PHP - Newbie Wondering About Ver. Differences; 4.4.9 V. 5.x

Commented in red is the code that doesn't produce anything. It is 3/4 of the way down the page..
Thanks for looking!


Code: [Select]
<?php
error_reporting(E_ALL);
ini_set("display_errors", 1);

$host= "";
$db_name= "";
$db_user= "";
$db_password= "";

ob_start();

if(isset($_POST['newBidder'])) {
$newBidder= isset($_POST['newBidder']) ? $_POST['newBidder'] : '';
$bidderId= $newBidder;

mysql_connect("$host", "$db_user", "$db_password")or die("cannot connect to server");
mysql_select_db("$db_name")or die("cannot select DB");

$sql="SELECT * FROM bidders WHERE biddersId='$bidderId'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==0){
// Add $biddersId and redirect to anypage
mysql_Query("INSERT INTO bidders (biddersId)
VALUES ('$bidderId')");
 header("Location: index.php");
exit();
  }
}

////////////////////////////////////

if(isset($_POST['deleteBidder']))
{
$deleteBidder= isset($_POST['deleteBidder']) ? $_POST['deleteBidder'] : '';
mysql_connect("$host", "$db_user", "$db_password")or die("cannot connect to server");
mysql_select_db("$db_name")or die("cannot select DB");

mysql_query("DELETE FROM bidders WHERE biddersId='$deleteBidder'");
 header("Location: index.php");
exit();
}

////////////////////////////////////

if (isset($_POST['itemDescription'], $_POST['itemPrice'], $_POST['winningBidder'], $_POST['itemQty']))
{
$itemDescription= isset($_POST['itemDescription']) ? $_POST['itemDescription'] : '';
$itemPrice= isset($_POST['itemPrice']) ? $_POST['itemPrice'] : '';
$winningBidder= isset($_POST['winningBidder']) ? $_POST['winningBidder'] : '';
$itemQty= isset($_POST['itemQty']) ? $_POST['itemQty'] : '';

mysql_connect("$host", "$db_user", "$db_password")or die("cannot connect to server");
mysql_select_db("$db_name")or die("cannot select DB");

$sql="SELECT * FROM bidders WHERE biddersId='$winningBidder'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);
// If result matched, table row must be 1 row

if($count==0){
echo "That Bidder Number is NOT logged in, ";
echo "would you like to set this bidder as active?";
echo " Enter 1 for NO or 2 for YES";
echo "<form action= \"process.php\" method= \"POST\">";
echo "<input type =\"text\" name= \"logUser\"/>";
echo "<input type= \"submit\" value = \"Submit\"/>";
exit();
  }
}
$logUser= isset($_POST['logUser']) ? $_POST['logUser'] : '';
if ($logUser= '1') {
header("Location: inprogress.php");
exit();
}

if ($logUser= '2'){

// Add $biddersId and redirect to anypage
mysql_connect("$host", "$db_user", "$db_password")or die("cannot connect to server");
mysql_select_db("$db_name")or die("cannot select DB");

mysql_Query("INSERT INTO bidders (biddersId)  ////This won't add biddersid to database///////[
VALUES ('$winningBidder')");

 mysql_query("INSERT INTO transactions       /////This won't add details to the database either?/////
 VALUES('$itemDescription', '$itemPrice','$winningBidder', '$itemQty', '$totalPrice')")
or die(mysql_error());   
header("Location: inprogress.php");
exit();
   }

//////////////////////////////////////// 




echo "<font color= \"red\" face=\"calibri\" size=\"4\">That bidder is already logged, Please press your browsers back button and try again.</font>";

ob_end_flush();

?>

I have one database with 2 tables as follows
bidders table ONLY has biddersId field;
transactions has (in order) itemDescription, itemPrice, bidderId, itemQty, totalPrice

everything else works, except updating the database with the above?

Am I doing something wrong in MySql. I have all eroors on , but i get NONE when running the script?

I'm having a lot of trouble validating things using custom regex. I'm trying to validate usernames without spaces using numbers and/or letters with optional underscores.

