PHP - Store The Image Url In The Database Not Just The File In Folder

I have a page using forms to help build listing templates for eBay. I have a folder where I have hundreds of logos stored. I know the logo names but not their extensions. . . . I have to test each potential (jpg, jpeg, gif, png, etc.) until I guess right. Here is an example code for the web form: <form action="extension_test2.php" method="post">
<p>Logo: <input name="e" value="" type="text" size="15" maxlength="30" /><p>
<input name="Submit" type="Submit"/>
</form>   and the form's result: <?

$e =$_POST['e'];

if(!empty($e)) {
echo '<img src="http://www.gbamedica...ebayimg/logos/'.$e.'">';
};

?>   Here is a link to the example: http://www.gbamedica...ension_test.php Use "olympus.jpg" for test. I am looking for code that can determine the file type and dynamically add the extension. Can it be done?

Anyone could help or giude how to secure this script by storing session into database?   login.php

<?php
    //Start session
    session_start();
    
    //Include database connection details
    require_once('config.php');
    
    //Get ip
    function get_client_ip() {
     $ipaddress = '';
     if ($_SERVER['HTTP_CLIENT_IP'])
         $ipaddress = $_SERVER['HTTP_CLIENT_IP'];
     else if($_SERVER['HTTP_X_FORWARDED_FOR'])
         $ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
     else if($_SERVER['HTTP_X_FORWARDED'])
         $ipaddress = $_SERVER['HTTP_X_FORWARDED'];
     else if($_SERVER['HTTP_FORWARDED_FOR'])
         $ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
     else if($_SERVER['HTTP_FORWARDED'])
         $ipaddress = $_SERVER['HTTP_FORWARDED'];
     else if($_SERVER['REMOTE_ADDR'])
         $ipaddress = $_SERVER['REMOTE_ADDR'];
     else
         $ipaddress = 'UNKNOWN';

     return $ipaddress;
}
    
    //Array to store validation errors
    $errmsg_arr = array();
    
    //Validation error flag
    $errflag = false;
    
    //Function to sanitize values received from the form. Prevents SQL injection
    function clean($str) {
        $str = @trim($str);
        if(get_magic_quotes_gpc()) {
            $str = stripslashes($str);
        }
        return mysql_real_escape_string($str);
    }
    
    //Sanitize the POST values
    $login = clean($_POST['login']);
    $password = clean($_POST['password']);
    $ip = get_client_ip();
    
    //Input Validations
    if($login == '') {
        $errmsg_arr[] = 'Login ID missing';
        $errflag = true;
    }
    if($password == '') {
        $errmsg_arr[] = 'Password missing';
        $errflag = true;
    }
/*    if($login != '' || $password != '') {
    if($login !='admin' && $ip !=''.$log_ip.''){
        $errmsg_arr[] = 'Your IP <b>'.$ip.'</b> is not recognized...';
        $errflag = true;
        }
    }    
*/    
    //If there are input validations, redirect back to the login form
    if($errflag) {
        $_SESSION['ERRMSG_ARR'] = $errmsg_arr;
        session_write_close();
        //header("location: index.php");
        echo ('<meta http-equiv="refresh" content="0;url=index.php">');
        exit();
    }
    
    //Create query
    $qry="SELECT * FROM members WHERE login='$login' AND passwd='".$_POST['password']."'";
    $result=mysql_query($qry);
    
    //Check whether the query was successful or not
    if($result) {
        if(mysql_num_rows($result) == 1) {
            //Login Successful
            session_regenerate_id();
            $member = mysql_fetch_assoc($result);
            $_SESSION['SESS_MEMBER_ID'] = $member['member_id'];
            $_SESSION['SESS_LOGIN_NAME'] = $member['login'];
            $_SESSION['SESS_PASS'] = $member['passwd'];
            session_write_close();
            //header("location: member-index.php");
            echo ('<meta http-equiv="refresh" content="0;url=member-index.php">');
            exit();
        }else {
            //Login failed
            //header("location: login-failed.php");
            echo ('<meta http-equiv="refresh" content="0;url=login-failed.php">');
            exit();
        }
    }else {
        die("Query failed");
    }
?>

  auth.php (included on top of all php pages  

<?php
    //Start session
    session_start();
    
