PHP - Readfile() Problems

An image is saved in the root directory.
The page "label.php" uses "readfile" to access and display the image using code like this:

$file = '../image.jpg'; // IN ROOT DIRECTORY
$type = 'image/jpeg';
header('Content-Type:'.$type);
header('Content-Length: ' . filesize($file));
readfile($file);

The image then gets embedded into an html page and displayed like this:
Dear Customer, here is your image: <img src="label.php?label=<?= $filename ?>.jpg">

QUESTION: in the event of an error, how do I dipslay the readfile error on the customer's html page?
Even though I have error trapping in the "readfile" code in "label.php" file -- like if a parameter is missing, I'll have exit( "NO IMAGE GENERATED" ).  But this error message won't display on the customer's html page because html treats <?= $filename ?>.jpg" like it's a real image instead of displaying the readfile's "NO IMAGE GENERATED" exit error.

Make sense? No. I probably have to rewrite my question 😃

Edited Monday at 01:07 AM by ChenXiu

I have an FLV player and I am using a php file to read an FLV that is above webroot. It reads the FLV just fine, however, during its cache process or while it is still downloading, if I click on the home button (home button of the current site), the server does not respond until the FLV has been fully cached.

Now this is only occuring in firefox, chrome and IE. In safari it works fine. Who know, maybe it is a header issue. Here is my script that I pass to my FLV player

<?php
include("connect.php");
if ($_SESSION['loggedIn'] == true)
{
    $id        = $_GET['id'];

    $query    = mysql_query("SELECT video FROM reviews WHERE id = '$id'");
    $row    = mysql_fetch_array($query);

    $filename    = "../../../armsmedia/videos/".$row['video'];

    header( 'Content-Description: File Transfer' );
    header( 'Content-Type: application/octet-stream' );
    header( 'Content-Disposition: attachment; filename='.basename( $filename ) );
    header( 'Content-Transfer-Encoding: binary' );
    header( 'Expires: 0' );
    header( 'Cache-Control: must-revalidate, post-check=0, pre-check=0' );
    header( 'Pragma: public' );
    header( 'Content-Length: ' . filesize( $filename ) );
    ob_clean();
    flush();
    readfile( $filename );
    exit;
}
?>

In a PHP file [php_one.php], I wrote some PHP code that contained a form.  I used ECHO to write the HTML inside of the PHP tags.

On another PHP page [php_two.php], I wanted to show the code that was used to create the first page [php_one.php].

My first effort provided an interesting result, since the PHP code was readable.  However, all HTML code was visible in its executed form.

There was an actual input field and a submit button (not the code used to produce them) in the context of my coding.

I have tried using:

file_get_contents("FILE")
$array = file("FILE")
readfile("FILE")

All results were similar and carried the same problem.

How can I view code so that even the HTML is visible as code?

I'm trying to use the readfile() function to read a html page which has a video embedded (.swf file).

When I call the function, it seems like it just loads the html file but without the dependent files (css,js, etc)
When I call it directly it loads just fine.

Created a hyperlink 'openvideo.php?id=video' that calls this function below:

if($_REQUEST['id'] == 'video') {
   
   readfile('/usr/home/site.com/htdocs/content/videofolder/video.html');

} else {
   
   echo 'nada';
}

Any help is appreciated.

An image is secured in the root directory, to be displayed to customer in html document.

This image can be displayed as a link to a php readfile page
The readfile page uses getimagesize("../rootdir/abc.png"), headers, and readfile()
echo "<img src='READFILE.php?image_name=abcd.png'>";
-or-
The image can be displayed directly to browser using
file_get_contents("../rootdir/abc.png"), base64_encode(), and data:image;base64.
echo '<img src="data:image;base64, ' .$img. ' " style="width:5in;height:5in;">';

Which is better? Why and why not?

Thank you.

Edited yesterday at 01:15 PM by ChenXiu

Which is better? Why and why not?

An image is secured in the root directory, to be displayed to customer in html document.

This image can be displayed as a link to a php readfile page
The readfile page uses getimagesize("../rootdir/abc.png"), headers, and readfile()
echo "<img src='READFILE.php?image_name=abcd.png'>";
-or-
The image can be displayed directly to browser using
file_get_contents("../rootdir/abc.png"), base64_encode(), and data:image;base64.
echo '<img src="data:image;base64, ' .$img. ' " style="width:5in;height:5in;">';

Thank you.

