PHP - Check If Query Has Failed?

Hi.  I have wrote a simple login script.  Works perfectly.  Now as my users can only register one email address at the minute if you register two the same you get the default sql error pop up.  I want my own error so at the beginning of my script i wrote the following code. however.  It does not seem to be running.  It does not create an error but still allows duplicate emails in the database.  can anyone see the error of my ways?
<?php session_start();
if(isset($_POST['create'])){    
 //script for checking if the email account already exists
$qCheckEmail = "SELECT * FROM members WHERE email='".$_POST['email']."'";
$rCheckEmail = mysql_query($qCheckEmail);
$Email = mysql_fetch_array($rCheckEmail);
 
 if($_POST['email'] == $Email['email']) 
 {$emailDup = "This email account has already been registered";}
 else
 { 
//Process data for validation    
$forename =  trim($_POST['forename']);    
$surname =  trim($_POST['surname']);    
$email      =  trim($_POST['email']);        
$password   =  trim($_POST['password']);     
$gender     =  trim($_POST['gender']);
$birthday =  $_POST['birthday'];
$creationdate = $_POST['creationdate'];
$validationID = $_POST['validationID'];
$accesslevel =  trim($_POST['accesslevel']);
$accountType =  trim($_POST['accountType']);
// then the rest of the login script here

Hey Guys,
I need some assistance, hopefully there is just a simple command that I am not aware of or an easy answer to this.

Suppose I have an array with x amount of values...
$arr = array("111111" => 10, "222222" => 20);
And i have a query..
mysql_query("SELECT * FROM table WHERE table.zip = "111111" ");

Suppose I want to modify the query, so it can check if table.zip exists anywhere in $arr, regardless of length of array. And Select the value that the array location refers to. So I need it to check if "111111" is anywhere in the array, and then take the value 10.

The example I am applying this to is that I have a database full of business addresses/zip codes and a database full of every zip code in country. So I have a script to get every zip within x miles, and the distance from it, but need to be able to apply it when I query my business addresses to see if it exists within x miles.

Thanks!
Greg

I'm trying to get a nickname system working for a little project, but I've run into a problem.

This code that I wrote here gets the users nickname from their username:

Code: (php) [Select]
$user = $_GET['user'];
@mysql_select_db("db") or die( "Unable to select database");

$query = mysql_query("SELECT `nickname` FROM `info` WHERE `username`='$user'");

       WHILE($rows = mysql_fetch_array($query)):
           $nickname = $rows['nickname'];
           echo $nickname;
        endwhile;
?>

But the problem is, if the user doesn't have a nickname then it just turns up blank. How can I check if the output of $nickname is blank and if it is then just return their normal name ($user)

Thanks

Oh, and how to you format php code to look like php code on these forums?

I am fairly new to PHP and want to someone to check my reasoning and logic for a php query.  I have a mySQL table that includes a field called authors.  This field has 1+ authors names in it.  If there is more than one author in the field, it has been concatenated in the following format: lastname1, firstinitial1., lastname2, first initial2., & lastname3, firstinitial3

Let's say I have three fields:
lastname1, first initial1.
lastname1, firstinitial1., lastname2, first initial2., & lastname3, firstinitial3.
lastname3, firstinitial3.


If I do a php count query on the author field I will get 1 count for the multiple field, 1 count for the lastname1 author, 1 count for the lastname3 author and 0 for the lastname2 author even though lastname1 author should be counted twice, correct? Is there anyway to write a query that will count each specific instance in the field as a hit?  Am I logically tracking or off the bubble?  Thanks!

I'm working on a directory component and have kind of a tricky thing I need to do.

The list of results pop through ajax on the left side along with it's google map number tag, and the google map pops on the right side. To make it even trickier the results are popped through a radius search by proximity.

The problem is if there are multiple results with the same address you end up having all of the number tags on the map buried under the last tag with that address, plus it makes for kind of a long list.

What I need to do is run a check to see if the previous result is the same address, and if yes not pop that result in a new table cell, rather stick it in a jquery drop down div so that all of the following results with the same address are stuffed in the jquery drop down in the same table cell under the first result with that address.

