PHP - Check Mysql_query Result True Or False

Hey Everyone, I want to start out by saying thanks in advance for reading this. Since I started working with the XAMPP package this community has been a great resource, though this is my first post.  most of my work has been modifying existing stuff in our network, this is my first project from scratch.

I am working on an access control project where I am storing site names and RFID tags in a table, and using PHP to check for existing records. Basically, I want to submit 2 credentials from a host (site and RFID), check if they exist together in the table, if so return TRUE or 1, if not return FALSE or 0. I am new to both PHP and MySQL (although I took a course years ago) so I am looking here for help.

On this server I have XAMPP installed and everything I need running. I have a table and created a few records for testing. My current trouble is getting PHP to return the proper values for the SQL query. The SQL query works fine, I think - it returns the number of rows that match and that record.  I'm not sure this is the result I need to be able to deal with the way I want.  Using other resources my current PHP statement looks like this:
Code: [Select]
if(mysql_num_rows(mysql_query("SELECT * FROM `users` WHERE 'site_name' LIKE 'berland' AND 'card_id' LIKE '290093C84E' LIMIT 0 , 30"))>0){echo '1';}
   else
   {echo '0';} So, my table has the entry as noted in this query above. Final one will be dynamic where the host will be sending those values - I will likely need help with that as well, but small steps first.;-) Anyway, I was playing around with the end statement >0{echo '1';} but wasn't able to make it do what I want.
Any help is appreciated. Thank you.

Aaron

soo i get info from a form and i want to search for it in my db .. if i find user_name AND user_password the $result returns true .. otherwise false ..

<?php require_once("../includes/connection.php"); ?>
<?php
$user_name=$_POST["user_name"];
$user_password=$_POST["user_password"];
?>
<?php
$query = "SELECT *
          FROM users
          WHERE  '{$user_name}' = user_name
          AND '{$user_password}'= user_password
          ";
$result = mysql_query($query,$connection);
if($result==false){ 
redirect("../index.php");}
elseif($result==true){
redirect("../welcome.php");
}
?>
<?php //close connection!
mysql_close($connection);
?>


but the problem is that it always returns TRUE !!!!
whats the problem here exactly ???

Does anyone see anything wrong with the SQL?  This function keeps returning false.

Thank you for your time.

Code: [Select]
function insert_survey1($survey1_anwers) {
  // extract order_details out as variables
  extract($survey1_anwers);
 
  $username = $_SESSION['valid_user'];
  $conn = db_connect();

  // select user_id based on the entered data
  $query = "SELECT user_id FROM user WHERE
gender = '".$gender."',
birth_range = '".$birth_range."',
degree_year = '".$degree_year."'
username = '".$username."'";

  $result = $conn->query($query);

  //if the resulting user_id exists (AND has the POST data just entered, since the query must match those to return a row) ,
  if($result->num_rows>0) {
    //return the current row of the result set as an object and place it into user variable
    $user = $result->fetch_object();
//set variable for user_id to the fetched user object data representing the user_id int he db( because it was fetched from the sql select result)
    $user_id = $user->user_id;
//update the fields since the user exists already.
$query = "UPDATE user
SET gender = '".$gender."',
birth_range = '".$birth_range."',
degree_year = '".$degree_year."'
WHERE user_id = '".$user_id."'";

// $query = "UPDATE `alumni_survey`.`user`
// SET `gender` = '".$gender."',
// `birth_range` = '".$birth_range."',
// `degree_year` = '".$degree_year."'
// WHERE `user`.`user_id` = '".$user_id"'";
  } else {
//otherwise, if the user doesn't exist already insert this new data.
    $query = "INSERT INTO user (gender, birth_range, degree_year)
VALUES('".$gender."','".$birth_range."','".$degree_year."')
WHERE user_id = '".$user_id."'";
    $result = $conn->query($query);

    if (!$result) {
       return false;
    }
  }
 
  return $user_id;
}

so im trying this     $file  is not a .txt file   if ($file != "." && $file != ".." && !is_dir("uploads/$fuser/$file")  && (pathinfo("uploads/$fuser/$file", PATHINFO_FILENAME)!= "txt")    i tried this but doesnt work

How can I check if a function has returned false.. I know theirs the following way:

if (!checkdate($month, $day, $year)) {
//the function has returned false
}

But is their another way (beside using the ! operator) perhaps === FALSE (not sure if that'd work so asking)?

I have a web server which contains a public site and a private site. I want to be able to test for public or private using the page title and return the appropriate header which contains a different banner, css etc.