This is my code but it isn't validating anything, nothing is ever validated.

Whatever I write it says the username isn't valid.

if(isset($_POST['submit'])){
if(filter_var($_POST['value1'], FILTER_VALIDATE_REGEXP, array("options"=>array("regexp"=>"/^[\w.-]{{3},{28}}$/")))){
echo "Value is a valid username.";
} else {
echo "Value is NOT a valid username.";
}
}
?>


Any help regarding this issue will be greatly appreciated.
Thanks!

Hi All,

I created a website which runs perfectly on one server but now I transferred the website to another server I get all kinds of errors like,
Undefined variables and so on. How is this possible. I thought it was all in the code.

Marco

After being forced to have the server upgraded I am having problems with my 'reset password' pages.

What I wondered is, has there been any changes to PHP or MySQL between these versions ?

The PHP version was 5.2.9 and is now 5.2.14
The MySQL version was Client API version 5.0.45 and is now Client API version 5.0.90

Some one clicks a link like this.

www.site.com/resetpw.php?pwr=a1b2c3d4e5f6

the code would be a 32 char hash that is checked against the database, but my code now (which was never changed before or after the server change) seems to find the database line and update it but show the message that it was invalid ?  instead of showing the the message, your password will be sent to you after changing the DB

does anyone have any ideas ?

Code: [Select]
<?php
  include('includes/connection.php');
  include('includes/functions.php');
  date_default_timezone_set('Europe/London');

  if(isset($_POST['reset']) && trim($_POST['reset']) == 'Reset') {

    $email    = mysql_real_escape_string($_POST['email']);

    $checkVerify = mysql_query("SELECT account_id FROM customers WHERE email='$email' AND verified='No' LIMIT 1");
    $checkBanned = mysql_query("SELECT account_id FROM customers WHERE email='$email' AND suspended='Yes' LIMIT 1");

    if(!$email) {
      $thisError = 'Please enter your e-mail address.';
    } else if(!$password) {
      $thisError = 'Please enter your password.';
    } else if(mysql_num_rows($checkVerify)) {
      $thisError = 'Your account has not been approved by an Admin.';
    } else if(mysql_num_rows($checkBanned)) {
      $thisError = 'Your account has been suspended by an Admin.';
    } else {
      $password = md5($password);

      $checkAccount = mysql_query("SELECT account_id FROM customers WHERE email='$email' AND password='$password' LIMIT 1");
      if(mysql_num_rows($checkAccount)) {
        $_SESSION['FM_user'] = $email;
        header('Location: members.php'); exit;
      } else {
        $thisError = 'Your e-mail address and/or password is incorrect.';
      }
    }
  }