    //Check whether the session variable SESS_MEMBER_ID is present or not
    if(!isset($_SESSION['SESS_MEMBER_ID']) || (trim($_SESSION['SESS_MEMBER_ID']) == '')) {
        //header("location: access-denied.php");
        echo ('<meta http-equiv="refresh" content="0;url=access-denied.php">');
        exit();
    }
?>

What is the better way, in terms of best practice and also speed of storing PHP objects in a database? Is it:

Serialize
Code: [Select]
$SQL = "INSERT INTO my_table (my_object) VALUES ('" . seralize($php_object). "')";

OR

JSON
Code: [Select]
$SQL = "INSERT INTO my_table (my_object) VALUES ('" . json_encode($php_object). "')";

Any idea which is faster serialize() / unserialize() or json_ecode() / json_decode()?

I've been doing some research and I was wondering what the best way is to store IP addresses in a MySQL database, and what would be the field type and length?

I've seen that you can use the inet_aton() function but supposedly this doesn't support IPv4. So is there a workaround using these functions?

Alternatively, if I was to just store the IP address as it is, what type of field and length would I be looking at? I've read somewhere that 45 is the max?

Hey guys!,

Any help is greatly appreciated! what i want to do is store a link to a pdf file which will open the file when clicked.

just now when clicked will only open the file name but not with the extension .pdf?


Thanks!

Is there a recommended BEST PRACTICE for storing (and retrieving) telephone numbers from a database table?

Is it best to store (in the USA) the area code separate from the rest of the number?  Remove parenthesis and/or dashes? 

Or is there no reason to concern myself with performance or hacking issues regarding the storage of phone numbers as 323-555-1212 or (323)555-1212 inside my table?

Hi!

So I'm fairly new to PHP, and am currently making a website from scratch including as much PHP functionality as I can for learning purposes. As I have just finished making a blog function, I started to wonder. Is it normal to store every part of a website in a the database? The blog part of the website I just created has of course all the differet blog entries stored in a table in the db, but is it also normal practice to store about, contact etc. in tables too? Or should categories like these be created using brand new .php documents? I am in the progress of making a page controller and thought I should clearify things first, before I go any further.

This question may seem stupid, but I don't know alot about what the normal practices of doing things like these in php are. Anyways, hope someone can help me out!

Hi, I'm trying to store the first+lastname from my mysql user datababase into arrays like this:

// Fill up array with names
$a[]="Anna";
$a[]="Brittany";
$a[]="Cinderella";
$a[]="Diana";
$a[]="Eva";
$a[]="Fiona";
$a[]="Gunda";
$a[]="Hege";
$a[]="Inga";
$a[]="Johanna";
$a[]="Kitty";
$a[]="Linda";
$a[]="Nina";
$a[]="Ophelia";
$a[]="Petunia";
$a[]="Amanda";
$a[]="Raquel";
$a[]="Cindy";
$a[]="Doris";
$a[]="Eve";
$a[]="Evita";
$a[]="Sunniva";
$a[]="Tove";
$a[]="Unni";
$a[]="Violet";

Hi,

my goal is to be able to create a web based interface for someone who has no programming skills or interest to be able to maintain a list of usernames and passwords for protecting a page of links on a website.

so, I've created a page that can write to a database, and I can see that it is working, I can read entries, etc.

now, I need to know how to make a script that will check against that database for valid UN/PW combinations.

what is the best method for this?

James

I am building a project that requires I store query strings in a table (stage_reqs) which are called to determine permissions. These strings will look something like this:

Code: [Select]
select salesman from jobs where salesman is not NULL and job_id='".$this->job_id."' limit 1
The variable value needs to be determined from within the function it is being accessed in. Can I use eval to do this?

Thanks,
Chris

Hi Guys,
            I have been contacted by a client who wants me to develop an application which performs the following functionality:

Lets say the domain name is xyz.com . We provide an email of our domain to the person who signup on our website for our services. Lets say the email that is given to the customer is email@xyz.com

The client wants to built PHP application in which if an email is sent to email@xyz.com it gets downloaded and is stored in the MySql Database. After the download there is going to be a set of algorithms which will decided whether to forward this email to the client or not on his email address.

I have no idea how to accomplish this functionality. Any suggestions would be appreciated.

Thanks

Sadan Masroor.

Hi,

I'm building a webshop and im stuck at the checkout.

I'm using this Shopping Cart class http://www.webforcecart.com/manual.html
The cart is stored as an object in $_SESSION[cart].

