PHP - Need Help With Storage System

Hey guys,

I'm trying to build a simple 'blogging engine' as a fun side project. At the moment i'm mainly having trouble with 2 things -

1. What is the best way that the administrator can input the data (with linebreaks, etc) and then have it stored in the database with this formatting so that when it is called from the database, it shows up the same on the page?

2. How do i go about selecting only certain posts from the database? I have tried doing a /post.php?id=12 and then an SQL statement "WHERE post_id=" . $id (in the correct formatting, of course) but this didnt seem to work.


Any help would be appreciated.

-CynePhoba

after authenticating username and password,i have a parameter like:
$_SESSION['logged']=1

should i be storing this as a cookie?..if yes, then can anyone modify cookie, to have this parameter as "1", and gain access?

hello dear PHP-Fans - greetings to you - and a happy new year!!


i set up a WAMP-System on my openSuse 11.4 system.  In order to learn as much as i can bout PHP i want to do some tests and write some scripts.

Well the WAMP is allready up and running.  Now i try to give the writing access to the folder

mkdir /srv/www/

where the php-scripts should go in...

i want  to give write permission to all to all files in /srv/www

As root I generally:

mkdir /srv/www/
chown <webmaster usrername> /srv/www/

/srv/www/ should be readable and traversable by all, but only writeable by it's owner (the user designated as the webmaster.)

can i do this like mentioned above,...

Love to hear from you

greetings
db1

  Hi this is my login script i do have the html if you need to see it please ask & i was wondering if anyone would be kind enough to tell me how i can get my ban system to work Thanks

<?php

require 'connect.php';

if(isset($_POST['submit'])) {

	$username = $_POST['username'];
	$password = $_POST['password'];

	//Prevent hackers from using SQL Injection
	$username = stripslashes($username);
	$password = stripslashes($password);
	$username = mysql_real_escape_string($username);
	$password = mysql_real_escape_string($password);

	$sql = "SELECT * FROM $tbl_name WHERE username='$username' AND password='$password'";
	$result = mysql_query($sql);
	$count = mysql_num_rows($result);

	$user_level = $_GET['user_level'];

	$_SESSION['user_level'] = $user_level;

	if($count == 1) {

		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: index.php");
	} else {

		echo "Please check the username and password you entered is correct.";
	} if($_SESSION['user_level'] == 0) {
		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: index.php");
		
	} else if($_SESSION['user_level'] == -1) {

		die();
		header("Location: banned.php");

	} else if($_SESSION['user_level'] < -1) {
		die();
		echo "An error has occurred please contact your administrator.";

	} else if($_SESSION['user_level'] == 1) {
		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: admin.php");

	}


}

?>

Edited by Tom8001, 23 November 2014 - 12:18 PM.

Hi all

I have been looking though loads of tutorials regarding log in method for websites (not APIs), and cant help find that they are outdated.

So I am asking what is the correct way to create a log in system using php?

Modern websites use JavaScript for asynchronous web requests so this requirement should also be catered for. APIs and mobile apps use access tokens which is very secure if implemented correctly.

Can we use the token principle for websites? As the way I see it that most php log in systems use php sessions and they create a session and save some data in this session when the user successfully authenticates, however the session id is held in a cookie so if the cookie is stolen then they have access to your account.

API access tokens are expired and refreshed periodically so is there such a implementation method for web sites too?

i am trying to add a like system to my forum similar to facebook where it shows how many people like a post.

this is my code so far:

$like_list = "";
            
            $likes = explode("|", $post_info['post_likes']);
            $amount_likes = count($likes);
            $ac_likes = ($amount_likes / 2);
            $slice = array_slice($likes, 0, 4, true);
            $remain = array_slice($likes, 4, $ac_likes, true);
            $remain_num = count($remain);
            
            if ($ac_likes >= 4)
            {
                for($i=0; $i<$ac_likes; $i+=2)
                {
                    $like_list .= $likes[$i].", ";
                }
                $like_list .= " and $remain_num others like this";
            }
            elseif ($amount_likes == 1    )
            {
                $like_list .= "0 people like this";
            }
            elseif ($ac_likes == 1)
            {
                $like_list = implode(", ", $likes);
                $like_list .= " likes this";
            }
            else
            {
                $like_list = implode(", ", $likes);
                $like_list .= " like this";
            }

$post_info['post_likes'] contains data like:

Code: [Select]
user1|123456789|user2|123456789
where the number is the timestamp.

unfortunatly $like_list prints the username and the timestamp when i would like it to only display the username. This means
printing every 2nd element in the array starting from 0. I have seen this done with for loops but i am not using one therefore i am stuck. Any ideas? and is this the best database setup for likes? the post_likes column is added on to the end of the post table.