  include('includes/header.php'); 
?>
<body>

  <div class="headerBar">
<?php include('includes/navigation.php');?>
  </div>

  <?php headerText(); ?>

  <div class="content">
    <div class="widthLimiter contentStyle">
      <div class="formWrapper">
        <?php if(isset($thisError)) { echo '<div class="errorDiv">',$thisError,'</div>'; } ?>
        <?php if(isset($thisSuccess)) { echo '<div class="successDiv">',$thisSuccess,'</div>'; } ?>
        <span class="subHeader">Initiate Password Reset</span>
<?php
// include("sendmail2010.php");
$securitycode = ($_GET['pwr']);
//echo("53:security:".$securitycode.":<br>");
if ($securitycode != "") { $sql = "SELECT * FROM `customers` WHERE `changeofpasswordcode` = '".mysql_real_escape_string($securitycode)."' LIMIT 1";
//echo("54:sql:".$sql.":<br>");
$res = mysql_query($sql) or die(mysql_error());
//echo("57:<br>");
if (mysql_num_rows($res) != 0) {
//echo("59:sql:".$sql.":<br>");
$customerName = mysql_result($res, 0 ,'fullname');
$email = mysql_result($res, 0 ,'email');
$yourpasswordtologin = CreateNewPassword();
$format = 'Y-m-d H:i:s'; $date = date( $format );
$sql = "UPDATE `customers` SET `password` = '" . md5($yourpasswordtologin) . "', `password2` = '" . mysql_real_escape_string($yourpasswordtologin) . "', `changeofpasswordcode` = '', `newpasswordrequestedon` = '" . $date . "' WHERE `changeofpasswordcode` = '" . mysql_real_escape_string($securitycode) . "' LIMIT 1";
//echo("65:sql:".$sql.":<br>");
$res = mysql_query($sql) or die(mysql_error());
$_SESSION['customerName'] = $customerName;
$_SESSION['customerEmail'] = $email;
$_SESSION['generatePass'] = $yourpasswordtologin;
//echo("send email");
$sendemailnow = createEmailSend('newPassword', 'Your new password', 'customer');
//echo("email sent ".$sendemailnow);
?><div style="margin: 30px;">Thank you for completing your password reset process.<br><br>An email with a randomly generated password has been sent to your email address, please check your email account for this email as you will need this password to access your <?=$_SESSION['siteName'];?> account.<br><br><strong><em>Please check your 'spam folder' in case our emails are showing up there.</em></strong><br><br>You may now <a href="<?=$_SESSION['webAddress'];?>">sign in</a> to your account.</div><?php
//echo("72:end of IF send email<br>");
} else {
//echo("74 bad link<br>");
?><div style="margin: 20px;">Sorry the link you clicked is and old password reset link or is not valid, please delete the email.<br><br>If you were trying to reset your password, please click the<br>'Member Login' link on our site and then click the 'Reset Password' link.</div><?php
//echo("end of IF bad<br>");
}
//echo("78:end of first IF<br>");
} ?>
      </div>
    </div>
  </div>
<?php include('includes/footer.php');?>
</body>
</html>

Hi,

I have 2 db fields with timestamp datatype (ClockingInDate and ClockingOutDate) and i am trying to get the difference between them then update the new db called duration with float datatype field.

PHP:

if (isset($_POST["clockout"])){
		
		$result3=mysqli_query($con, "select * from attendance_records where OracleID='$session_id'")or die('Error In Session');
		$row3=mysqli_fetch_array($result3);
		
		$end_date =  $row3['ClockingOutDate'];
		$startdate = $row3['ClockingInDate'];
		$diff = strtotime($end_date) - strtotime($startdate);
		$fullDays    = floor($diff/(60*60*24));
		$fullHours   = floor(($diff-($fullDays*60*60*24))/(60*60));   
		$fullMinutes = floor(($diff-($fullDays*60*60*24)-($fullHours*60*60))/60);  

		$duration = $fullMinutes;
		$query3=mysqli_query($con, "update attendance_records set Duration = '$duration' where OracleID='$session_id' and isdone='$isdone'")or die('Error In Session');
		header('location:index.php');
		
	}

 

* come to think of that again, i always get zero, is it because it never reaches days in my program! I am using this for attendance system so only hours and minutes are used. Please help.

Edited March 13, 2020 by ramiwahdan
thoughts

I am making a php/ajax chat, when a post is sent to the chat, a timestamp using mktime() is stored in the database to show when that post was sent. My concern is that I am from England and my timestamp is GMT +0. Will people from different locations around the world see the wrong times that other users post into the chat? If so what do I need to do to make this work ideally?

Thanks

With a prior version of Php, this code was acceptable.

$query = sqlsrv_query($conn, $sql);if ($query === false){  exit("<pre>".print_r(sqlsrv_errors(), true));}while ($row = sqlsrv_fetch_array($query)){  	$sumUsageKWH += $row[totalUsage];}sqlsrv_free_stmt($query);?> 

Now, with php 5.6.3, I have to add  a couple of things. 

$query = sqlsrv_query($conn, $sql);if ($query === false){  exit("<pre>".print_r(sqlsrv_errors(), true));}while ($row = sqlsrv_fetch_array($query)){  	$sumUsageKWH += $row['totalUsage'];}sqlsrv_free_stmt($query);?> 

due to an error prompt.  Once I make the corrections, I have a new errors all over the place.  Is there a difference in defining a variable with 5.6.3? 
Edited by Butterbean, 10 January 2015 - 01:49 PM.