Firstly - the syntax below seems to be incorrect because it doesnt work correctly.
More importantly how do I add all the values to an array and than iterate through it to check for a matching page title?

Code: [Select]
public function publicSite() {
if ($this->getTitle()== 'Home' || 'About Us'||'Registration' || 'Sitemap' || 'Contact Us' || 'Useful Links' || 'Feedback') {
return true;
}
return false;
}
Then later on I would have:
Code: [Select]
if ($this->publicSite()) {
require($ROOT.'interface/pages/publicheader.php');
}
else {
require($ROOT.'interface/pages/privateheader.php');
}

Thanks heaps!

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/aci/docs/admin/hours.php on line 20

Code: [Select]
<?php 
$user = $_SESSION['myusername'];
$result = mysql_query("SELECT * hours WHERE member='$user'");

while ($row = mysql_fetch_array($result)){
echo $row['date'] . " " . $row['time'] . "<br />";
}

?>
Code: [Select]
CREATE TABLE `hours` (
  `hoursID` int(5) NOT NULL auto_increment,
  `member` varchar(20) NOT NULL default '',
  `date` date NOT NULL default '0000-00-00',
  `time` time NOT NULL default '00:00:00',
  PRIMARY KEY  (`hoursID`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=7 ;

--
-- Dumping data for table `hours`
--

INSERT INTO `hours` VALUES (4, 'aci', '2010-11-30', '14:31:39');
INSERT INTO `hours` VALUES (2, 'aci', '2010-11-30', '14:31:08');
INSERT INTO `hours` VALUES (3, 'aci', '2010-11-30', '14:31:23');
INSERT INTO `hours` VALUES (5, 'aci', '2010-11-30', '14:31:40');
       

hi there,

is there a difference between if($var == false) and if(false == $var)

thankyou!

$looponce = 1;
foreach ($this->info as $k => $v) {
if ( (($k == 'subject') && ($v['required'])) && (!$this->settings['customSubject'])) {
for ($i = 0; $i <= 0; $i++) {
$output[] = $this->display_errors('error_system_subject');
}
}
if ( (($k == 'name') && (!$v['required'])) || ((!array_key_exists("name", $this->info)) && ($looponce == 1)) ) {
$output[] = $this->display_errors('error_system_name');
$looponce++;
}
}

That is my loop that i check things in. What i'm more interested in is the name if statement.

If currently checks for a name key in an array(below) and makes sure that it is set to required. If it's not set to required, print out a system error and die()'s.

I'm looking for ways to remove the need for program errors and just change them to what is needed to run.

What i know how to do is, get into the inner array, what i don't know is how to edit the data and put it back exactly as it was given to me. The inner array data can be put back in any order, but the outer array must be in exact order as it was given.


above code $this->info = $formdata;

$formdata = array(
'name' => array('name'=>"Full Name", 'required'=>false, 'type'=>'text'), # This needs to be required=>true, but i can't trust the user, which is why i have the error.
'telephone' => array('name'=>"Telephone", 'required'=>false, 'type'=>'phone'),
);


Any help is greatly appreciated, also am i doing the foreach loop in the code above in an efficient manner or is there another way?

I am really lost here with this date issue of mine. The below code is the last part of a query:
Code: [Select]
$defendercheck_3 = $row_checkifattacked3['atdate'];
$defendercheck1_3 = strtotime("$defendercheck_3");
$defendercheck2_3 = date("D", $defendercheck1_3);
The query does not return any results as expected, but when echoing the various steps I get following:

echo "$defendercheck3"; = nothing (as expected)

echo "$defendercheck1_3"; = nothing (as expected)

echo "$defendercheck2_3"; =  result! (NOT expected)

why does it return anything on "date("D", $defendercheck1_3)" when "$defendercheck1_3" is blank?

Hey Guys,

Im having problems with my code. What im trying to do is run a mysql query and show the results, but if the query returns no data, echo out "No incoming requests!"

Here is my code:


<?