In a perfect world all of the listings with the same addresses would be submitted in order so I could just do a check for the previous itemid's address, but of course that's not the case. I thought about running a query to grab ALL of the addresses and then check the item's address against it to see if it matches and if yes echo the jquery div instead of the <td>, but obviously that won't work because that will cause the first item with that address to be put in the div also. Plus I don't know if that's a very efficient way to go about it anyway.

Here's kind of the basic thing I'm working with:
Code: [Select]
$query = "SELECT data_txt FROM jos_sobi2_fields_data WHERE fieldid = 76 AND itemid = $mySobi->id";
$result = mysql_query($query) or die(mysql_error());
while($row = mysql_fetch_array($result)){
$myaddress = $row['data_txt'];
}
echo "<td $style>";

Any ideas?

Hello there,

I'm new to this site/forum so i dont know if this is the right forum to post a code review / commentary request ....

I have a function that handels the sql code...
Know i would like to know what you think off it ? can I do something different or better ?..
Code: [Select]
<?PHP
/*
* Private function db_query($sql) | handle....
* whit checking en extendid error reporting....
* Runs a query but does not return a result array....
* @String $sql | this is the sql query you whant to run.....
*/
private function db_query($sql) {
$this->sql = $sql;
switch ( DEBUG_QUERY ) { // check debug mode...

case true:
try { // probeer query uit te voeren...

$handle = $this->query($this->sql);

if(!$handle) // if error whit the query...
{
$this->rollback();
throw new Exception('MySQLi Query went wrong error ==> ' . mysqli::$error);
}

} catch (Exception $e) { // error afhandeling and reporting..
echo '<hr />';
echo '<span style="color:red"><b>A MySQLi Query went wrong:</b></span><br />';
echo var_dump($e->getMessage());
echo '<br />';
echo nl2br($e->getTraceAsString());
echo '<br />';
echo 'Error in File: ' . $e->getFile();
echo '<br />';
echo 'Thrown Exception on line: ' . $e->getLine();
echo '<br /><hr />';
exit();
} // end error afhandeling and reporting...
break;

case false:
$handle = $this->query($this->sql);
break;
} // end switch...
return $handle;
}



/*
* Public function db_Do | handels the insert, update, select and delete query's
* A lot off optional options for the different query's
* @String $type | Choose between the four type's | select, insert, update or delete | Default is Select
* @String $table | Select witch table you whant to use | give a vailid tablename you whant to use in the query
* @String $values | Input the values uw whant to select from the table | * for all - row1, row2, row3 | id, username, password
* @String $where | The where operator for the query | Where $where = | give a vailid row name | if used you must fill in the other two where operators | default = empty (optional)
* @String $opparator | The operator for the where operator | =, >, <, <>, >=, <=, !=, ==, ===, !==, LIKE, IS, IS NOT, +, -, /, %, * | whit check in_array | where 2 | default = empty (optional)
* @String / Int $where_val | The where value for the where operator | WHERE $where{id} $opparator{=} $where_val{1} | where 3 | default = empty (optional)
* @Bool $use_and | if TRUE you can use the AND operator | linked to the other three and operators | if you use 1 you must fill in all 4 of them | default = false (optional)
* @String $and_key | Value for the AND operator | same as $order_by | AND $and_key{username} | and 2 | default = empty (optional)
* @String $and_oparetor | The operator for the and section | same as $opparator | =, >, <, <>, >=, <=, !=, ==, ===, !==, LIKE, IS, IS NOT, +, -, /, %, * | whit check in_array | and 3 | default = '=' (optional)
* @String $and_value | The value for by the and_key | same as $where_val | AND $and_key{username} $and_oparetor{=} $and_value{'jhon'} | and 4 | default = empty (optional)
* @String $order_by | value for the Order by operator only used if hase a value | ORDER BY $order_by{id} | if used you must alsow fill in the second order by operator | default = empty (optional)
* @String $order_key | Value for the Order key by the order value | ORDER BY $order_by{id} $order_key{asc, desc} | check in_array | default = asc (optional)
* Error msg and checks includid, Failsafe...
* Runs the query and returns a row....
* Uses the db_query function...
* Version 1.0.0
*/
public function db_Do($type = 'select', $table, $values, $where = NULL, $opparator = NULL, $where_val = NULL, $use_and = FALSE, $and_key = NULL, $and_oparetor = '=', $and_value = NULL, $order_by = NULL, $order_key = 'ASC') {

switch ( DEBUG_QUERY ) { // check debug mode...