Can someone explain the difference between the following?

function a(array $var) { }

function a($var = array()) { }

function a(Array $var) { }

I have seen these recently in a script I am modifying, but not 100% sure as to what each one does. Well I know what the middle one does, but am a little confused on the 1st and 3rd one.

Thanks!
Dennis

I have Win 7 home premium, Apache 2.2 (installed using the .msi) and PHP 5.2.14 (downloaded as "php-5.2.14-Win32-VC6-x86.zip", installed manually, it works) on both machines. The other is 32-bit and the other is 64-bit, both Windows 7 Home Premium.

When I run the exactly same script on one machine, it does what it is supposed to (32-bit), but on the 64-bit it does not.

Basically this appears in two situations (so far): I have a script that reads a (xml) file into a simplexml object, and if this is not successful, it prints an error message. On the 32-bit machine I can import (read) another xml file at once once the first one is processed (into a sqlite database), but on the 64-bit machine it gives me an error originating from the fact that the script did not manage to create the simplexml object.

The other situation is when I want to open a specific PDF - file in a browser window (Firefox, the newest one, on the 32-bit machine, IE something newish on the 64-bit). The file exists, the path to the folder is in the Path environment variable, I can open it normally etc on the 64-bit machine, but when I click on a link that is supposed to open the file in a browser window I only get an error message saying that the file does not start with "%PDF....

Needless to say, the precisely same script works just fine on the 32 bit machine.

$path_to_image="D:\\path_to_folder\\";

$file_name=$_GET['file_name'];

header("Content-disposition: inline; filename=".$path_to_image.$file_name);
header("Content-type: application/pdf");
readfile($path_to_image.$file_name);

The above code is from the part that receives the file name from a form (other file).

Anyone noticed anything like this? Any suggestions? Have been trying to figure this out for days, now...

Oh, forgot: In both cases the thing is accessed as/from "localhost".

Hello, I am working on a caching class and all I have left to figure out now is the string compression. I am storing files locally on the server and may eventually expand the option for storing it in the database. But I want to reduce file size while not sacrificing speed as much as possible.

The first function I used was the bzip2 bzcompress function. It did a great job with a 92% compression rate, but I noticed a half-second to full-second delay in the decompression.

So what I would like to know is does anyone know which compression functions offer the most speed and what their compression ratios look like? This is for a simple string (well XML that I have reduced with some string replacements), so there is no pre-compression to it.

The compression libraries available to me on my server are these: zlib, zip, and bz2

Thoughts?

Thanks,
Patrick

I don't think I've asked this before have I??  can someone give me an internet KB that gives me all scenarios that warrant using singles or doubles?  as in, wrapping values, variables, and why I need to do either, and when, etc, etc....?

thanks

Edited March 29 by ajetrumpet

What are the differences and implications of UTC time and Zulu time?
  

<?php
function getArr(string $time):array
{
    $dateTime = new \DateTime($time);
    return [
        'time'=>$time,
        'timestamp'=> $dateTime->getTimestamp(),
        'dateTime' => $dateTime
    ];
}
$arr = getArr('2020-08-05');  
$arr_z = getArr('2020-08-05T00:00:00Z');  

print_r($arr);
print_r($arr_z);

echo('equal timestamps: '.($arr['timestamp'] === $arr['timestamp']?'true':'false'));

 

Array
(
    [time] => 2020-08-05
    [timestamp] => 1596585600
    [dateTime] => DateTime Object
        (
            [date] => 2020-08-05 00:00:00.000000
            [timezone_type] => 3
            [timezone] => UTC
        )

)
Array
(
    [time] => 2020-08-05T00:00:00Z
    [timestamp] => 1596585600
    [dateTime] => DateTime Object
        (
            [date] => 2020-08-05 00:00:00.000000
            [timezone_type] => 2
            [timezone] => Z
        )

)
equal timestamps: true

 

A few months ago, and a good amount of time before that, I had people telling me to use isset() instead of performing to see if the variable is empty, such as: !$_GET['']

I know the differences in the function and what they do, but when could isset() be used in a situation where it's better/more efficient then: !$_GET['']

I do use isset(), though.

