PHP - Inventory Script/database

I have items in my DB as inventory.  The table has 2 main fields for this, a total inventory # (per item), and a "remaining" field that will count down as the item is ordered.  My problem is keeping track of the "remaining" number.  There are two ways on the web page a user can change the # of an item they want, by entering a number in a form field which they can only enter a number up to the current # of items left at the time they load the page, and by using up and down arrows.  Each click of the arrow is an addition or deduction of 1 item.  In this case, I can keep track of how many are left, because I know it is always +1 or -1.  The issue is with the manually entered field.  For example, if item1 has 5 left, and a user types in 3, I can easily just subtract 3 from the inventory, and get 2.  But, if the user then types in 4 for item1, I do not know that the last value they entered was 3, to get the difference of 1, and subtract 1 more from inventory, nor do I know that when they first started, there were 5 left, and subtract 4 to get 1.  This gets even more confusing if there are 2 users trying to get the same item...

This must be a common thing, but again, I cannot get it figured out...

In advance, thank you to all who have replied and helped on my other posts lately.  These questions all revolve around the same site I am building, and have maybe bit off more than I can chew at a reasonable pace...

Pete

Hi, i'm basically having problems with this code, its for a newsletter script which added the email address into a file, i'm trying to convert it to work with mysql but having a few problems;

I've edited the last bit, the code just basically doesn't add it to the database even though i thought i had done it right...

any help is very much appreciated!

If email is not valid the script is letting me know; if email is valid it says "already added to the list" no matter what.

old script
<?php
/** BY WebResourcesDepot - http://www.webresourcesdepot.com*/
/** YOU CAN EDIT HERE*/
$newsletterFileName = "file.txt";

/** IMPORTANT: EDIT BELOW UNLESS YOU KNOW WHAT YOU ARE DOING*/
function GetField($input) {
    $input=strip_tags($input);
    $input=str_replace("<","<",$input);
    $input=str_replace(">",">",$input);
    $input=str_replace("#","%23",$input);
    $input=str_replace("'","`",$input);
    $input=str_replace(";","%3B",$input);
    $input=str_replace("script","",$input);
    $input=str_replace("%3c","",$input);
    $input=str_replace("%3e","",$input);
    $input=trim($input);
    return $input;
} 



/**Validate an email address.
Provide email address (raw input)
Returns true if the email address has the email 
address format and the domain exists.
*/
function validEmail($email)
{
   $isValid = true;
   $atIndex = strrpos($email, "@");
   if (is_bool($atIndex) && !$atIndex)
   {
      $isValid = false;
   }
   else
   {
      $domain = substr($email, $atIndex+1);
      $local = substr($email, 0, $atIndex);
      $localLen = strlen($local);
      $domainLen = strlen($domain);
      if ($localLen < 1 || $localLen > 64)
      {
         // local part length exceeded
         $isValid = false;
      }
      else if ($domainLen < 1 || $domainLen > 255)
      {
         // domain part length exceeded
         $isValid = false;
      }
      else if ($local[0] == '.' || $local[$localLen-1] == '.')
      {
         // local part starts or ends with '.'
         $isValid = false;
      }
      else if (preg_match('/\\.\\./', $local))
      {
         // local part has two consecutive dots
         $isValid = false;
      }
      else if (!preg_match('/^[A-Za-z0-9\\-\\.]+$/', $domain))
      {
         // character not valid in domain part
         $isValid = false;
      }
      else if (preg_match('/\\.\\./', $domain))
      {
         // domain part has two consecutive dots
         $isValid = false;
      }
      else if
(!preg_match('/^(\\\\.|[A-Za-z0-9!#%&`_=\\/$\'*+?^{}|~.-])+$/',
                 str_replace("\\\\","",$local)))
      {
         // character not valid in local part unless 
         // local part is quoted
         if (!preg_match('/^"(\\\\"|[^"])+"$/',
             str_replace("\\\\","",$local)))
         {
            $isValid = false;
         }
      }
   }
   return $isValid;
}


$email  = GetField($_GET['email']);
$pass  = validEmail($email);

if ($pass) {
$f = fopen($newsletterFileName, 'a+');
$read = fread($f,filesize($newsletterFileName));
If (strstr($read,"@")) {
$delimiter = ";";
}
if (strstr($read,$email)) { 
echo 3;
} else {
fwrite($f, $delimiter . $email);
echo 1;
}
fclose($f);
} else {
echo 2;
}
?>

edited script
<?php
/** BY WebResourcesDepot - http://www.webresourcesdepot.com*/
/** YOU CAN EDIT HERE*/
$newsletterFileName = "file.txt";

/** IMPORTANT: EDIT BELOW UNLESS YOU KNOW WHAT YOU ARE DOING*/
function GetField($input) {
    $input=strip_tags($input);
    $input=str_replace("<","<",$input);
    $input=str_replace(">",">",$input);
    $input=str_replace("#","%23",$input);
    $input=str_replace("'","`",$input);
    $input=str_replace(";","%3B",$input);
    $input=str_replace("script","",$input);
    $input=str_replace("%3c","",$input);
    $input=str_replace("%3e","",$input);
    $input=trim($input);
    return $input;
} 



