PHP - Email Sent To Admin When A New User Is Registered

I'm using this type of code below. how can my site may have access to my e-mail ? and how can I send e-mails containing passwords to users.?? please help.
//code is like this//
if($_POST['submit']=='Register')
{
   // If the Register form has been submitted
   
   $err = array();
   
   if(strlen($_POST['username'])<4 || strlen($_POST['username'])>32)
   {
      $err[]='Your username must be between 3 and 32 characters!';
   }
   
   if(preg_match('/[^a-z0-9\-\_\.]+/i',$_POST['username']))
   {
      $err[]='Your username contains invalid characters!';
   }
   
   if(!checkEmail($_POST['email']))
   {
      $err[]='Your email is not valid!';
   }
   
   if(!count($err))
   {
      // If there are no errors
      
      $pass = substr(md5($_SERVER['REMOTE_ADDR'].microtime().rand(1,100000)),0,6);
      // Generate a random password
      
      $_POST['email'] = mysql_real_escape_string($_POST['email']);
      $_POST['username'] = mysql_real_escape_string($_POST['username']);
      // Escape the input data
      
      
      mysql_query("   INSERT INTO tz_members(usr,pass,email,regIP,dt)
                  VALUES(
                  
                     '".$_POST['username']."',
                     '".md5($pass)."',
                     '".$_POST['email']."',
                     '".$_SERVER['REMOTE_ADDR']."',
                     NOW()
                     
                  )");
      
      if(mysql_affected_rows($link)==1)
      {
         send_mail(   'myemail@xx.net',
                  $_POST['email'],
                  'sitename - Your New Password',
                  'Your password is: '.$pass);

         $_SESSION['msg']['reg-success']='We sent you an email with your new password!';
      }
      else $err[]='This username is already taken!';
   }

   if(count($err))
   {
      $_SESSION['msg']['reg-err'] = implode('<br />',$err);
   }   
   
   header("Location: demo.php");
   exit;
}


//but while running it on local server it shows the message "failure" as I have mentioned in the index.php. please provite a template codeing to solve the problem//

I am trying to check for an admin user to access the admin panel.

I have been playing around try different things and this what I have ended up with

in my database table I have a column called usergroup and i do the follow to check for admin user.

Code: [Select]
$checkAdmin = mysql_query("SELECT * FROM  `users` WHERE email='$email' , usergroup =  'admin'");

$adminUser = mysql_num_rows($checkAdmin);

if ($adminUser == 0)
{
echo count($adminUser);
die ('You do not have permissions to access this area');

}

I do the select statement through phpmyadmin and it comes back with one row. which is basically hat i want to check for. I do have a variable called $email which is getting a value from the email cookie.

currently $adminUser Return a value of 10.

All of the count() functions is for testing purposes only.

Hi guys,

Can anyone help me; I have created a registration form (can be use for create or modify) and login form (Admin). What I am trying to do is; once the admin log in he/she can create / register a new user which contains:

-Firstname
-Surname
-Address
-Mobile
-Dept Name
-Username
-Password
-Repeat Password

My DB will look like this:

Table PERSONS: id, firstname, surname, address, mobile, dept_id, username, password.

Table USER: id, username, password

Table DEPT: id, dept_name


Can anyone help me how am I going to related the USER table into the PERSONS so when admin register a new user - the data will be created the into database as well as the data can be extracted for modification. Any suggestion?