Good day people,  got this open source script for a dog pedigree database on the net.  I have no programming skills at all.

Need some help with the script,  i want to change the font color of the Sire's side of the pedigree that is displayed ,  but have no idea how to do it,  any help would be appreciated.
Example of displayed pedigree -   http://www.sa-apbt.co.za/details.php?id=63854
below are the code.
Thanks in advance

<?php
function DbTriad($dogVO, $level, $generations, $childText) {
   global $THUMBNAIL_WIDTH;
   global $dogDAO;
   # do the individual.

   if ($level == $generations) {

      echo "<TD >";

   } else {

      echo "<TD ROWSPAN=" . pow(2,($generations - $level));

      echo " >";

   }

   if (($dogVO != -1) && (!empty($dogVO ))) {

      if (empty($dogVO)) {

         echo "Unknown Individual";

      } else {

         $name = $dogVO->name;

         $sireId = $dogVO->sire->id;

         $damId = $dogVO->dam->id;

         $landofbirth = $dogVO->landofbirth;

         $yearofbirth = $dogVO->yearofbirth;

         $color = $dogVO->color;

         $title = $dogVO->title;

         $photo = $dogVO->photo->thumb_ref;            
         if (empty($photo))
            $photo = $dogVO->photo->reference;
            }
         
         
         ### Highlight title w/ Blue font

         if (!empty($title)) {
            echo "<label>";
            echo "<font color=\"blue\">$title</font><BR>";
            echo "</label>";
         }

         echo '<a href="'.$_SERVER['PHP_SELF'].'?id='.$dogVO->id.'">';               

         if (!empty($photo)) {

            echo '<p><img SRC="'.$photo.'" width="'.$THUMBNAIL_WIDTH.'"></p>';

         }                               

         echo "$name</a>";
   
            

         echo "<label>";

         //if (($level <= 3) && (!empty($color))) {

         if (!empty($color)) {

            echo "<BR>$color ";      

         }

         if (!empty($landofbirth)) {

            echo "<BR>$landofbirth";      

         }

         if (!empty($yearofbirth)) {

            echo "<BR>$yearofbirth";      

         }

         echo "</label>";
      }

    else {

      echo "&nbsp;";

      if (!empty($childText) )      

         echo '<a href="addDog.php?child='.$childText.'">Add Dog</a>';

   }

   echo "</TD>";

# do the father.

   if ($level < $generations) {

      if (!empty($dogVO))

         $childText = "fatherOf_".$dogVO->id;
         
         

      else

         unset($childText);

      $dogDAO = new DogDAO();
      if (empty($sireId))
         $father = null;
      else
       $father = $dogDAO->get($sireId);         
      DbTriad($father, $level + 1, $generations, $childText);
      
               
   }

# do the mother.
   

   if ($level < $generations) {

      if (!empty($dogVO))

         $childText = "motherOf_".$dogVO->id;

      else

         unset($childText);
      
      $dogDAO = new DogDAO();
      if (empty($damId))
         $mother = null;
      else
         $mother = $dogDAO->get($damId);                  
      DbTriad($mother, $level + 1, $generations, $childText);
      
   }

# finish up.

   if ($level == $generations) {

       echo "</TR><TR>";

   }



}





# begin table

   echo '<table id="pedigree" align="center" width="96%" border="0"><tr><th colspan='.$generations.'>Pedigree of '.$dog->name.' '.$dog->title.'</th></tr>';
   

# do tree.

   $dogDAO = new DogDAO();

   $dog = $dogDAO->get($currId);

   DbTriad ($dog, 1, $generations, null);
   

# end table

   echo "</td></tr></table>";

 ?>[/php]

Hey guys, i'm not just new here but i'm new to php..

I've been trying to edit some wordpress templates i was given, but there is some code in the footer/copyright files that i really don't understand at all ..

Here is an example of the code ...

Code: [Select]
<?php $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>
Could someone please explain if there is a way of decoding this??

Thanks so much