case true:
if(in_array($type, $this->SQL_TYPE, TRUE)) { // check for correct $type...
if(in_array($order_key, $this->ORDER_KEY, TRUE)) { // check if order key is allowd $order_key....
if(in_array($opparator, $this->OPARATORS, TRUE)) { // check for vallid oparetors...
if(empty($table) or strlen($table) >= 4) { // check if $table correct is....
if(empty($values) or strlen($values) >= 4) { // check if the $values are given correctly....
if(in_array($and_oparetor, $this->OPARATORS, TRUE)) { // check if and oparetor is allowd.....

switch( $type ) { // witch type...

case 'select':
// Build the SQL Query....
$query = 'SELECT '. $this->real_escape_string($values) .' FROM '. $table .' ';
if(!empty($where) and (empty($where_val) or empty($opparator))) {
$row = 'Sorry you have to fill in all 3 of the where conditions!'; return $row; }
elseif(!empty($where) || !empty($where_val) || !empty($opparator)) {
$query .= 'WHERE '. $where .' '. $opparator .' "'. $this->real_escape_string($where_val) .'" '; }
if($use_and == true and !empty($and_key) and !empty($and_value)) {
$query .= 'AND '. $and_key .' '. $and_oparetor .' "'. $this->real_escape_string($and_value) .'" '; }
elseif($use_and == true and (empty($and_key) or empty($and_value))) {
$row = 'Sorry you have to fill in all 3 off the AND oparetors correctly.'; return $row; }
if(!empty($order_by)) {
$query .= ' ORDER BY '. $order_by .' '. $order_key .''; }

$this->sql = $query;
$handle = $this->db_query($this->sql);
$row = $handle->fetch_assoc();
mysqli_free_result($handle);
break;

case 'insert':
// Build the SQL Query......
$query = 'INSERT INTO '. $table .' ('. $this->real_escape_string($values) .') ';
$query .= 'VALUES ('. $this->real_escape_string($where) .')';

$this->sql = $query;
$handle = $this->db_query($this->sql);
$row = ($handle) ? true : false;
unset($handle); // empty / unset $handle...
break;

case 'update':
// Build the SQL Query......
$query = 'UPDATE '. $table .' ';
$query .= 'SET '. $this->real_escape_string($values) .' ';

if(!empty($where) and !empty($where_val) and !empty($opparator)) {
$query .= 'WHERE '. $where .' '. $opparator .' "'. $this->real_escape_string($where_val) .'" '; }
elseif(empty($where) or empty($where_val) or empty($opparator)) {
$row = 'Sorry you have to fill in all 3 of the where conditions!'; return $row; }
if($use_and == true and !empty($and_key) and !empty($and_value)) {
$query .= 'AND '. $and_key .' '. $and_oparetor .' "'. $this->real_escape_string($and_value) .'" '; }
elseif($use_and == true and (empty($and_key) or empty($and_value))) {
$row = 'Sorry you have to fill in all 3 off the AND oparetors correctly.'; return $row; }

$this->sql = $query;

$handle = $this->db_query($this->sql);
$row = ($handle) ? true : false;
unset($handle); // empty / unset $handle....
break;

case 'delete':
//Construct the delete query.....
$query = 'DELETE FROM '. $table .' ';
$query .= 'WHERE '. $where .' '. $opparator .' "'. $this->real_escape_string($where_val) .'" ';
if($use_and == true and !empty($and_key) and !empty($and_value)) {
$query .= 'AND '. $and_key .' '. $and_oparetor .' "'. $this->real_escape_string($and_value) .'" '; }
elseif($use_and == true and (empty($and_key) or empty($and_value))) {
$row = 'Sorry you have to fill in all 3 off the AND oparetors correctly.'; return $row; }

$this->sql = $query;

$handle = $this->db_query($this->sql);
$row = ($handle) ? true : false;
unset($handle); // empty / unset $handle....
break;

} // end switch( $type ).....