Here are my code:

register.php

<?php

require 'includes/application_top.php';

    

   if (!isset($_POST['name']) && isset($_GET['id'])) {


      $mode = "Modifying";
      // Get data from DB

        $q = "SELECT * FROM `persons` WHERE `ID` = '".$_GET['id']."'"; 
        $result = mysql_query($q) or die (mysql_error());
        $row = mysql_fetch_array($result);
         
        $name = $row['firstname'];
        $surname = $row['surname'];
        $address = $row['address'];
        $dept = $row['dept_id'];
        $mobile = $row['mobile'];

}else if (!isset($_POST['name']) && !isset($_GET['id'])) {

      $mode = "Register";

      // Data is empty

      $name = $surname = $address = $dept = $mobile = "";

    } else {

        $errors = array();
        if ($_POST['name'] == "") $errors[] = "Name";
        if ($_POST['surname'] == "") $errors[] = "Surname";
        if ($_POST['mobile'] == "" || !is_numeric ($_POST['mobile'])) $errors[] = "Mobile No";
             
        if (count($errors)) {

            $errormsg = "Please fill the blank info:<br/ >".implode('<br />',$errors);

            $mode = $_POST['mode'];
            $name = $_POST['name'];
            $surname = $_POST['surname'];
            $address = $_POST['address'];
            $dept = $_POST['dept'];
            $mobile = $_POST['mobile'];         

        } else {
            foreach ($_POST as $key => $val) {

$_SESSION[$key] = $val;

}
            header("Location: confirmPage.php"); 

        }         

    }    

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Modify Document</title>
</head>

<body>

<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
  <?php if (isset($errormsg)) echo "<div id=\"error_message\" style=\"color:red;\">$errormsg</div>"; ?>
  <div align="center">


  <table width="370" border="0">
    <h1> <?php echo $mode; ?> A User </h1>
     <p><font color="orangered" size="+1"><tt><b>*</b></tt></font>  
  indicates a required field</p>
      <tr>
        <th width="200" height="35" align="left" scope="row" >First Name

 <font color="orangered" size="+1"><tt><b>*</b></tt></font>

</th>
        <td width="160"><input type="text" name="name" value="<?php echo $name;?>" size="25"/></td>
      </tr>
     
    <tr>
       <th height="35" align="left">  Surname

    <font color="orangered" size="+1"><tt><b>*</b></tt></font>

   </th>
        <td>
        <input type="text" name="surname" value="<?php echo $surname; ?>" size="25"/></td>
      </tr>
     
    <tr>
      <th height="35" align="left">  Address</th>
        <td>

<input type="text" name="address" value="<?php echo $address; ?>" size="25"/></td>
    </tr>
      

<tr>  
       <th height="35" align="left">  
           Choose a username <font color="orangered" size="+1"><tt>*</tt></font></th>  
       <td>  
           <input name="username" type="text" maxlength="100" size="25" />        </td>  
   </tr>  
   
   <tr>  
       <th height="35" align="left">  
           Choose a password

    <font color="orangered" size="+1"><tt><b>*</b></tt></font>

   </th>  
       <td>  
           <input name="password" type="password" maxlength="100" size="25" />             </td>  
   </tr>  
   
   <tr>  
       <th height="35" align="left">  
        Repeat your password

 <font color="orangered" size="+1"><tt><b>*</b></tt></font>

</th>  
       <td>  
           <input name="repeatpassword" type="password" maxlength="100" size="25" />               </td>  
   </tr>  
         
    <tr>
      <th height="35" align="left">Department</th>
        <td>
         
        <select name="dept">
            <option value="">Select..</option>

<?php

    $data = mysql_query ("SELECT * FROM `dept` ORDER BY `id` DESC") or die (mysql_error());
    while($row_dept = mysql_fetch_array( $data )) {

?>
        <option value="<?php echo $row_dept['id'] ;?>" <?php if($row_dept['id']==$dept){echo ' selected="selected"';}?>>
        <?php echo $row_dept['dept_name'] ;?>        </option>
     
<?php
   }
?>
        </select>        </td>
    </tr>
     
    <tr>
      <th height="35" align="left">Mobile</th>
        <td><input type="text" name="mobile" value="<?php echo $mobile; ?>" size="25"/></td>
    </tr>

<tr>  
       <td align="right" colspan="2">  
           <hr noshade="noshade" />  

</td>  
   </tr>  

  </table>
  <br/>
   
  <a href="index.php">
    <input type="button" name="back" value="Back" /></a>
     
    <input type="hidden" name="id" value="<?php echo isset($_GET['id']); ?>">
    <input type="hidden" name="mode" value="<?php echo $mode; ?>">
     
    <input type="submit" value="<?php echo ($mode == "Register") ? 'Register' : 'Modify'; ?>"/>
    
  </div>
</form>

</body>
</html>

I am developing a system that with have 4 different levels of permissions.  My question is this.  From a structure standpoint, some systems will have the administrators area in one file and the users admin area in another file.  Others will have a level of permission with all the different levels of administrative tasks, menus, etc, coming from the database.