$check = "SELECT * FROM requests WHERE club='" . $_SESSION['club'] . "' AND team='" . $_SESSION['team'] . "' AND accepted='0'";
$result=mysql_query($check);

if (mysql_num_rows($result) == 0) {

while ($getinfo = mysql_fetch_array($result)) {
            $time = $getinfo["time"];
    $who = $getinfo["player_name"];
    $whofor = $getinfo["toplayfor"];
    $from = $getinfo["team"];
    $idp = $getinfo["player_id"];

echo "<a href='profile.php?id=".$idp."&team=".$from."'>".$who." </a><div style='float:right;'>(".$from.")</div><br />";
echo "<div style='margin-top: 2px;'></div>";
echo date('l, F jS, g:ia',$time);
echo "<br /><div style='margin-top: 2px;'></div><a href='accept.php?playerid=".$idp."&toplayfor=".$whofor."'>Accept</a> | Decline";
echo "<div id='newsline'></div>";
}
}

 else {
 echo 'No incoming requests'; }

?>

Could someone help me out here?

Thanks Heaps!

Hi, why won't this work, there is no error messages so it gets to this point, but won't redirect???
(Obviously a lot is missed out here)

$query = mysql_query("SELECT * FROM `users` WHERE `username`='$username'");
if ($username==$dbusername&&$password==$dbpassword)
{ 
$_SESSION['user'] = $username;

while($row = mysql_fetch_array($query)){ 
$type = $row['Type'];
if ($type=="0") {
header("Location: chefpanel.php");
}else{
header("Location: restpanel.php");
}
}  

}
else
 $errors[] = 'Password Incorrect';
}
else
 $errors[] = 'Username Incorrect';

OK So I have a quick question... how would I go about making a query like:
mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password' AND key='$key' ");
You see, theres an error:
Quote

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' key='1234' LIMIT 1' at line 1


I know this is a simple issue, and I know you cant keep creating AND's inside the query, but how would I do it? I've never attempted to use more than one AND before, so its new to me even though I'm a experienced PHP Developer. Thanks in advance!

Hey guys, I've been playing around with this open source php game, I'm having problems with the registration system. For some reason the script is echoing back that there is no password in the password fields. When in fact there is:

Add_player.php:
Code: [Select]
<?php

session_start();
session_register("pid");
include("common.inc");
include("date.inc");
include("header.inc");
dbConnect();
$res = mysql_query("select id from $dbName.pdm_players where name=\"$name\"") or die(mysql_error());

if ($name == "" || $password1 == "")
{
        echo "<center><div class=\"sheader\">Oh dear me!</div>
         You have to actually enter a name and password!";
        $name = "";
        include("character_form.inc");
        echo "</center>";
        include("footer.inc");
        return 0;
}
if ($name == $password1)
{
echo "<center><div class=\"sheader\">Oh dear me!</div>
You can't make the password the same as the name.  
People will guess your password!";
include("character_form.inc");
        echo "</center>";
        include("footer.inc");
        return 0;
}
if (strlen($password1) < 6)
{
 echo "<center><div class=\"sheader\">Oh dear me!</div>
Passwords must be at least 6 characters, otherwise they are easy to guess!";
include("character_form.inc");
        echo "</center>";
        include("footer.inc");
        return 0;
}

if (mysql_fetch_row($res))
{
        echo "<center><div class=\"sheader\">Oh dear me!</div>
         Player $name already exists, try a different name.";
        $name = "";
        include("character_form.inc");
        echo "</center>";
        include("footer.inc");
        return 0;
}
if ($password1 != $password2)
{
        echo "<center><div class=\"sheader\">Oh dear me!</div>";
        echo "The two passwords didn't match - type carefully now!.";
        include("character_form.inc");
        echo "</center>";
        include("footer.inc");
        return 0;
}
echo "<div class=\"sheader\">Registration for $name successful</div>";
$cp = crypt($password1);
$dateArray = getdate(time());
$likeNowScoob = $dateArray["year"] . "-" . $dateArray["mon"] . "-" . $dateArray["mday"];
if ($character < 1 || $character > 9) { die("you are an idiot"); }
pdm_characters();
$res =  mysql_query("select type from  $dbName.pdm_characters where cid = $character")  or die(mysql_error());
$t =  mysql_fetch_row($res);
pdm_stuff();
$specRes =  mysql_query("select sid from $dbName.pdm_stuff where sid >= 28 and sid <= 33 and type like \"%$t[0]%\"") or die(mysql_error());