/**Validate an email address.
Provide email address (raw input)
Returns true if the email address has the email 
address format and the domain exists.
*/
function validEmail($email)
{
   $isValid = true;
   $atIndex = strrpos($email, "@");
   if (is_bool($atIndex) && !$atIndex)
   {
      $isValid = false;
   }
   else
   {
      $domain = substr($email, $atIndex+1);
      $local = substr($email, 0, $atIndex);
      $localLen = strlen($local);
      $domainLen = strlen($domain);
      if ($localLen < 1 || $localLen > 64)
      {
         // local part length exceeded
         $isValid = false;
      }
      else if ($domainLen < 1 || $domainLen > 255)
      {
         // domain part length exceeded
         $isValid = false;
      }
      else if ($local[0] == '.' || $local[$localLen-1] == '.')
      {
         // local part starts or ends with '.'
         $isValid = false;
      }
      else if (preg_match('/\\.\\./', $local))
      {
         // local part has two consecutive dots
         $isValid = false;
      }
      else if (!preg_match('/^[A-Za-z0-9\\-\\.]+$/', $domain))
      {
         // character not valid in domain part
         $isValid = false;
      }
      else if (preg_match('/\\.\\./', $domain))
      {
         // domain part has two consecutive dots
         $isValid = false;
      }
      else if
(!preg_match('/^(\\\\.|[A-Za-z0-9!#%&`_=\\/$\'*+?^{}|~.-])+$/',
                 str_replace("\\\\","",$local)))
      {
         // character not valid in local part unless 
         // local part is quoted
         if (!preg_match('/^"(\\\\"|[^"])+"$/',
             str_replace("\\\\","",$local)))
         {
            $isValid = false;
         }
      }
   }
   return $isValid;
}


$email  = GetField($_GET['email']);
$pass  = validEmail($email);

if ($pass) {

$user_name = "_db";
$password = "";
$database = "_db";
$server = "localhost";
$db_handle = mysql_connect($server, $user_name, $password);
$db_found = mysql_select_db($database,  $db_handle);
if ($db_found) {
$SQL2 = "SELECT * FROM newsletter WHERE email = '$_GET[email]'";
$result = mysql_query($SQL2);
mysql_close($db_handle); }

if (strstr($SQL2,$email)) { 
echo 3;
} else {
$user_name = "_db";
$password = "";
$database = "_db";
$server = "localhost";
$db_handle = mysql_connect($server, $user_name, $password);
$db_found = mysql_select_db($database,  $db_handle);
if ($db_found) {
$SQL = "INSERT INTO newsletter (email,subscribed) VALUES ('$_GET[email]',1)";
$result = mysql_query($SQL);
mysql_close($db_handle);}
echo 1;
} } else {
echo 2;
}
?>

Hey, sorry I'm a newb so prepare for me to do everything wrong even though I read the FAQ.     I'm trying to use a simple php script to input data to register but I get this error:  "Failed to run query: SQLSTATE[HY093]: Invalid parameter number: parameter was not defined"  once I fill out the form.    I've seen other people get this error but I seem to have different problems to them and can't figure it out.    My PHP script is just

<?php


require("config.inc.php");

//if posted data is not empty
if (!empty($_POST)) {
  
    if (empty($_POST['username']) || empty($_POST['password'])) {
		
	
	  
	    $response["success"] = 0;
	    $response["message"] = "Please Enter Both a Username and Password.";

		
        die(json_encode($response));
    }

    $query        = " SELECT 1 FROM users WHERE username = :user";
    $query_params = array(
        ':user' => $_POST['username']
    );
    
    try {
        $stmt   = $db->prepare($query);
        $result = $stmt->execute($query_params);
    }
    catch (PDOException $ex) {
        die("Failed to run query: " . $ex->getMessage());

		$response["success"] = 0;
		$response["message"] = "Database Error. Please Try Again!";
		die(json_encode($response));
    }
    

    $row = $stmt->fetch();
    if ($row) {
        die("This username is already in use");
		$response["success"] = 0;
		$response["message"] = "I'm sorry, this username is already in use";
		die(json_encode($response));
    }
    
    $query = "INSERT INTO users ( username, password ) VALUES ( :user, :pass ) ";
    
    $query_params = array(
        ':username' => $_POST['username'],
        ':password' => $_POST['password']
    );
    
    try {
        $stmt   = $db->prepare($query);
        $result = $stmt->execute($query_params);
    }
    catch (PDOException $ex) {
        die("Failed to run query: " . $ex->getMessage());
		$response["success"] = 0;
		$response["message"] = "Database Error. Please Try Again!";
		die(json_encode($response));
    }

	$response["success"] = 1;
	$response["message"] = "Username Successfully Added!";
	echo json_encode($response);

    
} else {
?>
	<h1>Register</h1> 
	<form action="index.php" method="post"> 
	    Username:<br /> 
	    <input type="text" name="username" value="" /> 
	    <br /><br /> 
	    Password:<br /> 
	    <input type="password" name="password" value="" /> 
	    <br /><br /> 
	    <input type="submit" value="Register New User" /> 
	</form>
	<?php
}

?>

and the config: 

<?php 
	$username = "root"; 
    $password = ""; 
    $host = "localhost"; 
    $dbname = "drinkdealz"; 


   
    $options = array(PDO::MYSQL_ATTR_INIT_COMMAND => 'SET NAMES utf8'); 
     
  
    try 
    { 
       
        $db = new PDO("mysql:host={$host};dbname={$dbname};charset=utf8", $username, $password, $options); 
    } 
    catch(PDOException $ex) 
    { 
       
        die("Failed to connect to the database: " . $ex->getMessage()); 
    } 
     
    $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); 
     
  
    $db->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC); 
     
 
    if(function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) 
    { 
        function undo_magic_quotes_gpc(&$array) 
        { 
            foreach($array as &$value) 
            { 
                if(is_array($value)) 
                { 
                    undo_magic_quotes_gpc($value); 
                } 
                else 
                { 
                    $value = stripslashes($value); 
                } 
            } 
        } 
     
        undo_magic_quotes_gpc($_POST); 
        undo_magic_quotes_gpc($_GET); 
        undo_magic_quotes_gpc($_COOKIE); 
    } 
     
    header('Content-Type: text/html; charset=utf-8'); 
     
  
    session_start(); 




?>

Sorry if I uploaded anything wrong and it's only a localhost so I don't really care about passwords etc (none will be the same when I upload it)  So if any of you can even point me in the direction of what to look for that would be brilliant. Cheers, Kieran

Hey...