Is one of these better than the other or does it matter.  From a coding standpoint it would be much easier to just have permissions and allow access to user menus and admin pages accordingly.

Thanks in advance.

Hello guys.

By the end of the day, my client wants the daily report sent to his email account in .xls format. how can i attain this? I know the php mail() function but i dont know how will php create an excel file and email it to my client automatically. Where should i start?

Thanks guys!

So if I change the user his data to banned or something he don't change
Here is the part of the code:
Code: [Select]
$userInfo = $db->getuserInfo($_GET['id']);
if ($userInfo) {
echo '<form action="'.coreLink('admin', 'users').'" method="post"><input type="hidden" name="userID" value="'.$userInfo['ID'].'"><ul class="inputs">
<li>
<div style="float:right"><input type="text" name="username" class="input" value="'.$userInfo['username'].'"></div>
'.__('Username').'<br /><small>'.__('Nickname of the user').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="pass" class="input" value=""></div>
'.__('Change password').'<br /><small>'.__("Fill this input if you want to change it's password").'</small>
</li>
<li>
<div style="float:right"><input type="text" name="email" class="input" value="'.$userInfo['email'].'"></div>
'.__('Email').'<br /><small>'.__('Email of the user').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="api" class="input" value="'.$userInfo['api'].'"></div>
'.__('API Code').'<br /><small>'.__('Used to access through the API').'</small>
</li>
<li>
<div style="float:right"><select class="input" name="status" style="width:311px">';
foreach (array('ok'=>__('Active'), 'nc'=>__('Not confirmed'), 'banned'=>__('Banned')) as $key=>$long) {
echo '<option value="'.$key.'"';
if ($key == $userInfo['status']) echo ' selected';
echo '>'.$long.'</option>';
}
echo '</select>
</div>
'.__('Status').'<br /><small>'.__('It can be active, banned..').'</small>
</li>
<li>
<fieldset id="shorters" style="border: 1px solid #ddd;-moz-border-radius:2px;-webkit-border-radius:2px"><legend>'.__('Profile').'</legend><br /><div style="padding-left:40px;margin-bottom:20px;width:110px">';
$avatar = getAvatar($userInfo['ID'], '48');
if (!$userInfo['gravatar'] && ($avatar != $jk->base."static/img/avatar/default_note.png")) echo '<div style="float:right;font-size:.8em"><input type="checkbox" name="avatar"> <img src="'.$jk->base.'static/img/trash.gif"></div>';
echo '<img src="'.getAvatar($userInfo['ID'], '48').'" style="border: 1px solid #ddd"></div>
<ul>
<li>
<div style="float:right"><input type="text" name="profile_name" class="input" value="'.$userInfo['realname'].'"></div>
'.__('Name').'<br /><small>'.__('Real name of the user').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="profile_web" class="input" value="'.$userInfo['profile']['url'].'"></div>
'.__('Website').'<br /><small>'.__('Website of the user').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="profile_location" class="input" value="'.$userInfo['location'].'"></div>
'.__('Location').'<br /><small>'.__('Location of the user').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="profile_bio" class="input" value="'.$userInfo['profile']['bio'].'"></div>
'.__('Bio').'<br /><small>'.__('Description of the user').'</small>
</li>
</ul></fieldset>
</li>
<li>
<div style="float:right"><select class="input" name="language" style="width:311px">';
foreach (return_languages() as $short=>$lang) {
echo '<option value="'.$short.'"';
if ($short == $userInfo['language']) echo ' selected';
echo '>'.$lang.'</option>';
}
echo '</select>
</div>
'.__('Language').'<br /><small>'.__('Language of the user').'</small>
</li>
<li>
<div style="float:right"><select class="input" name="theme" style="width:311px">';
foreach ($jk->allowed_themes as $theme) {
echo '<option value="'.$theme.'"';
if ($theme == $userInfo['theme']) echo ' selected';
echo '>'.$theme.'</option>';
}
echo '</select>
</div>
'.__('Theme').'<br /><small>'.__('Skin of Jisko').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="invitations" class="input" value="'.$userInfo['invitations'].'"></div>
'.__('Number of invitations').'<br /><small>'.__('Number of invitations that the user has').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="openid" class="input" value="'.$userInfo['openid'].'"></div>
'.__('OpenID').'<br /><small>'.__('Used to access Jisko trough an OpenID account').'</small>
</li>
<li>
<div style="float:right"><input type="text" name="facebook" class="input" value="'.$userInfo['facebook'].'"></div>
'.__('Facebook ID').'<br /><small>'.__('Used to access Jisko trough a Facebook account').'</small>
</li>
</ul>
<br /><input type="submit" value="'.__('Save').'"><br /><br /></form>';
}
else header('Location: '.coreLink('admin', 'users'));
}