I am wanting HTML to render within a table and sourcing the data from another file. In an attempt to do this, I tried:
Code: [Select]
<TABLE class="main">
                <TR>
                        <TD>
                                <?php
                                        readfile('./1/index.html');
                                ?>
                        </TD>
                </TR>
        </TABLE>
This does not work and I am wondering if anyone knows how it can be done - or even if it can be done?

Circumstance:
"label.php" is actually PHP "readfile" page that fetches images from a private root directory.
"customer.html" is the public page where visitors view their images like this:
Dear Customer, Here Is Your Image: <img src="label.php?image=id_number_1001.png">

Question:
Is it okay to use a hidden $_SESSION["filename"] and change what I have now:
Dear Customer, Here Is Your Image: <img src="label.php?image=id_number_1001.png">
To this:
Dear Customer, Here Is Your Image: <img src="label.php">

This works by having the actual image name stored in a hidden session variable, using the following lines of code on my readfile page "label.php" like this:
$imgName = $_SESSION[ "filename" ] . ".png";
$imgPath = "../root_directory/" . $imgName;

Since I do not want customers to be allowed to ever see the image again after logging out, is it okay to rely on a hidden session variable for the filename as I described above?

(Potential hackers will be less tempted to "try different image names and numbers" like "id1.png, id2.png, id3.png" because they will have no idea if the image will be a gif, jpeg, or png, nor have any idea of a numbering sequence.)

Thank you!!

 

class curl2{

    private $curl_init; 
    private $CURLOPT_URL;

    public function connect(){ 
       $this->curl_init = curl_init(); 
    }

    public function debug(){
 
       curl_setopt($this->curl_init, CURLOPT_VERBOSE, TRUE);
       $fp = fopen("curl2.txt", "w"); 
       curl_setopt($this->curl_init, CURLOPT_STDERR, $fp); 
       curl_setopt($this->curl_init, CURLOPT_RETURNTRANSFER, TRUE);

    }

    public function setUrl($url = null){
       $this->CURLOPT_URL = $url;
       curl_setopt($this->curl_init, CURLOPT_URL, $this->CURLOPT_URL);
    }

    public function execute(){

       $out = curl_exec($this->curl_init);
       curl_close($this->curl_init);

       return $out;
    }
}

$curl2 = new curl2;
$curl2->connect();
$curl2->setUrl("http://www.linuxformat.co.uk");
$curl2->debug();
echo $curl2->execute();



It display a blank page like attachment result1.jpg, but if I move the
$fp = fopen("curl2.txt", "w"); 
curl_setopt($this->curl_init, CURLOPT_STDERR, $fp); 
curl_setopt($this->curl_init, CURLOPT_RETURNTRANSFER, TRUE);
from function debug() and join it with function execute()
like this:
  public function execute(){
       $fp = fopen("curl2.txt", "w"); 
       curl_setopt($this->curl_init, CURLOPT_STDERR, $fp); 
       curl_setopt($this->curl_init, CURLOPT_RETURNTRANSFER, TRUE);

       $out = curl_exec($this->curl_init);
       curl_close($this->curl_init);

       return $out;
    }

it return me Linuxformat content ( expected result ) like result2.jpg

below is the working code :
class curl2{

    private $curl_init; 
    private $CURLOPT_URL;

    public function connect(){ 
       $this->curl_init = curl_init(); 
    }

    public function debug(){
 
       curl_setopt($this->curl_init, CURLOPT_VERBOSE, TRUE);
      

    }

    public function setUrl($url = null){
       $this->CURLOPT_URL = $url;
       curl_setopt($this->curl_init, CURLOPT_URL, $this->CURLOPT_URL);
    }

    public function execute(){
       $fp = fopen("curl2.txt", "w"); 
       curl_setopt($this->curl_init, CURLOPT_STDERR, $fp); 
       curl_setopt($this->curl_init, CURLOPT_RETURNTRANSFER, TRUE);

       $out = curl_exec($this->curl_init);
       curl_close($this->curl_init);

       return $out;
    }
}

$curl2 = new curl2;
$curl2->connect();
$curl2->setUrl("http://www.linuxformat.co.uk");
$curl2->debug();
echo $curl2->execute();

 
Why I couldn't split "CURLOPT_STDERR, CURLOPT_RETURNTRANSFER" with "curl_exec"
 

I'm trying to either update my database if some data matches the if statement, or insert the data in a new row if it doesn't match (if possible).
The code will update the database just fine if the data matches, but if not, it won't insert the new data. (When I leave off the if statement it will insert just fine). I fear I'm not using the if...else correctly.