I was going through this sample that was given in the class, but got confused at the first point

"//change this to include your own database connect script.
include "../../dbconnect.php";"

and the database connection code is

"<?php
 if ($_POST['submit']) {
     // connect to your database
     $connection = pg_connect("port=5432  dbname=rr_ds user=nobody");
     if (!$connection) {
         die("Connection has failed: " . pg_last_error());
     }?>
"

the database connection code is from a previous assignment which i did, but that was for a login page. The current assignment is to connect to the database and have data on it.

Hi,
Im just in the middle of creating an update script for my mysql database but don't know why it's not working. p.s. I'm a little new to PHP, but know quite a bit, it's probably something really small.. *facepalm*

Here's the script:

the form (update.php)
<?
// Connect to the database
$link = mysql_connect('###', '###', '###');
if (!$link) {
die('Could not connect: ' . mysql_error());
}
mysql_select_db('###', $link);

$id = $_GET['id'];

// Ask the database for the information from the links table
$query="SELECT * FROM orders WHERE id='$id'";
$result = mysql_query("SELECT * FROM orders");
$num=mysql_numrows($result);
mysql_close();

$i=0;
while ($i < $num) {
$name=mysql_result($result,$i,"Name");
$location=mysql_result($result,$i,"Location");
$fault=mysql_result($result,$i,"Fault");

?>

<form action="updated.php" method="post">
<input type="hidden" name="ud_id" value="<? echo "$id";?>">
Name: <input type="text" name="ud_name" value="<? echo "$name"?>"><br>
Location: <input type="text" name="ud_location" value="<? echo "$location"?>"><br>
Fault: <input type="text" name="ud_fault" value="<? echo "$fault"?>"><br>

<input type="Submit" value="Update">
</form>

<?
++$i;
}
?>

------------------------------------------------------
(processor) updated.php

<?php
// Connect to the database
$link = mysql_connect('###', '###', '###');
if (!$link) {
die('Could not connect: ' . mysql_error());
}
mysql_select_db('###', $link);

$query="UPDATE orders SET Name='" . $_POST['ud_name'] . "', Location='" . $_POST['ud_location'] . "', Fault='" . $_POST['ud_fault'] . "' WHERE $id='" . $_POST['ud_id'] . "'";
echo $query;
$checkresult = mysql_query($query);
if ($checkresult) echo '<p>update query succeeded';
else echo '<p>update query failed';

mysql_close();
?>


------------------------------------------------------

Every time I want to update, it comes up with:

UPDATE orders SET Name='TEST', Location='TEST', fault='jbjh' WHERE =''
update query failed

Any help would be appreciated.

Hello everybody, I have found a lot of amazing advises and codes to improve on my existing codes. It seems to be an awesome site. I actually came from a background of Application programming, however I have just recently pick up a project in php. The project is about database integration, where I have to integrate 5 supplier's existing data who have different attributes into one. (each suppliers have about 30k data)  I really need help and advises on how should I do the script.

Here's the details, All the suppliers uses different data file, such as CSV and .xls. I am finding a way to integrate all the 5 files into one database(mysql/phpmyadmin) so it could be listed out in a shopping cart or catalog in future. However, I am unfamiliar with php, so please advice on how can i go about fixing this problem. The first problem is that each individual suppliers uses a different attributes name, for example

Supplier 1 uses : SupplierName, SupplierID, SupplierAddress, Status

Inside the status, the supplier uses data such as, Good, Excellent, Great

while Supplier 2 uses : SName, SID, SAddress, Status
and inside this supplier, the status data that are being uses is G, Ex, Gr.

How can I set a consistancy on the data and converting all the properties into one so I can import this data into a proper database such as mysql/phpmyadmin. Please help, thanks in advance

Hi guys and girls,

I am having trouble finding out wether the query made no matches rather than just displaying the matches.

So what I would want is for the search term to look at the database, and if there's not matches then say, "No match for your search term"

Code: [Select]
function search_applications() {

global $dbc;

echo '<form method="post" action="" id="search">'. "\n";
echo '<label for="search_applications">Search for an application</label>'. "\n";
echo '<input type="text" name="search_applications" />'. "\n";
echo '<input type="submit" name="submit" />'. "\n";
echo '</form>'. "\n";


if(isset($_POST['submit'])){

$search_applications = $_POST['search_applications'];


if ($search_applications == "")
 {
 echo "<p>You forgot to enter a search term"; 
 }

//if (preg_match("/\b$search_applications\b/i")){
if(preg_match("/^[  a-zA-Z]+/", $search_applications)){


//for testing the variables
//echo $search_applications;

$sql="SELECT title, category, content FROM distributors_content WHERE  title LIKE '%" . $search_applications . "%' OR category LIKE '%" . $search_applications  ."%' OR content LIKE '%" . $search_applications  ."%'";
$result=mysqli_query($dbc, $sql);
//-create  while loop and loop through result set
while($row=mysqli_fetch_array($result)){
          $title  =$row['title'];
       $category=$row['category'];
       $content=$row['content'];
       
//-display the result of the array
echo "<ul>\n";
echo '<li> <a href="index.php?article='.$row['title'].'&&page=application" title=""> '.$title . ' ' . $category .  '</a></li>'."\n";
echo "</ul>";
}
}else{

echo "<p>Enter another search term</p>";
}
}
}

Any pointers would be good

Thank you

Ok Here is my Problem the following works great except it does not add the $user var to the account_details. As well as outputs md5 wrong it outputs something but its different than the password should be.