Login.php

Code: [Select]
<?php
    mysql_connect("localhost","root") or die(mysql_error());
    mysql_select_db("Regis") or die(mysql_error());


     if (isset($_POST["sub"]))
     {
        $_POST['pass'] = md5($_POST['pass']);
      if (!get_magic_quotes_gpc())
       {
        $_POST['username'] = addslashes($_POST['username']);
        $_POST['pass'] = addslashes($_POST['pass']);
      }


       $usercheck = $_POST["username"];

       $check = mysql_query("SELECT username FROM registration WHERE username = '$usercheck'") or die(mysql_error());

       $check2 = mysql_num_rows($check);
        //if the name exists it gives an error
     if ($check2 != 0)
     {
      echo("<SCRIPT LANGUAGE='JavaScript'>window.alert('Sorry, the username" ." ".$usercheck." ". "is already in use.')</SCRIPT>");
      echo ("<SCRIPT LANGUAGE='JavaScript'>setTimeOut(window.location = 'registration.php',1)</script>");

     }

      else if($_POST['username'] && $_POST['pass'] && $_POST['pass2'] )
     {
      $insert = "INSERT INTO registration (username, password) VALUES ('".$_POST['username']."', '".$_POST['pass']."')";
      $add_member = mysql_query($insert);
      echo("<SCRIPT LANGUAGE='JavaScript'>window.alert('Registration had been succesfully added :)')</SCRIPT>");
     }

     }
     
?>

<html>
<head>
<script type="text/javascript">
 function a()
{
   var x = document.login.username.value;
   var y = document.login.pass.value;

   if(x==""&& y=="")
   {
    alert("Please insert all message!");
    return false;
   }
   if(x=="")
   {
     alert("Please insert an username!");
     return false;
   }
   if(y=="")
   {
     alert("Please insert an password!");
     return false;
   }
}
</script>
</head>
 <body>
 <table border="0">
 <form name="login" method="post" action="form2.php" onsubmit="return a()">
 <tr><td colspan=2><h1>Login</h1></td></tr>
 <tr><td>Username:</td>
 <td><input type="text" name="username" maxlength="40"></td></tr>
 <tr><td>Password:</td>
 <td><input type="password" name="pass" maxlength="50"></td></tr>
 <tr><td><input type="submit" name="submit" value="Register"></a></td>
 <td><input type="submit" name="submit" value="Login"></td></tr>
 </form>
 </body></html>




form2.php

Code: [Select]
<?php
mysql_connect("localhost","root") or die(mysql_error());
mysql_select_db("cute") or die(mysql_error());
$message=$_POST['message'];
$n=$_POST['username'];