$res =  mysql_query("BEGIN")  or die(mysql_error());
$res =  mysql_query("insert into $dbName.pdm_players (name, used, dob, cpass, char_id, roundswon, evo, aWeapon, dWeapon) VALUES (\"$name\", 1, \"$likeNowScoob\",  \"$cp\",  $character, 0,0,0,0)") or die(mysql_error());
$res =  mysql_query("select id from $dbName.pdm_players where name=\"$name\" for update") or die(mysql_error());
$row = mysql_fetch_row($res);
$pid = $row[0];
$res = mysql_query("insert into $dbName.pdm_league (id, highest, days_no_1, yesterday, longPoints) VALUES ($pid, 16777215, 0, 16777215, 0)") or die(mysql_error());
$res =  mysql_query("insert into $dbName.pdm_stats (id, level, attack, defence, health, speed, exp, ko, healthpercent, fights) VALUES ($pid, 1, 100, 100, 100, 100, 0, 0, 10, 0)") or die(mysql_error());
$res =  mysql_query("insert into $dbName.pdm_clanmembers2 (id, clanTag, applyTag, utype) VALUES ($pid, NULL, NULL, '')")  or die(mysql_error());
$res =  mysql_query("insert into $dbName.pdm_money (id, bank, wallet, bankdate) VALUES ($pid, 0,0, '0000-00-00')")  or die(mysql_error());
while ($row = mysql_fetch_row($specRes))
{
$res =  mysql_query("insert into $dbName.pdm_specials (id, sid, qty, switch) values ($pid, $row[0], 0, 1)")  or die(mysql_error());
}
$res =  mysql_query("COMMIT") or die(mysql_error());


session_register("playerName");
$playerName = stripper($name);

echo "<P><diV>Welcome  $playerName, click the Fight link down the left to fight your first opponent.</div>";
include("main_screen.inc");
include("footer.inc");
?>

Character_form.inc:

Code: [Select]
<center>
<form method="post" action="add_player.php">
<P>
<table cellpadding="0" cellspacing="0"><tr><td align="center">
<?php
dbConnect();
pdm_characters();#check HEAP table exists
$res = mysql_query("select cid, name, type from $dbName.pdm_characters order by type") or die(mysql_error());
$marker = "X";
$firstOne = 1;
$cTypes["A"] = "Alien";
$cTypes["M"] = "Magic";
$cTypes["S"] = "Spirit";
while ($row = mysql_fetch_row($res))
{
        if ($marker != $row[2]) #new type (alien/magic etc)
        {
                if ($marker != "X")
                {
                        echo "</table>\n";
                }
                $cn = $cTypes[$row[2]];
                echo "\n<table cellpadding=\"0\" cellspacing=\"0\" border=1>
                <tr><td colspan=\"3\" align=\"center\"><div class=\"sheader\"> $cn characters</div></td></tr><tr bgcolor=\"#efefef\">";
                $marker = $row[2];
        }
        echo "\n<td><table><tr><td align=center>$row[1]</td></tr><tr><td align=center>
        <img alt=\"Pick me!\" src=\"images/$row[0]0.gif\"></td></tr><tr>
        <td align=center><input type=\"radio\" name=\"character\" value=\"$row[0]\"";
        if ($firstOne and $character == "")
        {
                $firstOne = 0;
                echo " CHECKED ";
        }
        if ($character == $row[0])
        {
                echo " CHECKED ";
        }
        echo "></td></tr></table></td>";
}
echo "</tr></table>
<table width=\"551\" cellpadding=0 cellspacing=0><tr><td colspan=\"3\"><div class=\"sheader\">character details</div></td></tr>
<tr><td align=\"center\">Name<br><input size=20 maxlength=20 type=text name=\"name\" value = \"$name\"></td>";
?>
<td align="center">Password<br><input type="password" name="password1"  size=20 maxlength=20></td>
<td align="center">Password again<br><input type="password" name="password2" size=20 maxlength=20></td></tr>
<tr><td colspan="3" align="center"><input type="submit" value="Register my character"></td></tr></table>
</td></tr></table>
<hr>
</form>
</centER>

Anyone able to offer up any advice or where its going wrong, If I remove the validation stuff, it still doesn't insert the user into the database.

Cheers

I am getting a "mysqli_query() expects parameter 1 to be mysqli, null given" error.

the code I am using is below but simplified. connect() does connect to the database without throwing any errors but when I get down to query() I get the above error.

public function connect() {
  mysqli_connect(self::DBHOST, self::DBUSER, self::DBPASS, self::DBNAME);
}
public function query($query) {
                 mysqli_query(self::connect(), $query);
}


below is what I am using to call the function. I am not sure if I have to pass the $link in the query function too. I have tried but it didn't seem to do any better.

$link = db::connect();

$query = "SELECT name FROM plugins";

db::query($query);


I am sure this is something simple that I have overlooked but I am new to this and still learning.

Thank you for any help you can provide.