Heres my PHP code:

Code: [Select]
<?php
session_start();
/**
 * @author Brian T. Flores
 * @copyright 2010 - 2014
 */
error_reporting(E_ALL);



$conn = mysql_connect($db_host, $db_user, $db_pass) or die ('Error connecting to mysql');


mysql_select_db($db_name);


    
    if($_GET['goahead']==1){ // If GoAhead Is set
      
    if(isset($_GET['user'])){ // If isset GoAhead
        $user = mysql_real_escape_string($_GET['user']); // Clean User for Transfer.
        
        
        
        $user_check = mysql_query("SELECT * FROM `account_details` WHERE `username01` = '$user'"); // Check to see if username is taken.
        $ucount = mysql_num_rows($user_check); // Get Username Check Count
                      
                        if($ucount!=""){ // If Username is Taken.
                        
                        die(3); // Die Error Number 3
                        
                    } // End If Username is Taken.
                    
        if(isset($_GET['pass'])){ // If password is set.
            $pass = mysql_real_escape_string($_GET['pass']);  // Clean Password for Transfer.
            $encPass = md5($pass); // Encrypt Password
            
            if(isset($_GET['race'])){// If Race is Set.
                
                $race = mysql_real_escape_string($_GET['race']); // Clean Race for Transfer.
                
                if(isset($_GET['email'])){ // If Email is set.
                    
                    $email = mysql_real_escape_string($_GET['email']); // Clean Email for Transfer.
                    $email_check = mysql_query("SELECT * FROM `account_details` WHERE `email` = '$email'");// Check to see if Email is Taken.
                    $ecount = mysql_num_rows($email_check); //  Get Email Check Count.
                    if($ecount!=""){ // If Email is Taken. 
                        
                        die(2); // Die Error Number 2
                        
                    } // End If Email is Taken.
                    
                    if(isset($_GET['email2'])){ // If email confirmation is set.
                        $email2 = mysql_escape_string($_GET['email2']); // Clean Email Confirmation for Transfer.
                        
                        if($email == $email2){ // If emails match.
                            
                            if(isset($_GET['planet'])){ // If Planet Name is Set.
                            $pname = mysql_real_escape_string($_GET['planet']); // Clean Planet Name for Transfer. 
                           if(isset($_GET['security_code'])){ // If Security Code Input is set.
                            
                            $security_code = mysql_real_escape_string($_GET['security_code']); // Clean Security Code.
                            $security_enc = md5($security_code); // Encrypt Security Code.
                            
                            $security_code2 = $_SESSION['image_random_value']; // Get Security Code Session
                            if($security_enc == $security_code2){ // If Codes Match.
                                $randActive = rand(11111111111111111111,99999999999999999999); // Get Activation Link pre-encrypt.
                                $activation_link = md5($randActive); // Get Encrypted Activation Link.
                                

$q = "INSERT INTO `account_details` (`username01`, `password01`, `loggedIn`, `currentlyLogged`, `active`, `activelink`, `race`, `email`) VALUES ('$user', '$encPass', 0, 0, 0, '$activation_link', '$race', '$email');";
// ^ Add Account Query.

$res = mysql_query($q) or die("Error Detected! <br />".mysql_error());
// ^ Add Account to SQL.
                                
$q = mysql_query("SELECT * FROM `account_details` WHERE `username01` = '$user'")or die(mysql_error());
// ^ Get Information from New Account.

$newuserinfo = mysql_fetch_array($q);// Get New User Information

$id = $newuserinfo['id']; // Set New Account Id.

$q="INSERT INTO `planets` (`owner`, `name`, `recource1`, `recource2`, `recource3`, `recource4`, `recource5`, `turns_01`, `untrained_units_01`, `attackers_01`, `defenders_01`, `miners_01`, `covert_01`, `anticovert_01`, `ship_01`, `ship_02`, `ship_03`, `ship_04`, `ship_05`, `ship_06`, `ship_07`, `building01`, `building02`, `building03`, `building04`, `building05`, `building06`, `building07`, `building08`, `building09`) VALUES ('$id', '$pname', 35000, 15000, 12000, 135000, 125000, 220, 150, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0);";
// ^ Add Planet Query.
$res2 = mysql_query($q) or die("Error Detected! <br />".mysql_error()); // Add Planet to SQL.


 $body = "
 Hello ".$user.",
  
  Congradulations! Your account on Ultimate Conquest has been Registed Today!
  
  Click the following Link to Activate Account:
  http://testing.ultimateconquest.net/activate.php?code=".$activation_link."
  
  If you have not registered an account and have found this message in error please click the following link to report this error:
  
  http://testing.ultimateconquest.net/errorreg.php?account=".$user."

Thank you for registering for Ultimate Conquest - ULC,
Head Admin Brian Flores AKA Photonic....
 "; // Activation Email Information.
 
 if (mail($email, "Activate your ULC Ultimate Conquest Account! No-Reply!", $body)) { // If Email Is Sent.
    
die("1"); // Die Error Number 1

} // End Send Email   

}else{ // If Security Codes do Not Match.
        die("12"); // Die Error Number 12
    }
    }else{ // If Security Code is Not Set
        die("11"); // Die Error Number 13
    }
    }else{ // If Planet Name is Not Set.
        die("10"); // Die Error Number 10.
    }
    }else{ // If Emails do not match.
        die("9"); // Die Error Number 9.
    } 
    }else{ // If email confirmation is not set.
        die("8"); // Die Error Number 8.
    }
    }else{ // If email is not set.
        die("7"); // Die Error Number 7.
    }
    }else{ // If race is not set.
        die("6"); // Die Error Number 6.
    }
    }else{ // If Password is not set.
        die("5"); // Die Error Number 5.
    }
    }else{ // If Username is not set.
        die("4"); // Die Error Number 4.
    }
    }else{ // If GoAhead is Not Set.
    die("Go Ahead Not Established By Game System!");
}