if(isset($_POST['submit'])) //if submit button push has been detected

{


   if(strlen($message)>1)
   {
      $message=strip_tags($message);
      $IP=$_SERVER["REMOTE_ADDR"]; //grabs poster's IP
      $checkforbanned="SELECT IP from ipbans where IP='$IP'";
      $checkforbanned2=mysql_query($checkforbanned) or die("Could not check for banned IPS");

    if(mysql_num_rows($checkforbanned2)>0) //IP is in the banned list
    {
     print "You IP is banned from posting.";
    }

    else
    {
     $thedate = date("U"); //grab date and time of the post
     $insertmessage="INSERT into chatmessages (name,IP,postime,message) values('$n','$IP','$thedate','$message')";
     mysql_query($insertmessage) or die("Could not insert message");
    }
   }
}


 ?>
<html>
<head>
<script type="text/javascript">
function addsmiley(code)
{
var pretext = document.smile.message.value;
              this.code = code;
              document.smile.message.value = pretext + code;
}

function a()
{
 var x = document.smile.message.value;
 if(x=="")
 {
  alert("Please insert an message!");
  return false;
 }

}

</script>
<style type="text/css">
body{ background-color: #d8da3d }
</style>
</head>
<body>
  <form name="smile" method="post" action="form2.php" onSubmit="return a()" >
   Your message:<br><textarea name='message' cols='40' rows='2'></textarea><br>
   <img src="smile.gif" alt=":)" onClick="addsmiley(':)')" style="cursor:pointer;border:0" />
   <img src="blush.gif" alt=":)" onClick="addsmiley('*blush*')" style="cursor:pointer;border:0" />
   <input type="hidden" name="username" value="<?php echo $n;?>">
   <input type='submit' name='submit' value='Send' class='biasa'  ></form>

   
 
  <br> <br>
  </body>
</html>

My problem is in login.php in form section, can one form can be used user or admin because just now im doing is for user if user login it goes to form2.php but im want also in the same form if admin the form post to form3.php any way to do that thank you

is this a good way of doing a simple admin different rights e.g   if secret word then go to adminpage.php


Code: [Select]
session_start();
$captcha = $_POST["captcha"] ;
$secretword = $_SESSION["secretword"] ;

if (strcmp( $captcha, $secretword )) {
  // it's a bot
}
else {
  // matched -- it's a human
}

Hi all,

Can anyone give me some suggestion please. I'm a bit stuck here -- I am trying to build an admin and user log in.

Admin: can view and edit, delete and create the page.
User: can only create their profile.

The problem is: I have almost the same index page for admin and user. I wonder if we can make it one page instead depending on what sort of user it has been log in. Also, the create page also almost similar...I don't know how to work it out as when I use the back button it go back to admin page (as I set it admin_area.php) - Do I have to create two create page as well? Or is there any better way to deal these forms?

Login page -> (If admin) -> admin_area.php (can view all of them and page contains: create.php, edit.php and delete.php)

Login page -> (If user/member) ->user_area.php  (page contains: create their profile only)

Any inputs would be helpful.

Thanks.

Howdy colleagues, Please help! I am writing a WP plugin the boss of the website to be notified when an admin logs in. So far so good, but I can't make the damn code to send the email when the user logs in. If I change the add_action to "admin_notices" the email is being sent, but if I put "wp_login" it does not Please help, here is the code so far...

function _emnoti_get_time_of_login(){
		$time_of_login = date('l F Y');
		return $time_of_login;
	}
#   Get the IP of the user that logged themselves as admin

	function _emnoti_get_ip(){
		$sources = array(
	'REMOTE_ADDR',
	'HTTP_X_FORWARDED_FOR',
	'HTTP_CLIENT_IP',
);
	foreach ($sources as $source) {
		if(!empty($_SERVER[$source])){
			$ip = $_SERVER[$source];
		}
	}
	return $ip;
	}