Thanks for any help.

<?php

header("Location: admin_schedule.php");

include("opendatabase.php");

$date=("$_POST[gamedate]");
$week=("$_POST[Week]");
$game=("$_POST[Game]");
$hometeam=("$_POST[team_name_1]");
$awayteam=("$_POST[team_name_2]");

$check = mysql_query("SELECT week_id,game_id FROM schedule");
$row[] = mysql_fetch_array($check);

if ($row[week_id]='$week' && $row[game_id]='$game')
{
mysql_query("UPDATE schedule 
SET week_id = '$week', game_id = '$game', date = '$date', H_team  = '$hometeam', A_team = '$awayteam'
WHERE week_id = '$week'
AND game_id = '$game'");
}

else
{
mysql_query("INSERT INTO schedule (week_id,game_id,date,H_team,A_team)
VALUES('$week','$game','$date','$hometeam','$awayteam')");
}

mysql_close($con);

the image in my comments box wont show up it gives me an error

Code: [Select]
Notice: Undefined index: avatar in /home/ecabrera/public_html/profile.php on line 277
and i dont whats wrong with it

Code: [Select]
// display comments
$perpage = 10;
$start=0;
if(@$_GET['s'])
$start = $_GET['s'];


$query = mysql_query("SELECT * FROM profile_comments WHERE profile_id='$getid' ORDER BY id DESC LIMIT $start, $perpage");
$numrows = mysql_num_rows($query);
if ($numrows > 0){

$next = $start + $perpage;
$prev = $start - $perpage;

while($row = mysql_fetch_assoc($query)){
$user_id = $row['user_id'];
$user_name = $row['user_name'];
$comment = nl2br($row['comment']);
$date = $row['date'];
                $avatar = $row['avatar'];

echo "<img src='avatars/$avatar'></img><a href='$site/profile?id=$getid'></a>

<b> on $date</b><br />";
echo "<div style='margin-left: 10px;'>$comment</div><hr>";

}
}
else
echo "This user has no profile comments.<br />";
// end diplay comment area

Hi

I have plans in developing a connect function for remote login to my web side. I can't find any useful on Google.

Some idees on how to code a API connect button? Something similiar to Facebook connect, Twitter connect etc. BUT this should not rely on facebook api. I'm going to make my own stand alone api.

I know I need to use REST in backend, but I'm missing the knowledge to know how to send / recive the login data, and how to know when a user are online or not.

I'm greatfull for any help. Also links.

And also tips on how to make a developer plattform for apps, much like the way Facebook have it.

Hello,

Alright I am having a few issues here. Let me explain what I am doing...this is a script that allows a customer to split an order..he can split certain items out of one order and it will create another order with the items he split added to this order, and then subtracting the items from the old order. The products are stored in one field called products, they are stored in a delimited list like this qty, product name, price each, product id | qty, product name, price each, product id |etc.

Now, before you say why are you storing your products like that?? The reason I have to store my products like so is because the customer does not want the products stored in the order table to be dependent off the products table like they were before. In that case if he modified a product it would modify all of the orders with that product stored in them. Make sense? I am aware a delimited list probably wasn't the best way to do this but it was the best way I could think of.

Ok here is my list of issues.
  1) Everytime you split an order, it is not creating a new order to store the items that were split into. It created an order the first time I did it, and now all it does is it keeps updating the products field in that order, rather than creating a new order.
  2) Next I do not know how I can update the old products (stored in the $prod array). It needs to update the products qtys after the order was split, and then if all of the qty for that product were moved to the new order it just needs to remove that product from the $prod array rather than updating the quantity.

The code is below. Please let me know if I can provide any more information to help! Thanks everyone!