?>

Here is the Register Function in Javascript:

Code: [Select]
  function regMast(){
    var user = document.getElementById('username_client').value;
    var pass = document.getElementById('password_client').value;
    var race1 = document.getElementById('races1').value;
    if(race1 !=""){var race = document.getElementById('races1').value;}
    var race2 = document.getElementById('races2').value;
    if(race2 !=""){var race = document.getElementById('races2').value;}
    var race3 = document.getElementById('races3').value;
    if(race3 !=""){var race = document.getElementById('races3').value;}
    var race4 = document.getElementById('races4').value;
    if(race4 !=""){var race = document.getElementById('races4').value;}
    var planet_name = document.getElementById('pname').value;
    var email = document.getElementById('email').value;
    var email2 = document.getElementById('email2').value;
    var security_code = document.getElementById('security_code').value;
   
    var ajaxRequest;  // The variable that makes Ajax possible!

try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
    // Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var returni = ajaxRequest.responseText;
           
            if(returni == "1"){
                document.getElementById('reg_error').innerHTML = 'Registration Completed! Check Activation Email for more information.';
            }
            if(returni == "2"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Email Address Already Taken!';
            }
            if(returni == "3"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Username Already Taken!';
            }
            if(returni == "4"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Username Field Empty!';
            }   
            if(returni == "5"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Password Field Empty!';
            }
            if(returni == "6"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! You must select a race!';
            }
            if(returni == "7"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Email Field Empty!';
            }     
            if(returni == "8"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Email Confirmation Field Empty!';
            }   
            if(returni == "9"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Emails did not Match!';
            }   
            if(returni == "10"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! Planet Name Field Empty!';
            }
            if(returni == "11"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! You did not Input the Security Code!';
            }
            if(returni == "12"){
                document.getElementById('reg_error').innerHTML = 'Registration Incomplete! The Security Code you Inputed did not Match the Image!';
            }else{
              document.getElementById('reg_error').innerHTML = returni; 
            }                                                 
}
}
var queryString = "?goahead=1&user=" + user + "&pass=" + pass + "&race=" + race + "&email=" + email + "&email2=" + email2 + "&security_code=" + security_code + "&planet=" + planet_name;
ajaxRequest.open("GET", "register.php" + queryString, true);
ajaxRequest.send(null);
   
}

here is my code: Code: [Select]
function registerUser() {

   mysql_connect('localhost', 'user', 'password', 'table');
   $rsPostCode = $_POST['rsPostCode'];
    $rsGender = $_POST['rsGender'];
    $rsUser = $_POST['rsUser'];
   $rsPass = $_POST['rsPass'];
    $rsEmail = $_POST['rsEmail'];
    $rsMobile = $_POST['rsMobile'];
    $rsAge = $_POST['rsAge'];

   $sql = "INSERT INTO members_copy (rsPostCode, rsGender, rsUser, rsPass, rsEmail, rsMobile, rsAge) VALUES ($rsPostCode, $rsGender, $rsUser, $rsPass, $rsEmail, $rsMobile, $rsAge);";
//echo $sql;
   mysql_query($sql);
}
When I write out my SQL this is the output: INSERT INTO members_copy (rsPostCode, rsGender, rsUser, rsPass, rsEmail, rsMobile, rsAge) VALUES (BN11, Male, jarv, mypassword, john@email.com, 07998989999, 08/11/1978);

here is my register page: http://www.retroandvintage.co.uk/register.php

$day = $_POST['day'];
$month = $_POST['month'];
$year = $_POST['year'];

$date = date("Y-m-d", time(0,0,0,$month, $day, $year));

$sql="INSERT INTO child_info (first_name,middle_name,first_family_name,second_family_name, gender,birthdate,mother_living,father_living,brothers,sisters,resident_time,dorm,school,grade_level,school_subject,speak_english,food,medical_allergies,physical_limits,future,instrument,work,social,special_people,hobby,sponsor)
VALUES
('$_POST[first_name]','$_POST[middle_name]','$_POST[first_family_name]','$_POST[second_family_name]','$_POST[gender]','$_POST[date]','$_POST[mother_living]','$_POST[father_living]','$_POST[brothers]','$_POST[sisters]','$_POST[resident_time]','$_POST[dorm]','$_POST[school]','$_POST[grade_level]','$_POST[school_subject]','$_POST[speak_english]','$_POST[food]','$_POST[medical_allergies]','$_POST[physical_limits]','$_POST[future]','$_POST[instrument]','$_POST[work]','$_POST[social]','$_POST[special_people]','$_POST[hobby]','$_POST[sponsor]')";