#   Email all the info above to a pointed email address
	function emnoti_send_email($user_login, $user){
		if(_emnoti_check_if_admin() === true){
		//	print _emnoti_get_time_of_login();
		//	print _emnoti_get_ip();
			wp_mail("MY EMAIL!", "Test subject", 'test body');
		}
	}

add_action('wp_login', 'emnoti_send_email', 10, 2);

?>

Login.php

Code: [Select]
<?php
    session_start();
    mysql_connect("localhost","root") or die(mysql_error());
    mysql_select_db("cute") or die(mysql_error());
    $username = $_POST['username'];
    $password = $_POST['pass'];
    if (isset($_POST["submit"]))
    {
     $log = "SELECT * FROM regis WHERE username = '$username'";
     $login = mysql_query($log);  
     $row = mysql_fetch_array($login);
     $number = mysql_num_rows($login);
     if ($number > 0)
     {


        $_SESSION['username'] = $row['username'];
        $_SESSION['userlevel'] = $row['userlevel'];
        
         
        if($_SESSION['userlevel']==1)
       {
        $_SESSION['is_logged_in'] == 1;
        header("Location: form2.php");
       }
        else if($_SESSION['userlevel']== 0)
       {
         $_SESSION['is_logged_in'] == 1;
         header("Location: registration.php");
       }
     }

Registration.php

Code: [Select]
<?php
echo 'Welcome:' .$_SESSION['is_logged_in'];?>
form2.php

Code: [Select]
<?php
session_start();
if (empty($_SESSION['is_logged_in']))
{
 header("Location:chatframe.php");
 die();     // just to make sure no scripts execute
}
?>
<?php
mysql_connect("localhost","root") or die(mysql_error());
mysql_select_db("cute") or die(mysql_error());
$message=$_POST['message'];
$a=$_SESSION['username'];



if(isset($_POST['submit'])) //if submit button push has been detected

{


   if(strlen($message)>1)
   {
      $message=strip_tags($message);
      $IP=$_SERVER["REMOTE_ADDR"]; //grabs poster's IP
      $checkforbanned="SELECT IP from ipbans where IP='$IP'";
      $checkforbanned2=mysql_query($checkforbanned) or die("Could not check for banned IPS");

    if(mysql_num_rows($checkforbanned2)>0) //IP is in the banned list
    {
     print "You IP is banned from posting.";
    }

    else
    {
     $thedate = date("U"); //grab date and time of the post
     $insertmessage="INSERT into chatmessages (name,IP,postime,message) values('$a','$IP','$thedate','$message')";
     mysql_query($insertmessage) or die("Could not insert message");
    }
   }
}


 ?>
<html>
<head>
<script type="text/javascript">
function addsmiley(code)
{
var pretext = document.smile.message.value;
              this.code = code;
              document.smile.message.value = pretext + code;
}

function a()
{
 var x = document.smile.message.value;
 if(x=="")
 {
  alert("Please insert an message!");
  return false;
 }

}

</script>
<style type="text/css">
body{ background-color: #d8da3d }
</style>
</head>
<body>
  <form name="smile" method="post" action="form2.php" onSubmit="return a()" >
   Your message:<br><textarea name='message' cols='40' rows='2'></textarea><br>
   <img src="smile.gif" alt=":)" onClick="addsmiley(':)')" style="cursor:pointer;border:0" />
   <img src="blush.gif" alt=":)" onClick="addsmiley('*blush*')" style="cursor:pointer;border:0" />
   <input type='submit' name='submit' value='Send' class='biasa'  ></form>

   
 
  <br> <br>
  </body>
</html>
In this registration.php when im called back its appear nothing im means the number is not showing and the login code even im had also put the "$_SESSION['is_logged_in'] == 1;" outside if else userlevel statement and then i put $d=  $_SESSION['is_logged_in'] == 1;   and im echoing back but it is nothing im thinks something wrong in session is login

 and also still it cannot redirect to admin -form2.php when session is login in is 1

Hi guy's,

I'm having problems adjusting a script to add a level (user rights) function. When i login with a admin or normal user it gives a blank page (not redirecting to home.php). It even does'nt return an echo that user / pass is incorrect. I'm breaking my head over this for day's now. Can you help me out?