} else { // Correct Oparetors......
$row = 'Incorrect Oparetor in the AND section choose out: =, >, <, <>, >=, <=, !=, ==, ===, !==, LIKE, IS, IS NOT, +, -, /, %, * or use the FreeQuery';
}
} else { // Correct VALUES.....
$row = 'Sorry you have to fill in the values parameter correctly and it hase to be bigger then 3 chars.';
}
} else { // Correct TABLE....
$row = 'Sorry you have to fill in the table parameter correctly and it hase to be bigger than 3 chars.';
}
} else { // Correct Oparetors......
$row = 'Incorrect Oparetor in the WHERE section choose out: =, >, <, <>, >=, <=, !=, ==, ===, !==, LIKE, IS, IS NOT, +, -, /, %, * or use the FreeQuery';
}
} else { // if order_key is NOT allowd....
$row = 'Incorrect Order by opparator: <b>'. $order_key .'</b> choos between (asc or desc)';
}
} else { // if not correct type return error msg....
$row = 'Incorrect type: <b>'. $type . '</b> choose between (select, insert, update or delete)';
}
break; // end case true...

case false:


break; // end case false...

} // end switch( debug_query )...
return $row;

} // end public function db_Do().....

?>
It's still a work in process so it's not done yet...

hi,

$body = <<<EMAIL
Hello <[fname]>,

You've registered and need to activate your account. Click the link below or paste it into the URL bar of your web browser

http://blahblah.com/activate.php?id=<[id]>&code=< Code: [Select]
>

Thanks!

Team
EMAIL;

The <[id]> isn't working. It literally sends out <[id]> in the email.

Hi guys,

I'm getting the following error when i try to upload an image:

Code: [Select]
Warning: copy() [function.copy]: open_basedir restriction in effect. File(C:\Windows\Temp\phpAF5B.tmp) is not within the allowed path(s): (C:\Inetpub\vhosts\truvibefm.com\httpdocs\) in C:\Inetpub\vhosts\truvibefm.com\httpdocs\testarea\imageupload\upload.php on line 25
Out of commonsense i check the open_basedir in php.ini and it is set too: C:\Inetpub\vhosts\truvibefm.com\httpdocs

Thanks for you time!
J

My php script is:
Code: [Select]
<?php
$SafeFile = $HTTP_POST_FILES['ufile']['name'];
$SafeFile = str_replace("#", "No.", $SafeFile);
$SafeFile = str_replace("$", "Dollar", $SafeFile);
$SafeFile = str_replace("%", "Percent", $SafeFile);
$SafeFile = str_replace("^", "", $SafeFile);
$SafeFile = str_replace("&", "and", $SafeFile);
$SafeFile = str_replace("*", "", $SafeFile);
$SafeFile = str_replace("?", "", $SafeFile);

$uploaddir = "uploads/";
$path = $uploaddir.$SafeFile;

if($ufile != none){ //AS LONG AS A FILE WAS SELECTED...

    if(copy($HTTP_POST_FILES['ufile']['tmp_name'], $path)){ //IF IT HAS BEEN COPIED...

        //GET FILE NAME
        $theFileName = $HTTP_POST_FILES['ufile']['name'];

        //GET FILE SIZE
        $theFileSize = $HTTP_POST_FILES['ufile']['size'];

        if ($theFileSize>999999){ //IF GREATER THAN 999KB, DISPLAY AS MB
            $theDiv = $theFileSize / 1000000;
            $theFileSize = round($theDiv, 1)." MB"; //round($WhatToRound, $DecimalPlaces)
        } else { //OTHERWISE DISPLAY AS KB
            $theDiv = $theFileSize / 1000;
            $theFileSize = round($theDiv, 1)." KB"; //round($WhatToRound, $DecimalPlaces)
        }

echo <<<UPLS
<table cellpadding="5" width="300">
<tr>
    <td align="Center" colspan="2"><font color="#009900"><b>Upload Successful</b></font></td>
</tr>
<tr>
    <td align="right"><b>File Name: </b></td>
    <td align="left">$theFileName</td>
</tr>
<tr>
    <td align="right"><b>File Size: </b></td>
    <td align="left">$theFileSize</td>
</tr>
<tr>
    <td align="right"><b>Directory: </b></td>
    <td align="left">$uploaddir</td>
</tr>
</table>

UPLS;

    } else {

//PRINT AN ERROR IF THE FILE COULD NOT BE COPIED
echo <<<UPLF
<table cellpadding="5" width="80%">
<tr>
<td align="Center" colspan="2"><font color=\"#C80000\"><b>File could not be 

uploaded</b></font></td>
</tr>

</table>

UPLF;
    }
}

?>

Hi for the following product.php page.