Before I get into my problem a couple of things.  
First, this is a work project.  My organization cannot afford a full time developer so as a database guy I'm being asked to develop a web based data system using php/html/mysql/javacript/etc.  So I am not asking anyone to help me cheat or violate an honor code for a school project.  Also I am having to learn PHP on the fly, by the seat of my pants.  Second, my organization is using a version of PHP older that 5.5.X and I am powerless to update the version.  So I know that some of the syntax I am using has been deprecated in more recent PHP versions.  I don't mean to sound snarky or ungrateful but I really need some help solving this problem versus unhelpful comments about deprecated code.  Third I am adapting code from the guys at TechStream so H/T to them.
Here is what I am trying to build.  My office helps other offices in my large organization manage their records through the creation of a file plan.  We are currently using a clunky, user-unfriendly Access database that was created back in 2009.  I am tasked to transition that Access hoopty into a proper, web-based, user friendly system.   The index.php form page consists of 2 parts.
You can see the original TechStream demo he   http://demo.techstre...ssing-with-PHP/
I've adapted the top part of the form ("Travel Information") for my users to enter information about their office such as Office Name, Office Code, Office Chief, Creator (the user), Status and date.  I've adapted the bottom part of the form ("Passenger Details") to be "Folder Details".  This is an html table where users can add up to 10000 rows to list all the folders for their office by entering the folder name in the text box and then assign descriptors to each folder using the drop down menus.  I've changed the drop down menus to reflect the descriptors we need, i.e. file-series, classification, media type.  The user needs the flexibility to add folders as the number of folders will vary between offices.  This adding and deleting of folders is accomplished dynamically through a javascript script.js file.
Now, here's my problem.  When the user clicks submit button that fires a php script that runs an insert into query to place the array data into the backend mysql database.  However, when the foreach loop is only inserting the office office from the top portion of the form with the first folder in the bottom portion of the form.  In other words let's say the user fills out the top part with his office information and then adds 5 folders into the html table at the botton.  The first folder will be inserted into the database table with both office information and folder information.  However the subsequent 4 folders will have their folder information inserted into the table but the office information fields will be null.  The office information needs to be inserted with each folder the user adds to the html table piece.
I suspect that my foreach loop is only capturing that office information on the first iteration of the loop and then flushing or deleting the office information after the first loop.  Also, I suspect there is some disconnect between the html table for entering individual folders and the top part of the form that is not in html format.  Any help I can get is most welcome.  Thanks in advance! Code is below.
index.php

    <?php
    session_start();
    if(!isset($_SESSION['myusername'])) {
    header('Location:index.php');
     }

    echo $_SESSION['myusername'];
    echo '<a href="logout.php"><span>Logout</span></a></li>';

    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
    <head>
        <title>Records Management File Plan Application</title>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
        <link rel="stylesheet" type="text/css" href="css/default.css"/>
        <script type="text/javascript" src="js/script.js"></script>
    </head>
    <body>    
        <form action="InsertFileDetailArraytoDB.php" class="register" method="POST">
            <h1>Office File Plan Application/h1>
            <fieldset class="row1">
                <legend>Office Information</legend>
                <p>
                    <label>Office Code *
                    </label>
                    <input name="officecode[]" type="text" required="required"/>
                    <label>Date*
                    </label>
                    <select class="date" name="day[]">
                        <option value="1">01
                        </option>
                        <option value="2">02
                        </option>
                        <option value="3">03
                        </option>
                        <option value="4">04
                        </option>
                        <option value="5">05
                        </option>
                        <option value="6">06
                        </option>
                        <option value="7">07
                        </option>
                        <option value="8">08
                        </option>
                        <option value="9">09
                        </option>
                        <option value="10">10
                        </option>
                        <option value="11">11
                        </option>
                        <option value="12">12
                        </option>
                        <option value="13">13
                        </option>
                        <option value="14">14
                        </option>
                        <option value="15">15
                        </option>
                        <option value="16">16
                        </option>
                        <option value="17">17
                        </option>
                        <option value="18">18
                        </option>
                        <option value="19">19
                        </option>
                        <option value="20">20
                        </option>
                        <option value="21">21
                        </option>
                        <option value="22">22
                        </option>
                        <option value="23">23
                        </option>
                        <option value="24">24
                        </option>
                        <option value="25">25
                        </option>
                        <option value="26">26
                        </option>
                        <option value="27">27
                        </option>
                        <option value="28">28
                        </option>
                        <option value="29">29
                        </option>
                        <option value="30">30
                        </option>
                        <option value="31">31
                        </option>
                    </select>
                    <select name="month[]">
                        <option value="1">January
                        </option>
                        <option value="2">February
                        </option>
                        <option value="3">March
                        </option>
                        <option value="4">April
                        </option>
                        <option value="5">May
                        </option>
                        <option value="6">June
                        </option>
                        <option value="7">July
                        </option>
                        <option value="8">August
                        </option>
                        <option value="9">September
                        </option>
                        <option value="10">October
                        </option>
                        <option value="11">November
                        </option>
                        <option value="12">December
                        </option>
                    </select>                   

                    <select name="year[]">
                        <option value="2013">2013
                        </option>
                        <option value="2014">2014
                        </option>
                        <option value="2015">2015
                        </option>
                        <option value="2016">2016
                        </option>                       
                    </select>

                </p>
                <p>
                    <label>Office Chief*
                    </label>
                    <input name="officechief[]" required="required" type="text"/>

                    <label>Status*
                    </label>
                    <select name="status[]">
                        <option value="Draft">Draft
                        </option>
                        <option value="Submitted">Submitted
                        </option>
                        <option value="Approved">Approved
                        </option>
                    </select>
                </p>
                <p>
                    <label>Creator *
                    </label>
                    <input name="creator[]" required="required" type="text"/>
                </p>
                <div class="clear"></div>
            </fieldset>
                <fieldset class="row2">
                <legend>Folder Details</legend>
                <p>
                    <input type="button" value="Add Folder" onClick="addRow('dataTable')" />
                    <input type="button" value="Remove Folder" onClick="deleteRow('dataTable')"     />
                    <p>(All actions apply only to entries with check marked check boxes.)</p>
                </p>
            <table id="dataTable" class="form" border="1">
                <tbody>
                    <tr>
                    <p>
                        <td><input type="checkbox" required="required" name="chk[]"     checked="checked" /></td>
                        <td>
                            <label>Folder Name</label>
                            <input type="text" required="required" name="BX_NAME[]">
                        </td>
                        <td>
                            <label for="BX_fileseries">File Series</label>
                            <select id="BX_fileseries required="required"   name="BX_fileseries[]">
                            <option>100-01-Inspection and Survey/PII-NO</option>
                            <option>200-02-Credit Card Purchases/PII-NO</option>
                            <option>300-07-Time and Attendance/PII-YES</option>                         
                        </td>
                        <td>
                            <label for="BX_classification">Classification</label>
                            <select id="BX_classification" name="BX_classification"         required="required">
                                <option>Unclassified</option>
                                <option>Confidential</option>
                                <option>Secret</option>
                                <option>Top Secret</option>
                                <option>Ridiculous Top Secret</option>
                                <option>Ludicrous Top Secret</option>
                            </select>
                        </td>
                        <td>
                            <label for="BX_media">Media</label>
                            <select id="BX_media" name="BX_media" required="required">
                                <option>Paper</option>
                                <option>Shared Drive</option>
                                <option>Film</option>
                                <option>Floppy Disk</option>
                                <option>Mixed</option>
                                <option>Other</option>
                            </select>
                        </td>
                            </p>
                        </tr>
                        </tbody>
                        </table>
                        <div class="clear"></div>
                    </fieldset>