// Get Old Order
$get_order = @mysql_query("SELECT * FROM orders WHERE order_id = {$_POST['order_id']}");
$order = @mysql_fetch_assoc($get_order);

// Get Old Order Items
$products = $order['products'];
//breaking products text down for display
$prod = array();

$_products = explode('|', $products);
foreach ($_products AS $p) 
$prod[] = explode(',', $p);

/*
$get_items = @mysql_query("SELECT product_id, qty FROM order_items WHERE order_id = {$order['order_id']}");
$items = array();
while(($row = @mysql_fetch_assoc($get_items)) !== false) {
  $items[] = $row;
}
*/

if(empty($prod)) {
  header("Location: tracking.php");
  die();
}


// Create New Order
mysql_query("INSERT INTO orders SET customer_id = {$order['customer_id']}, order_status = {$order['order_status']}, order_date = '{$order['order_date']}', order_date_paid = '{$order['order_date_paid']}', order_shipping = '{$order['order_shipping']}', order_shipping_fee = '{$order['order_shipping_fee']}', order_insurance = '{$order['order_insurance']}', order_insurance_fee = '{$order['order_insurance_fee']}', order_insurance_total = '{$order['order_insurance_total']}', order_grand_total = '{$order['order_grand_total']}', order_date = '{$order['order_date']}', order_filled = '{$order['order_filled']}', order_ship_date = '{$order['ship_date']}'");
$get_new_order = @mysql_query("SELECT MAX(order_id) AS order_id FROM orders") or die(mysql_error());
$new_order_id = @mysql_result($get_new_order, 'order_id', 0);


// Add Items to New Order & Remove Items from Old Order
$new_items = array();
$_new_items = '';
foreach($prod as $p2) {
  for($i = 0; $i < $p2[0]; $i++) { 
    if(!empty($_POST[trim($p2[3]).'_'.$i])) {
      $new_items[trim($p2[3])]++;
    }
  }
}

//construct new static products list
foreach($new_items as $id=>$qty) {
$get_product = mysql_query("SELECT name, price FROM products WHERE product_id = '{$id}'");
$got_product = mysql_fetch_assoc($get_product);
$_new_items .= $qty.','.$got_product['name'].','.$got_product['price'].','.$id.'|';
//echo $id.' - '.$qty.'<br>';
}
//remove last character in products text before going into DB
$_new_items = substr_replace($_new_items ,"",-1);

//update products field in new order
mysql_query("UPDATE orders SET products = '{$_new_items}' WHERE order_id = '{$new_order_id}'");

I want to gettwitter feeds,
this gives me a xml
http://twitter.com/statuses/user_timeline.rss?screen_name=fleuragemapvv&count=3

based on this:
http://www.w3schools.com/PHP/php_xml_simplexml.asp

i try to get the xml with:
<?php$xml = simplexml_load_file("http://twitter.com/statuses/user_timeline.rss?screen_name=fleuragemapvv&count=3");?>()

i get this error:
Quote

Warning: simplexml_load_file(http://twitter.com/statuses/user_timeline.rss?screen_name=fleuragemapvv&count=3): failed to open stream: HTTP request failed! HTTP/1.1 400 Bad Request in /home/vhosting/x/vhost0033377/domains/doekewartena.nl/htdocs/www/temp/twitter03.php on line 2 Warning: simplexml_load_file(): I/O warning : failed to load external entity "http://twitter.com/statuses/user_timeline.rss?screen_name=fleuragemapvv&count=3" in /home/vhosting/x/vhost0033377/domains/doekewartena.nl/htdocs/www/temp/twitter03.php on line 2


i have no clue, i'm very new to php
can i even use simplexml_load_file cause it has no .xml file type extention.

First
Since I first started learning PHP, I've been writing code for forms like this:

$name = $_POST["name"];

if ($name == "") {
echo "You didn't type anything";
}

I've written scripts like this and tested them on a GOdaddy server, and they always worked fine.

Now, after testing scripts like that on my own server (WAMP2 [PHP5, Mysql, Apache]), I get an error saying "Unidentified index: name", and so I have to nest that if statement AS WELL AS the variable assignment inside another if statement like this:

if (isset ($_POST["name"])) {
$name = $_POST["name"];
if ($name == "") {
echo "you didn't type anything.
}
}

The error doesn't actually stop the script from running, but a medium sized box appears in the browser with the error message contained that's after the element in the document of which is getting an invalid error.

Which way is truly the correct way? Because now that I have to use the second way in order for my scripts to run correctly on my own server, I have to write more code and it all gets disorganized and more complicated to read.

So...is this a configuration thing that I can tweak in WAMP2 to stop messages like that from popping up? Or is the second way the way you're supposed to do it?

Also, I was wondering why ereg got deprecated and what the replacement of it is in PHP5? I've asked before and even googled it but I simply get taken to a "Pearl" function on PHP.net. I'm not sure what it is, or how to use it, and haven't got any hints from either PHP.net or anywhere else.

Any suggestions?