PHP - Altering Regex Code To Check For Image Instead Of Just Checking For Url

Hi All,

I'm having a major mind blank, and can't find anything in the previous posts resolving what I'm after.

I'm setting

$searchtext = $_POST['searchtext'];

I want to check $seachtext is not null.

I've seen isset($searchtext) but it doesn't solve my problem.

Basiclaly; I want an if statement to say if(isset($searchtext)) {......}

Thoughts?

Hi, I need to insert some code into my current form code which will check to see if a username exist and if so will display an echo message. If it does not exist will post the form (assuming everything else is filled in correctly). I have tried some code in a few places but it doesn't work correctly as I get the username message exist no matter what. I think I am inserting the code into the wrong area, so need assistance as to how to incorporate the username check code.

$sql="select * from Profile where username = '$username';
$result = mysql_query( $sql, $conn )
      or die( "ERR: SQL 1" );
if(mysql_num_rows($result)!=0)
{
process form
}
else
{
echo "That username already exist!";
}


the current code of the form


<?PHP
//session_start();
require_once "formvalidator.php";
$show_form=true;

if (!isset($_POST['Submit'])) {



$human_number1 = rand(1, 12);



$human_number2 = rand(1, 38);



$human_answer = $human_number1 + $human_number2;



$_SESSION['check_answer'] = $human_answer;
}

if(isset($_POST['Submit']))
{





if (!isset($_SESSION['check_answer'])) {
echo "<p>Error: Answer session not set</p>";
}


if($_POST['math'] != $_SESSION['check_answer']) {
echo "<p>You did not pass the human check.</p>";
exit();
}


   $validator = new FormValidator();
    $validator->addValidation("FirstName","req","Please fill in FirstName");







$validator->addValidation("LastName","req","Please fill in LastName");
$validator->addValidation("UserName","req","Please fill in UserName");
$validator->addValidation("Password","req","Please fill in a Password");
$validator->addValidation("Password2","req","Please re-enter your password");
$validator->addValidation("Password2","eqelmnt=Password","Your passwords do not match!");
$validator->addValidation("email","email","The input for Email should be a valid email value");
$validator->addValidation("email","req","Please fill in Email");
$validator->addValidation("Zip","req","Please fill in your Zip Code");
$validator->addValidation("Security","req","Please fill in your Security Question");
$validator->addValidation("Security2","req","Please fill in your Security Answer");
    if($validator->ValidateForm())
    {
        $con = mysql_connect("localhost","uname","pw") or die('Could not connect: ' . mysql_error());
        mysql_select_db("beatthis_beatthis") or die(mysql_error());
$FirstName=mysql_real_escape_string($_POST['FirstName']); //This value has to be the same as in the HTML form file
$LastName=mysql_real_escape_string($_POST['LastName']); //This value has to be the same as in the HTML form file
$UserName=mysql_real_escape_string($_POST['UserName']); //This value has to be the same as in the HTML form file
$Password= md5($_POST['Password']); //This value has to be the same as in the HTML form file
$Password2= md5($_POST['Password2']); //This value has to be the same as in the HTML form file
$email=mysql_real_escape_string($_POST['email']); //This value has to be the same as in the HTML form file
$Zip=mysql_real_escape_string($_POST['Zip']); //This value has to be the same as in the HTML form file
$Birthday=mysql_real_escape_string($_POST['Birthday']); //This value has to be the same as in the HTML form file
$Security=mysql_real_escape_string($_POST['Security']); //This value has to be the same as in the HTML form file
$Security2=mysql_real_escape_string($_POST['Security2']); //This value has to be the same as in the HTML form file



$sql="INSERT INTO Profile (`FirstName`,`LastName`,`Username`,`Password`,`Password2`,`email`,`Zip`,`Birthday`,`Security`,`Security2`) VALUES ('$FirstName','$LastName','$UserName','$Password','$Password2','$email','$Zip','$Birthday','$Security','$Security2')"; 
//echo $sql;
if (!mysql_query($sql,$con)) {

 die('Error: ' . mysql_error());

} else{



mail('email@gmail.com','A profile has been submitted!',$FirstName.' has submitted their profile',$body);

echo "<h3>Your profile information has been submitted successfully.</h3>";
}

mysql_close($con);
        $show_form=false;
    }
    else
    {
        echo "<h3 class='ErrorTitle'>Validation Errors:</h3>";

        $error_hash = $validator->GetErrors();
        foreach($error_hash as $inpname => $inp_err)
        {
            echo "<p class='errors'>$inpname : $inp_err</p>\n";
        }        
    }
}

if(true == $show_form)
{
?>

Hello all,

I'm currently doing this Facebook connect module for my website. With the FBconnect, it creates a user profile on my mysql, which stores only the Facebook userid, the full name, and the thumbnail url of this user.

Currently the code works well except for this 'image url checking'.
this is my fb profile image url: http://profile.ak.fbcdn.net/hprofile-ak-snc4/hs349.snc4/41540_772137439_5612219_q.jpg

when I've added a 'XXX' at the back ( http://profile.ak.fbcdn.net/hprofile-ak-snc4/hs349.snc4/41540_772137439_5612219_qXXX.jpg ). It returns a blank instead.