This method
Code: [Select]
print_r($cart->get_contents());would get this as output:
Array ( => Array ( [id] => 7 [qty] => 1 [price] => 11.00 [info] => Test [subtotal] => 11 ) [1] => Array ( [id] => 6 [qty] => 2 [price] => 19.00 [info] => White 0 [subtotal] => 38 ) )


In the table Order I would like to store
order-id
customer-id
total products
total quantity
total price
date

In the table Orderrow I would like to sto
order-id,
product-id,
product-name,
quantity,
price,
subtotal

I know i can get the order-id with the function mysql_insert_id() but how can i store each product in the array with their info in the table Orderrow?
Or is there a better way to do this? please advice me, thank you.

Hello people,
I have created an application in Code Charge where my site users can login and play games online.The game code is run via flash and html. The Game has 5 stages and from a page in my application called transfertogame.php , i transfer them to the game page. Now i want to be able to track each players progress via database so that when they log back in and they get to the transfertogame.php page, it can check the page they were on before and immediately take them to the page without starting from page 1. Any help will be appreciated as i am very poor with php scripting
This is the session ID i guess is being used from my application page

//Initialize Method @4-537EA73F
function Initialize()
{

if(!$this->Visible)
return;

$this->ds->Parameters["sesUserID"] = CCGetSession("UserID");
}
//End Initialize Method

//Validate Method @4-7E1FC38C
function Validate()
{
$Validation = true;
$Where = "";
$this->CCSEventResult = CCGetEvent($this->CCSEvents, "OnValidate");
return (($this->Errors->Count() == 0) && $Validation);
}
//End Validate Method

Hi,

I have this form which will create a checkbox list using data from my database and also determin if a checkbox had been checked before and check if it had.

<form style="text-align:center" name="PrefRestaurant" id="PrefRestaurant" action="preferances_check.php" method="post"><table align="center"> <?php checkbox(id, name, restaurants, id); ?></table>
<input type="submit" name="Prefer" id="Prefer" value="Επιλογή"/></form>
   
function checkbox($intIdField, $strNameField, $strTableName, $strOrderField, $strMethod="asc") {
$strQuery = "select $intIdField, $strNameField
               from $strTableName
               order by $strOrderField $strMethod";
    $rsrcResult = mysql_query($strQuery);


while ($arrayRow = mysql_fetch_assoc($rsrcResult)) {
$testqry = "SELECT * FROM user_restaurant WHERE user_id = $_SESSION[UserId] AND restaurant_id = $arrayRow[id]";
$rsltestqry = mysql_query($testqry);
$numrows = mysql_num_rows($rsltestqry);
if ($numrows == 1) {
echo "<tr align=\"left\"><td><input type=\"checkbox\" name=\"restaurant[]\" value=\"$arrayRow[id]\" checked/>$arrayRow[name]</td></tr>";
}
else{
echo "<tr align=\"left\"><td><input type=\"checkbox\" name=\"restaurant[]\" value=\"$arrayRow[id]\" />$arrayRow[name]</td></tr>";
}
}

}      


Now the part which I can't get to work is when I'm trying to store the new values in my database. When I click the submit button I clear my database of any row that is related to the currently loggedin user and I want to store his new preferences (checked cheboxes). I've read that only the cheked checkboxes' values are POSTed so I did this (preferances_check.php)

foreach($_POST['restaurant']  as  $value)  {
 
 $query="INSERT INTO user_restaurant VALUES ('$_SESSION[UserId]','$value')";
 
} 

But it is not working, nothing gets written in my table Could someone please enlighten me on this? Thnks!

I have a form on which the filepond plugin send the file manually
 and it generate the base64 formated data of that file, unfortunately
Icant get it's previous name so i randomize the name, and put the file directry in the final folder, is there any problem on security?, can i validate if its an image with all property such as size,dimension e.t.c Before adding it the directory? and how to get the it's
new name to database.

 

Look here

if(empty($_POST['image'])) {
    echo 'add file!';
}
$myimage = $_POST['image'];
$myimage = str_replace('data:image/png;base64,', '', $myimage);
$myimage = str_replace(' ', '+', $myimage);
$decode = base64_decode($myimage);
$myfile = $_SERVER['DOCUMENT_ROOT'].'/mages/' . uniqid() . '.png';
//now put the file
file_put_contents($myfile, $decode);