                <input class="submit" type="submit" value="File Plan Complete &raquo;" />


                <div class="clear"></div>
                </form>

            </body>

    </html>

PHP script with foreach loop to loop through the array from index.php and insert into database: InsertFileDetailArrayToDB.php

    /*
    When the user has finished entering their folders, reviewed the form inputs for accuracy and clicks the submit button, this will loop through all folder entries and using the SQL insert into query will place them in the database.  When it     completes     data insertion it will redirect the user back to the file detail input form*/

    <?php

    /*this part requires the user to be logged in and allows their user name to be included in the insert into query.
    If you remove the "ob_start();" piece it will screw up the header statement down at the botton.  
    See the comments by the header statement for an explanation of its purpose*/

    ob_start();
    session_start();
    if(!isset($_SESSION['myusername'])) {
    header('Location:index.php')
    }

    /*these two lines would ordinarily display the user name and a link a
    allowing the user to log out. However this php script does not output anything
    so the user will never it.*/
    echo $_SESSION['myusername'];
    echo '<a href="logout.php"><span>Logout</span></a></li>';

    ?>

    <?php

    /*this include statement connects this script to the MySQL database
    so the user form inputs can be inserted into the file_plan_details
    table*/

    include ('database_connection.php');

    foreach($_POST['BX_NAME'] as $row=>$BX_NAME)

    {
        $BX_NAME1 = mysql_real_escape_string($_POST['BX_NAME');
        $officecode1 = mysql_real_escape_string($_POST['officecode'][$row]);
        $username1 = mysql_real_escape_string($_SESSION['myusername'][$row]);
        $day1 = mysql_real_escape_string($_POST['day'][$row]);
        $month1 = mysql_real_escape_string($_POST['month'][$row]);
        $year1 = mysql_real_escape_string($_POST['year'][$row]);
        $creator1 = mysql_real_escape_string($_POST['creator'][$row]);
        $officechief1 = mysql_real_escape_string($_POST['officechief'][$row]);
        $status1 = mysql_real_escape_string($_POST['status'][$row]);
        $BX_fileseries1 = mysql_real_escape_string($_POST['BX_fileseries'][$row]);
        $BX_classification1 = mysql_real_escape_string($_POST['BX_classification'][$row]);
        $BX_media1 = mysql_real_escape_string($_POST['BX_media'][$row]);

        $fileplandetailinsert1 = "INSERT INTO file_plan_details (folder_name, office_code, user_name, day, month, year, creator, office_chief, status, file_series, classification, media)
                  VALUES             ('$BX_NAME1','$officecode1','$username1','$day1','$month1','$year1','$creator1','$officechief1','$status1','$BX_fileseries1','$BX_classification1','$BX_media1')";


        mysql_query($fileplandetailinsert1);

            }

           /*this header statement redirects the user back to the folder detail input form after it inserts data into the db
           After I build a main navigation page, I will switch out index.php with whatever I name
           the script that will produce the main navigation page*/

           header('Location:index.php');

           ?>

script.js

function addRow(tableID) {
    var table = document.getElementById(tableID);
    var rowCount = table.rows.length;
    if(rowCount < 10000){                            // limit the user from creating fields more than your limits
        var row = table.insertRow(rowCount);
        var colCount = table.rows[0].cells.length;
        for(var i=0; i<colCount; i++) {
            var newcell = row.insertCell(i);
            newcell.innerHTML = table.rows[0].cells[i].innerHTML;
        }
    }else{
         alert("Maximum Passenger per ticket is 5.");
               
    }
}

function deleteRow(tableID) {
    var table = document.getElementById(tableID);
    var rowCount = table.rows.length;
    for(var i=0; i<rowCount; i++) {
        var row = table.rows[i];
        var chkbox = row.cells[0].childNodes[0];
        if(null != chkbox && true == chkbox.checked) {
            if(rowCount <= 1) {                         // limit the user from removing all the fields
                alert("Cannot Remove all the Passenger.");
                break;
            }
            table.deleteRow(i);
            rowCount--;
            i--;
        }
    }
}

Edited by mac_gyver, 17 December 2014 - 01:13 PM.
code tags around posted code please

I'm creating a newsletter and the unsubscribe isn't deleting the database entry like I'm asking it to. Everything else works fine, it even successfully says the user has been removed, but it doesn't actually delete the database entry.