On Facebook, some accounts are not genuine and they might the deleted sooner or later. So I'm trying to figure out a php script or functions which detect if the image is not the 'XXX' version.

I've tried using getimagesize() or file_get_contents() but still won't work.

any ideas?

Hi!

I am creating a small project somewhat like a photo gallery as my first practice page. I just would like to know how can I alter photos or file in php. Or should I just do a delete and then upload a new one?

Thanks in advance...

basically this is a search function


<form  method="post" action="test1.php">
<input type = "hidden" name="submitted" value ="true" />
  <label>TYPE:
  <select name="field">
    <option value = "sid">StudentID</option>
    <option value = "sname">StudentName</option>
  </select>
  </label>
  <label>WORD:
  <input type="text" name="searchword" />
  </label>
<input type="submit"  />
</form>


-------------
<?php
if (isset($_POST['submitted'])){

$con = mysql_connect("localhost","root","");

  mysql_select_db("uni", $con);
  

$field= $_POST['field'];
$searchword = $_POST['searchword'];
$query = "SELECT* FROM student WHERE $field = '$searchword'";
$result = mysqli_query($con,$query) or die ('error data'); //-----------> error line

echo"<table>";
echo "<tr><th>StudentID</th><th>StudentName</th></tr>";
while($row = mysqli_fetch_array($result)){

echo "<tr><td>";
echo "$row ['sid']";
echo "</td><td>";
echo "$row ['sname']";
echo "</td></tr>";
}

echo"</table>";

}

mysql_close($con);

?>


NB: the error message "Warning: mysqli_query() expects parameter 1 to be mysqli, resource given in C:\wamp\www\test1.php on line 21
error data"

I am new to PHP.

I developed this class, I wonder if there's anything wrong or that I can improve. I could not test it because I'm in school.

Thanks in advance.

Code: [Select]
<?



class user {



var $userID,

$schoolID,

$userName,

$userPass,

$dbHost,

$dbUser,

$dbName,

$dbPass,

$dbUserTable;

$dbSchoolTable;



function dbInfo() {

$this->dbHost = 'localhost';

$this->dbUser = '';

$this->dbName = '';

$this->dbPass = '';

$this->dbUserTable = '';

$this->dbSchoolTable = '';

}



function registerUser($userName, $userPass) {

$dbLink = mysql_connect($this->dbHost, $this->dbUser, $this->dbPass);

if(!$dbLink) die("Could not connect to database: " . mysql_error());



mysql_select_db($this->dbName);



$query = "INSERT INTO $this->dbUserTable VALUES (NULL, \"$userName\", \"$userPass\")";

$result = mysql_query($query);



if(!$result) {
echo "Fail.";
} else {
$this->userID = mysql_insert_id();
}



mysql_close($dbLink);



$this->userName = $userName;

$this->userPass = $userPass;

}



function registerSchool($schoolName) {

$dbLink = mysql_connect($this->dbHost, $this->dbUser, $this->dbPass);

if(!$dbLink) die("Could not connect to database: " . mysql_error());



mysql_select_db($this->dbName);



$query = "INSERT INTO $this->dbSchoolTable VALUES (NULL, \"$schoolName\")";

$result = mysql_query($query);



if(!$result) {
echo "Fail.";
} else {
$this->schoolID = mysql_insert_id();
}



mysql_close($dbLink);



$this->schoolName = $schoolName;

}


function userLogin() {

$dbLink = mysql_connect($this->dbHost, $this->dbUser, $this->dbPass);

if(!$dbLink) die("Could not connect to database: " . mysql_error());



mysql_select_db($this->dbName);



$query = "SELECT * FROM $this->dbUserTable WHERE userName = \"$this->userName\" AND userPass = \"$this->userPass\" LIMIT 1";

$result = mysql_query($query);



if(!$result) {
echo "Fail.";
} else {
while($row = mysql_fetch_array($result)) {
session_start();
$_SESSION['userID'] = $row['userID'];
session_write_close();
}
}



mysql_close($dbLink);

}


function changePass($newPass) {

$dbLink = mysql_connect($this->dbHost, $this->dbUser, $this->dbPass);

if(!$dbLink) die("Could not connect to database: " . mysql_error());



mysql_select_db($this->dbName);

$query = "SELECT * FROM $this->dbUserTable WHERE userName = \"$this->userName\" LIMIT 1";

$result = mysql_query($query);

if(!$result) {
echo "Fail.";
} else {

$query = "UPDATE $this->dbUserTable SET userPass = \"$newPass\" WHERE userName = \"$this->userName\"";

$result = mysql_query($query);



if(!$result) {
echo "Fail";
} else {
$this->userPass = $newPass;
}
}



mysql_close($dbLink);

}



}

?>

Hi,

I have a file which contains settings for a user. Similar to wordpress except simpler like setting a default email for error messages or something. The idea is that it's used as an installation script for web-ware where someone fills in a form with their database details, my script will hard-code them into the settings file and then delete itself. I'll admit I did get the idea from wordpress.