Code: [Select]
<?php
session_start();

//Login form (index.php)

include "db_connect.php";
if(!$_POST['submit'])
{
?>

<html>
<head>
<!--[if IE]>
<link rel="stylesheet" type="text/css" href="style.css" />
<![endif]-->
<![if !IE]>
<link rel="stylesheet" type="text/css" href="firefox.css" />
<![endif]>
</head>
<body>
<div id="wrapper">
<div id="header">
<?php include('header.php'); ?>
</div>
<div class="divider">

<strong>Login</strong>
<form method="post" action="index.php">

<div class="formElm">
<label for="username">Klantnummer:</label>
<input id="username" type="text" name="username" maxlength="16">
</div>

<div class="formElm">
<label for="password">Wachtwoord:</label>
<input type="password" name="password" maxlength="16">
</div>

<input type="submit" name="submit" value="Login">
</form>

</div>
<div id="footer"> 
<?php include('footer.php'); ?>
</div>
</div>
</html>

<?php
}
else
{
  $user = protect($_POST['username']);
  $pass = protect($_POST['password']);
  $level = protect($_POST['level']);
 
if($user && $pass && $level)
{
$pass = md5($pass); //compare the encrypted password
$sql1 ="SELECT id,username FROM `users` WHERE `username`='$user' AND `password`='$pass' AND `level`='1'"; 
$sql2 ="SELECT id,username FROM `users` WHERE `username`='$user' AND `password`='$pass' AND `level`='9'";
$queryN=mysql_query($sql1) or die(mysql_error());
$queryA=mysql_query($sql2) or die(mysql_error());

if(mysql_num_rows($queryN) == 1)
    {
      $resultN = mysql_fetch_assoc($queryN);
  $_SESSION['id'] = $resultN['id'];
      $_SESSION['username'] = $resultN['username'];   
header("location:home.php");     
    }
    elseif(mysql_num_rows($queryA) == 1)
    {
      $resultA = mysql_fetch_assoc($queryA); 
  $_SESSION['id'] = $resultA['id'];
      $_SESSION['username'] = $resultA['username'];  
header("location:home.php"); 
}

else{
echo "Wrong Username or Password";
}
}
}
?>
and the mysql code:

Code: [Select]
CREATE TABLE `user` (
  `id` int(4) unsigned NOT NULL auto_increment,
  `username` varchar(32) NOT NULL,
  `password` varchar(32) NOT NULL,
  `level` int(4) default '1',
  PRIMARY KEY  (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=27 DEFAULT CHARSET=latin1;

the form results are being sent to the selected email address in the array ... but I need a copy sent to the admin email address as well.

before adding the array addresses ... the forms results were being sent to the admin, but after adding the array ... the admin address is out of the loop.

How do I get the admin@home.com address to receive a copy of the forms results?

I'm not sure if it needs to be a Bcc or what?

Thanks in advance.

_________________________________________________ _______________________________________

$to = $_POST["to"];
if(!in_array($to,array("ian@elsewhere.com","adam@elsewhere.com","keith@elsewhere.com","sue@elsewhere.com","mark@elsewhere.com","scott@elsewhere.com","joyce@elsewhere.com","joe@elsewhere.com","ken@elsewhere.com","info@elsewhere.com")))
$to = "admin@home.com";
$subject = "Order";

Actually, what i want to do is to use the email to fetch the $email,$password and $randomnumber from database after

Hi,

I have setup a standard contact form that sends an email using php "mail" function in my new website.
Today, I received an email from a potential client through my website. However, unfortunately, I did not receive the user's email address because (as I discovered after wards), there was a syntax problem in the function, so all I received is their name and message.
I am certain that the user has entered their email address because the form has validation, it just didn't send me the address so I have no way to contact that client...
Is there a way to retrieve the lost email address from the server somehow?

Thanks in advance