I've spent  two days trying to figure out why. Here's the code:

Newsletter sign up:
 

<?php
//DB Connect Info
$servername = "";
$database = "";
$username = "";
$password = "";

// Create connection
$conn = mysqli_connect($servername, $username, $password, $database);

// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}

/*$createTable = $conn->prepare ("CREATE TABLE IF NOT EXISTS email_user (
  id int(11) NOT NULL AUTO_INCREMENT,
  email varchar(200) NOT NULL,
  hash varchar(250) NOT NULL,
  PRIMARY KEY (id)
)");

$createTable->execute();
*/

function input_security($data)
{
    $data = trim($data);
    $data = stripslashes($data);
    $data = htmlspecialchars($data);
    return $data;
}

$email = input_security($_POST['email']);

$insertData = input_security($insertData);

if(isset($_POST['submit']))
{  
  extract($_POST);
  if($email!="") :
    $email=mysqli_real_escape_string($conn,$email);
    $emailval = '/^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,4})$/';    
    if(preg_match($emailval, $email)) :
      $db_check=$conn->query("SELECT * FROM email_user WHERE email='$email'");
      $count=mysqli_num_rows($db_check);
      if($count< 1) :         
         $hash=md5($email.time());
         $link = '/unsubscribe.php?key='.$hash;

        // Change your domain        
         $fetch=$conn->query("INSERT INTO email_user(email,hash) VALUES('$email','$hash')");
         $to="$email"; //change to ur mail address
         $strSubject="Maintenance Fee Relief, LLC | Email Subscription";
         $message = '<p>Thank you for subscribing with us.</p>' ;              
         $message .= '<p>Click here to unsubscribe your email : <a href="'.$link.'">unsubscribe</p>' ;              
         $headers = 'MIME-Version: 1.0'."\r\n";
         $headers .= 'Content-type: text/html; charset=iso-8859-1'."\r\n";
         $headers .= "From: info@";            
         $mail_sent=mail($to, $strSubject, $message, $headers);  
         $msg_sucess="Your request has been accepted!.";
      else :
        $msg="This $email email address is already subscribe with us.";
      endif;  
    else :
      $msg="Please enter your valid email id";
    endif;      
  else :
    $msg="Please fill all mandatory fields";
  endif;
}
?>

<div class="newsletter-sign-up-header-form">
<div id="logerror"><?php echo @$msg; ?><?php echo @$msg_sucess; ?></div>
<form  method="post">
<span><input type="email" name="email" placeholder="Email Address - Join Newsletter" class="newsletter-sign-up-header-email" required></span>
<span><button name="submit" value="submit" title="Submit" class="newsletter-sign-up-header-submit-button">Submit</button></span>
</form>
</div>

<?php
//DB Connect Info
$servername = "";
$database = "";
$username = "";
$password = "";

// Create connection
$conn = mysqli_connect($servername, $username, $password, $database);

// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
?>

<?php
if(@$_GET['key']!=""):
    $hash=mysqli_real_escape_string($conn,$_GET['key']);
    $fetch=$conn->query("SELECT * FROM email_user WHERE hash = '$hash'");
    $count=mysqli_num_rows($fetch);
    if($count==1) :
      $row=mysqli_fetch_array($fetch);      
        $conn->query("DELETE email_user WHERE id='$user_id'");
        $msg="Your email id unsubscribe with us";
    else :
      $msg="Please click valid link.";
    endif;
else :
    header("Location:404.php");
endif;
?>

<!doctype html>
<html lang="en">
<head>
   <title>Unsubscribe</title>
</head>
<body>
    <div align="center">
    <h2><?php echo $msg; ?></h2>
        <a href="https://www.--.com">--.com</a>                                                
    </div>
    

 

Quote

 

 

Hi
I don't know exactly what to do to see correct date of birth into my sql database.  I have following code i.e.
$month=$_POST['month'];
$year=$_POST['year'];
$date=$_POST['date'];
$date_value="$month/$date/$year";
echo"YYYY-mm-dd format:$date_value";

and sql insert statement is like this
$sql = "INSERT INTO table_name(fname, lname, gender, add1, add2, city, state, zip, country, email, phone, cellphone, dob, photo1)
VALUES('$fname','$lname','$gender','$add1','$add2','$city','$state','$zip','$country','$email','$phone','$cellphone',
'$date_value','" . $image['name'] . "')";

I don't know what exactly I need to do?  Even though I changed the setting in php ini  to register_globals = On
I would appreciate any kind of help regarding this matter.
Thanks
Smita

Hi there,

I am using this code to send the users email address to the database. That works fine, but i keep getting blank info added to the database. Does anyone know how i can stop this?

<?php
$con = mysql_connect("*","*","*");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("ogs_mailinglist1", $con);

$sql="INSERT INTO mailinglist (email)
VALUES
('$_POST[rec_email]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }

mysql_close($con);
?>



Thanks,

Hi, this is my first post:) pretty sure i will be posting here in the future. Anyway i am having trouble with a php script which downloads a file from a mysql database.

This php script works for text files and should work for most files from what i understand. When downloading a text file, the whole file is downloaded from the server. When downloading an mp3 file, only 16kb are downloaded and the file does not play. When looking at the data in the database, it displays that the full file is there (correct amount of bytes, so there is nothing wrong with my upload php script). Does anyone have any suggestions as to what I can change to make this work?

Code: [Select]
<?php
if(isset($_GET['id'])) 
{
// if id is set then get the file with the id from database
$link=mysql_connect('localhost', 'root', '');
@mysql_select_db('filemgr') or die ("<p>Could not connect to mysql!</p>");

$id    = $_GET['id'];
$query = "SELECT name, type, size, content " .
         "FROM upload WHERE id = '$id'";

$result = mysql_query($query) or die('Error, query failed');
list($name, $type, $size, $content) =  mysql_fetch_array($result);

header("Content-length: $size");
header("Content-type:$type");
header("Content-Disposition: attachment; filename=$name");
echo $content;

mysql_close($link);
exit;
}
?>