";

     print_r($array);

     echo "</pre>";

}

 

// Set some constants

 

// This variable is the path to the image folder where all the images are going to be stored

// Note that there is a trailing forward slash

$TARGET_PATH = "images/";

 

// Get our POSTed variable

$image = $_FILES['image'];

 

// Sanitize our input

$image['name'] = mysql_real_escape_string($image['name']);

 

// Build our target path full string.  This is where the file will be moved to

// i.e.  images/picture.jpg

$TARGET_PATH .= $image['name'];

 

// Make sure all the fields from the form have inputs

if ( $image['name'] == "" )

{

     $_SESSION['error'] = "All fields are required";

     header("Location: member.php");

     exit;

}

 

// Check to make sure that our file is actually an image

// You check the file type instead of the extension because the extension can easily be faked

if (!is_valid_type($image))

{

     $_SESSION['error'] = "You must upload a jpeg, gif, or bmp";

     header("Location: member.php");

     exit;

}

 

// Here we check to see if a file with that name already exists

// You could get past filename problems by appending a timestamp to the filename and then continuing

if (file_exists($TARGET_PATH))

{

     $_SESSION['error'] = "A file with that name already exists";

     header("Location: member.php");

     exit;

}

 

// Lets attempt to move the file from its temporary directory to its new home

if (move_uploaded_file($image['tmp_name'], $TARGET_PATH))

{

     // NOTE: This is where a lot of people make mistakes.

     // We are *not* putting the image into the database; we are putting a reference to the file's location on the server

     $sql = "insert into images (member_id, image_cartegory, image_date, image) values ('{$_SESSION['id']}', 'main', NOW(), '" . $image['name'] . "')";

     $result = mysql_query($sql) or die ("Could not insert data into DB: " . mysql_error());

     header("Location: images.php");

echo "File uploaded";

     exit;

}

else

{

     // A common cause of file moving failures is because of bad permissions on the directory attempting to be written to

     // Make sure you chmod the directory to be writeable

     $_SESSION['error'] = "Could not upload file.  Check read/write persmissions on the directory";

     header("Location: member.php");

     exit;

}







        } //End of if session variable id is not present.
 


?> 


The script seems to work fine because I managed to upload a picture which was successfully inserted into my images folder and into the database.
Now the problem is, I can't figure out exactly how to write the script that displays the image on an html page. I used the following script which didn't work.


Code: [Select]

//authenticate user
//Start session
session_start();

       
        //Connect to database
require ('config.php');

$sql = mysql_query("SELECT* FROM images WHERE member_id = '".$_SESSION['id']."' AND image_cartegory = 'main' ");
$row = mysql_fetch_assoc($sql);
$imagebytes = $row['image'];
header("Content-type: image/jpeg");
print $imagebytes;







Seems to me like I need to alter some variables to match the variables used in the insert script, just can't figure out which.  Can anyone help??

How would I go about making it to where,, I can tell the script to use a certain extension of php in the script like curl.. ?

Thanks

I have an application which runs on more than one server and need to launch one PHP script from another PHP script.  Since this is different than a function call I'm not sure how it's done.  I plan to include parameters in the URL I send and use GETs to pick up parameters in the "called" PHP script.

Thanks for sugestions

Hi,

I am trying to run two scripts on one page.  When I use just one script on the page they work however when I place both scripts on the same page one of them disrupts the other script.

This script prevents the other following script from working:

Code: [Select]
ini_set('display_errors', 1);
error_reporting(-1);

{
$query = "SELECT * FROM answers ORDER BY `aid` DESC LIMIT 0, 11";
}

$result = mysql_query($query);

while($row = mysql_fetch_assoc($result))

{

$answer = $row['answer'];
$aid = $row['aid'];

echo "
<div class='questionboxquestion'>
<a href= 'http://www.domain.co.uk/test/easy/answer.php?aid=$aid' class='questionlink'>$answer</a>
</div>
<div class='questionboxnotes'>
</br>
</div>
<div class='questionboxlinks'>
<div class='questionboxcategory'>
<div class='questionboxcategorytitle'>
Category:
</div>
 <a href= 'http://www.domain.co.uk/test/easy/furniture-category.php' class='questionanswerlink'></a>
</div>
<div class='questionboxanswerlink'>
<a href= 'http://www.domain.co.uk/test/oeasy/index.php' class='questionanswerlink'>Answer</a>
</div>
</div>
";
}
Code: [Select]
    <?php if($error) echo "<span style=\"color:#ff0000;\">".$error."</span><br /><br />"; ?>
    <label for="username">Username: </label> <input type="text" name="username" value="<?php if($_POST['username']) echo $_POST['username']; ?>" /><br />
    <label for="password">Password: </label> <input type="password" name="password" value="<?php if($_POST['password']) echo $_POST['password']; ?>" /><br />
    <label for="password2">Retype Password: </label> <input type="password" name="password2" value="<?php if($_POST['password2']) echo $_POST['password2']; ?>" /><br />
    <label for="email">Email: </label> <input type="text" name="email" value="<?php if($_POST['email']) echo $_POST['email']; ?>" /><br /><br />
    <input type="submit" name="submit" value="Register" />