<?php

error_reporting(E_ALL);
ini_set('display_errors', '1');
?>





<?php

if (isset($_GET['id'])) {
    // Connect to the MySQL database  

    include "storescripts/connect_to_mysql.php";


    $id = preg_replace('#[^0-9]#i', '', $_GET['id']);

    //$id = $_GET['id'];
    
    $sql = mysql_query("SELECT * FROM products WHERE id='$id' LIMIT 1");
    $productCount = mysql_num_rows($sql); // count the output amount
    if ($productCount > 0)

 {
        // get all the product details
        while($row = mysql_fetch_array($sql)){
             $product_name = $row["product_name"];
             $price = $row["price"];
             $details = $row["details"];
             $category = $row["category"];
             $subcategory = $row["subcategory"];
             $date_added = strftime("%b %d, %Y", strtotime($row["date_added"]));
         }
        
    } else
 {
        echo "That item does not exist.";
        exit();
    }
        
} else {
    echo "Data to render this page is missing.";
    exit();
}
mysql_close();
?>





<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title><?php echo $product_name; ?></title>

<link rel="stylesheet" href="style/style.css" type="text/css" media="screen" />
</head>
<body>
<div align="center" id="mainWrapper">
  <?php include_once("template_header.php");?>
  <div id="pageContent">
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <table width="100%" border="0" cellspacing="0" cellpadding="15">
  <tr>
    <td width="19%" valign="bottom"><p><img src="inventory_images/<?php echo $id; ?>.jpg" width="104" height="132" alt="<?php echo $product_name; ?>" /></p>
      <p><br />
        <a href="inventory_images/<?php echo $id; ?>.jpg">View Full Size Image</a></p></td>
    <td width="81%" valign="top"><h3><?php echo $product_name; ?></h3>
      <p><?php echo "$".$price; ?><br />
        <br />
        <?php echo "$subcategory $category"; ?> <br />
<br />
        <?php echo $details; ?>
<br />
        </p>
      <form id="form1" name="form1" method="post" action="cart.php">
        <input type="hidden" name="pid" id="pid" value="<?php echo $id; ?>" />
        <input type="submit" name="button" id="button" value="Add to Shopping Cart" />
      </form>
      </td>
    </tr>
</table>
  </div>
  <?php include_once("template_footer.php");?>
</div>
</body>
</html>

when i click on image link.. i get   ReadResponse() failed: The server did not return a response for this request.     pl help asap
Edited by mac_gyver, 25 September 2014 - 08:21 AM.
code tags please

Ok, I'm having some trouble with file_get_contents failing & am trying to make a loop that will sleep & then retry a maximum of 3 times before giving up & moving to the next item. I tried using a while loop but I'm getting unexpected T_WHILE, which I assume is because it's already in a while loop?

I found this:

Code: [Select]
$maxTries = "3";
for ($try=1; $try<=$maxTries; $try++) {

but could use some clarification. Will that only trigger if it failes or do I need to include another if statement like

Code: [Select]
$myfile = file_get_contents("http://example.com");
if ($myfile === FALSE) {
$maxTries = "3";
for ($try=1; $try<=$maxTries; $try++) {
sleep(3);
$myfile = file_get_contents("http://example.com");
}
else {
//continue with script

I hope that makes sense...trying to explain it as best I can without having to post my actual source code as I've had it stolen off forums before & now I have a clone to compete with. I'm not great at putting this into words so if I need to clarify, please feel free to ask. I appreciate any & all help given. Thanks!

I'm having a rough time getting an AS3 application working with a PHP script.

The PHP script takes POST variables and then sends an email using SMTP.

When running it through a standard HTML form, the PHP side works perfectly.

However, when I send the exact same POST variables through AS3 to the script, I get this error.

Failed to set sender: phpemailtesting@gmail.com [SMTP: Failed to write to socket: not connected (code: -1, response: )]

So, I'm not really sure what the issue is here... Here's some code that might help.