Only the way it's coded currently requires a certain combination of characters at the end and seems really messy. The script looks like this (and does work):
    $endpos = strpos ( $contents, '"; //replace with name//', $startpos);

The settings file looks like this:
    $hard_name = "Smith"; //replace with name//

As you can see I use the comment in the settings file, which follows what I'm actually changing, to find the end of the variable. I am sure there must be a better way of doing things but don't know what. It just seems really inefficient because if the comment is removed the script breaks.

Any info and tips would be much appreciated.

IceKat

I have a table with lots of records. My table has the following field, with records containing either NULL or '1' that I need to modify.

so I'm trying to change some specific columns in a row in a table of a MySQL database by calling the Doctrine_Query when an option is selected inside an admin panel of my website.

Here are the details:

Table name: chatUsers
I need to find all rows with the person who has a username of: $chatUsers->username (The column inside chatUsers is called username) Once all those rows are found, change the value of all the row's column "type" to "user" Is this even possible?

So far I have:
[/list] Code: [Select]
<?php
function userChatReset(){
     $query = Doctrine_Query::create()->update('db_chatUsers')->set('type', 'user')->where('username = '.$chatUsers->username);

          //execute query
$rows = $query->execute();
echo $rows.' rows updated';
}
?>

...And I'm not sure where to go from there, or if that's even correct. Sorry in advance, I'm not very good with PHP yet.

Can someone advise me how to check for malicious PHP code?

If I download a script from somewhere, how can I make sure it's not malicious?
If bad, maybe it could delete files?? Or send spam?
Or EVEN 'send home' code - so that they can track your usage - OK if I consent - not OK if haven't consented and they're doing it sneakily!

Sending spam has been a problem when installing Joomla plugins

Are there specific commands I should watch out for in PHP scripts?
Like send mail or something?

I'm sure the baddies would be clever and maybe use IP numbers to send out to instead of domain names?

Is there a PHP code checker online? Something that tells you what your PHP script does? Simple things: like tell you if it sends out mail or makes contact outside or deletes files

This would be great - it would save a lot of time  going through hundreds/thousands of lines of code

Thanks


OM

will this code check if value is null 

Code: [Select]
if($_SESSION["cart"] != null)

try
   {
 $sql   = "SELECT StudentID,CourseID FROM student,course WHERE StudentID =" . $_POST['sid']  AND CourseID =".$_POST['cid'] ; //-----> error line

    $query = mysql_query($sql) or trigger_error('MySQL error: ' . mysql_error());

    if (mysql_num_rows($query) > 0)
    {
        throw new Exception('StudentID already taken');
    }
}

NB: basicaly im inserting data into a table from another two table field.

can someone check if what the problem with my code
Code: [Select]
$avatar2 = mysql_query("SELECT `users`.`imagelocation' FROM `users` `forum_replies` WHERE `users`.`id`= `forum_replies`.`uid`")or die(mysql_error());

I found this online at http://php.net/manual/en/function.time.php:

<?php
 function rel_time($from, $to = null)
 {
  $to = (($to === null) ? (time()) : ($to));
  $to = ((is_int($to)) ? ($to) : (strtotime($to)));
  $from = ((is_int($from)) ? ($from) : (strtotime($from)));

  $units = array
  (
   "year"   => 31536000, // seconds in a year   (12 months)
   "month"  => 2628000,  // seconds in a month  (4 weeks)
   "week"   => 604800,   // seconds in a week   (7 days)
   "day"    => 86400,    // seconds in a day    (24 hours)
   "hour"   => 3600,     // seconds in an hour  (60 minutes)
   "minute" => 60,       // seconds in a minute (60 seconds)
   "second" => 1         // 1 second
  );

  $diff = abs($from - $to);
  $suffix = (($from > $to) ? ("from now") : ("ago"));

  foreach($units as $unit => $mult)
   if($diff >= $mult)
   {
    $and = (($mult != 1) ? ("") : ("and "));
    $output .= ", ".$and.intval($diff / $mult)." ".$unit.((intval($diff / $mult) == 1) ? ("") : ("s"));
    $diff -= intval($diff / $mult) * $mult;
   }
  $output .= " ".$suffix;
  $output = substr($output, strlen(", "));

  return $output;
 }
?>
=======================

Basically, if you type <?php echo rel_time("March 12, 2011 7:00 PM"); ?>, it will show you the time ago relative to the current time.

But there's two problems. 
1) The time it sends out is about 5hrs early (the actual time is 7:00pm, I set the rel time to 7:00pm, but the time it displays reads '5 hours ago, 1 minute, and 3 seconds ago'. I'm not much of a coder, but judging by the looks of it, it would appear correct... but apparently not.

2) My second gripe is that the code shows too many increments of date. What I mean is, if if I set the date to over a year ago, it would display the years,months,weeks,days,minutes,seconds. That is way too much increments. I just want it to display seconds, if I submitted it seconds ago, just display minutes if it was displayed minutes ago, and display days if it was submitted days ago. You get the idea.

Friends, family, fellow coders, and bored people- can you help a nooblet?

Thanks!