Hi, i have been thinking on ways to make an ordering system for my web site.

The code bellow shows how i populate the page. i desplay the pizza's from the data base. i want at the end of each line a box thati allows the user to pick howmany pizzas they want. from they when they click order i want it to send all the information of what they want so they can double check it and when they click the final order button it will send to a diffrent order table.

Code: [Select]
<?
session_start();

if ($_SESSION['userName'])

{}

else
{
header('location:../index.php');
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Deliver-Pizza Topping</title>
<link href="css/pizza-topping.css"  rel="stylesheet" type="text/css" />

</head>

<body>

<div id="container">

     <div id="header">
    <img src="images/logo.jpg" alt="logo" />
       
        <a href="log-off.php" id="logg-off" >log off</a>
       
    <ul id="nav">
    <li><a href="home.php" target="_self">Home</a></li> <span> | </span>
    <li><a href="Pizza-Topping.php" target="_self">Pizza Topping</a></li> <span> | </span>
    <li><a href="order.php" target="_self">Order</a></li> <span> | </span>
        <li><a href="Account.php" target="_self">Account Details</a></li> <span> | </span>
       </ul>
</div>
   
<div id="Featured">
<img src="images/banner1.jpg" alt="banner" name="banner"" ID="banner"></div><!--end Featured-->
<div class="featuredimage" id="main">
<div id="content" class="tiles">
    <h1>Pizza-Topping</h1><hr />
    <p>Please select the pizza you would like bellow</p>
   
    <div id ="staff"><div style="width:970px; height:300px; overflow:auto"

<left> <table>
<tr>
<th>Type</th>
<th>Size</th>
<th>Topping</th>
<th>Cost</th>
<th>Information</th>
<th>Order</th>
</tr>
<tr>
<form name="input" action="order.php" method="post">
<?php


mysql_connect("localhost", "root", "")or die("cannot connect"); 
    mysql_select_db("deliverpizza")or die("cannot select DB");

$sql="SELECT * FROM `pizzatopping` ";
$result= mysql_query($sql);

while($row =mysql_fetch_assoc($result)) {

?>

<td><?php echo $row['type'] ?></td>
<td><?php echo $row['size'] ?></td>
<td><?php echo $row['topping'] ?></td>
<td><?php echo $row['cost'] ?></td>
<td><?php echo $row['info'] ?></td>
<td>


<input type:"text" name:"pizza<?php echo $row['id'] ?>" /></td>


</tr></left>
<?php
}
?>
<input type="submit" value="Order" />
</table>
</div>
</div>
   
</div>
</div>
<!--end content-->

<div id="footer"><span><p>Created By Ryan Williams</p></span></div><!--end footer-->
</div><!--end container-->




</body>
</html>

Help please

Good Afternoon everyone.

I am having some problems in getting a script I found on a forum to work, I have tried contacting the original author but with no joy.

Basically its a php/ajax comment system, however I am getting these errors

Code: [Select]
Notice: Undefined index: type in C:\wamp\www\buy2earn\viewm.php on line 93

Notice: Undefined index: type in C:\wamp\www\buy2earn\viewm.php on line 105
Here is the portion of code that I am working on, I don't understand what $_post['type'] is meant to come from? I guess its basically if the form has been submitted, but if I change the values tp 'submit' I still get the same result, just with the message submit is undefined instead!


<?php 
$date=date("Y-m-d"); 
$username = $_SESSION['username'];

if($_POST['type'] == "addcomment") {
    $username = mysql_real_escape_string($_POST['username']);
    $comment = mysql_real_escape_string($_POST['comment']);
    
    if($username == "" || $comment == "") { 
        die("<p><font color='red'>Error: Please include a message.</font></p>"); 
    }
    $q1 = mysql_query("INSERT INTO 'comments' ('c_id', 'm_id', 'username', 'date', 'comment')
VALUES ('', '$m_id', '$username', '$date', '$comment')")
 or die("<p>Mysql Error: <b>".mysql_error()."</b></p>");
 
    echo "<p><font color='green'>Comment added successfully.</font></p>";
} elseif($_POST['type'] == "getcomments") { 
    $q1 = mysql_query("SELECT * FROM 'comments'");
    $n1 = mysql_num_rows($q1);
    if($n1 == 0) { 
        die("<p><font color='red'>No comments were found.</font></p>");
    }
    echo "<table border=1>";
    echo "<tr><td><b>User</b></td><td><b>Comment</b></td></tr>";
    while($r1 = mysql_fetch_assoc($q1)) { 
        $a = $r1['username'];
        $m = $r1['comment'];
        echo "<tr><td>$a</td><td>$m</td></tr>";
    }
    echo "</table>";
} else {?>
    <div style="font-size: 18px;">
        <p>Current Comments: </p>
        <div id="comments"></div> 
        <hr />
        <p>Add a comment:</p>
        <form action="<?php $_SERVER['PHP_SELF'];?>" method="post">
            <p>Username: <input type="text" name="username" id="username" /></p>
            <p>Comment: <textarea name="message" cols="50" rows="10" id="message"></textarea></p>
            <p><input type="submit" name="submit" value="Add Comment" id="submit" /></p>
        </form>
        <div id="return"></div> 
    </div>
    