//print_r($_POST);
require_once('Mail-1.2.0/Mail.php');

$from = isset($_POST['emailfrom']) ? $_POST['emailfrom'] : '';
$to = isset($_POST['emailsubject']) ? $_POST['emailto'] : '';
$bcc = isset($_POST['bcc'])? $_POST['bcc'] : '';
$subject = isset($_POST['emailsubject']) ? $_POST['emailsubject'] : '';
$body = isset($_POST['emailbody']) ? $_POST['emailbody'] : '';
$ssl = isset($_POST['ssl']) ? $_POST['ssl'].'://' : '';
$smtp_server = isset($_POST['smtpserver']) ? $_POST['smtpserver'] : '';
$password = isset($_POST['emailpassword']) ? $_POST['emailpassword'] : '';
$port = isset($_POST['port']) ? $_POST['port'] : '';
$success_counter = 0;
$fail_counter = 0;
$bigerror;

if($from!='' && $to!='' && $subject!='' && $body!='' && $smtp_server!='' && $password!='' && $port!='') {
if($bcc!='') {
$bcc_array = explode(',',$bcc);
}
$host = $ssl . $smtp_server;
$smtp = Mail::factory('smtp', array('host'=>$host, 'port'=>$port, 'auth'=>true, 'username'=>$from, 'password'=>$password));

$header = array('From'=>$from, 'To'=>$to, 'Subject'=>$subject);
$mail = $smtp->send($to, $header, $body);

        if (PEAR::isError($mail)) {
$bigerror = $mail->getMessage();
$fail_counter++;
           //echo("<p>Message failed".$to." :<br />" . $mail->getMessage() . "</p>");
        } else {
$success_counter++;
         //echo("<p>Message successfully sent to <b>". $to ."</b>!</p>");
        }

for($counter=0; $counter<count($bcc_array) && $counter<=99; $counter++) {
$header = array('From'=>$from, 'To'=>$bcc_array[$counter], 'Subject'=>$subject);
$mail = $smtp->send($bcc_array[$counter], $header, $body);

if (PEAR::isError($mail)) {
$bigerror = $mail->getMessage();
//echo("<p>Message failed".$bcc_array[$counter]." :<br />" . $mail->getMessage() . "</p>");
$fail_counter++;
} else {
         //echo("<p>Message successfully sent to <b>". $bcc_array[$counter] ."</b>!</p>");
$success_counter++;
}
}
//echo "<br /><br />Successful emails: " . $success_counter;
//echo "<br />Failed emails: " . $fail_counter;
echo $success_counter.",".$fail_counter.",".$bigerror;
} else {
echo "error";
//echo '<p>Some information is missing, please try again!</p>';
}


Then, the AS if anybody's interested in seeing it.

Code: [Select]
//Create loader to load emailer.php
var loader:URLLoader = new URLLoader(); 
var request:URLRequest = new URLRequest("http://tendollartools.com/testmail/emailer.php"); 

//Create POST variables
var variables:URLVariables = new URLVariables(); 
variables.emailfrom = preferences["smtpLogin"];
variables.emailto = preferences["smtpLogin"];
variables.smtpserver = preferences["smtpServer"];
variables.emailpassword = preferences["smtpPassword"];
variables.ssl = preferences["smtpSSL"];
variables.port = preferences["smtpPort"];
variables.bcc = emails;
variables.emailsubject = preferences["emailSubject"];
variables.emailbody = preferences["emailBody"];

//Set method to POST and set variables as the vars to send to emailer.php
request.method = URLRequestMethod.POST;
request.data = variables; 

//Load emailer.php and run the onEmailComplete function when finished loading
loader.dataFormat = URLLoaderDataFormat.TEXT;
loader.addEventListener(Event.COMPLETE, onEmailComplete); 
loader.load(request);
The preferences object has all the correct information in it... so this is where I'm confused. Why will the exact same POST information work from an HTML form, but not when sent through AS?

I wish to lockout the user for (3) minutes if they get (4) wrong username/password attempts in (5) minutes.   Is this typically tied to a single IP using $_SERVER['REMOTE_ADDR']?   Is it a good ideal to also check for a given username but from any IP?  I might be wrong, but I assume the value in $_SERVER['REMOTE_ADDR'] is under the user's control.   Obviously, a session wouldn't be ideal as the associated cookie is under the user's control.  Do I need to use the database or is there a better way?   Any thoughts or advise would be appreciated.

Warning: include(): Failed opening 'lang/en.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/name/public_html/db/config.php on line 13

What does the for inclusion mean.   Line 13:

include 'lang/'.$_SESSION['default_lang'].'.php';

Thank you.