<?php } ?>
    

Many Thanks for any help

i am making a private messaging system like hotmails where the message list appears on the left. Then when you click on one of them the box on the right loads the email. The problem is i dont really know how to go about it. Anyone have any pointers?

Hi, im getting alot of errors like so Deprecated: Function session_is_registered() is deprecated

time to update some files, can you guys pls help im rubbish with PHP guess thats why I waited so long to update.

here is the code I need to change
checklogin.php

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword");
header("location:index.php");
}


index.php
<?
session_start();
/*if(!session_is_registered(myusername)){
header("location:main_login.php");
}*/
?>

index.php (display username stuff)
<?php if(session_is_registered(myusername)){ ?>&nbsp;&nbsp; Welcome: <?= $_SESSION['myusername'] ?><?php } ?>

index.php (edit content stuff)
<?php $file = file_get_contents('content/menu_header_a.txt', 'r');  if(session_is_registered(myusername)){ ?><a href="javascript:open4()"><?php echo $file ?></a><?php } else { echo $file; }?>

Many thanks for any and all your help with this one.

if you could keep it simple please like  ( replace this with this ) . thanks

Hello,
       Basically i am following this tutorial -: http://tutorialzine.com/2010/06/simple-ajax-commenting-system/ for a website I am creating. But in that tutorial when you write a comment you add a name, I was wondering is it possible instead for my website to use the users username as I have a login system that I created from folowing a tutorial on the same site. I am new to PHP and web creation so please keep the comments simple.

First of all hello as I am new to this forum.

Ok so, I am have been trying for the past few days to create a login system in PHP for a website I am creating, and I am having serious problems. I have tryed so many tutorials and they all are not working, my conclusion is they are outdated or not fully understandable.

So what I want to create -
Registration
Forgot password
Login page
Email activation
Member page

My hosting has the latest php and mysql as far as I know so could someone please give me an up to date simple tutorial on creating this.

Lastly the program I am using is Dreamweaver CS5

Thankyou.

Hello,

I have the following code


Code: [Select]
class Uploads extends Controller
{
 public function __construct()
 {
  parent::__construct();

  if (empty($_FILES))
  {
   log_message('error', 'Uploads - files empty');
   exit('No files uploaded');
  }

  ini_set('memory_limit', '128M');

  $this->load->helper('file');
  $this->load->helper('helpers');
  $this->load->model('uploads_model');

 }

 public function font_handler()
 {
  $this->uploads_model->font_handler();
 }

}

class Uploads_model extends Model
{
    public function font_handler()
    {
  $config = array(
   'max_size'     => '8388',
   'allowed_types' => 'ttf',
   'upload_path'   => 'assets/fonts/'
  );

  $this->load->library('upload', $config);

  if ($this->upload->do_upload('Filedata'))
  {
   $file = $this->upload->data();
   $jsFile = $file['raw_name'].'.js';
   $query = $this->db->where('location', 'menuFont')->get('fonts')->row();

   if ($query->customFile != '' && file_exists('assets/fonts/'.$query->customFile))
         {
    unlink('assets/fonts/'.$query->customFile);
   }

   $path    = getcwd() . '/assets/fonts/cufon/convert.php';
   $command = 'php ' . $path . ' -u "U+??" ' . $file['full_path'] . ' 1> ' . getcwd() . '/assets/fonts/' . $jsFile;

   system($command);
  }
 }

}


Ok so, the ttf file is uploaded correctly and I can run $command from the command promt in putty and it works perfect, but when I try to run the same command from system() the js file just contains (from the controller) "No files uploaded" I have no idea why this is happening? Anyone have any ideas?  Also one thing i'm not sure about is if it should be 1> or > when creating the js file?!?


Thanks guys!

Hello there,

Thank you for taking the time to visit my thread. I've been brainstorming for the past few days trying to establish the best method of a content management system. I'm curious since you are all highly advanced PHP coders what you think the best method of content management is I would like it to be presented in the URL in the following method:

file.php?v=example


So please share your ideas remember there is never a stupid suggestion I want to hear all your possibilities please!