PHP - Server Request Method Defaults To Get

Code: [Select]
<?php 
if ($_SERVER['REQUEST_METHOD'] == 'POST'){
$db = mysql_connect("localhost", "*******" , "*****")or die("Error connecting to database: " . mysql_error());
$db_used = mysql_select_db("pskkorg_drp1", $db)or die("Could not select database: " . mysql_error());

$user_name = mysql_real_escape_string($_POST['username'],$db);

$query = mysql_query("SELECT * FROM student WHERE Username = '$user_name'",$db) or die(mysql_error());
if(mysql_num_rows($query) == 1){ 
        echo "Login successful, welcome back " . $user_name . ""; 
}else{
        echo "Login unsuccessful, please ensure you are using the correct details";
}
}else{
echo "Error";
}
?>
take a look at this code, is there anything wrong?... it always come out the error output when i test it.
when i enter this url,
http://www.pskk.org/LMS/LMSscripts/FirstTimeUser10.php?Username=149090

it come out Error. suppose it will appear Login Successful since the username 149090 exist in the database.

I need to make my client's site distinguish among different tabs in the same browser. (See http://www.phpfreaks.com/forums/index.php?topic=357772.0 for background.)

I create a tab ID when the user first visits the site in a particular tab, and I'm passing it from page to page as a parameter. This seems to be the only way to do what I need.

The tab ID is always passed through POST so that the user won't see it. If it were visible, users could make trouble (or more likely get in trouble) by adding or removing the ID themselves.

This is not simple where a page is loaded by a hyperlink. The anchor tag passes parameters via GET, period.

The solution I found is to link to a script named post.php, which takes the real link target and the tab ID as parameters, sends the browser a form that passes the tab ID to the real link target via POST, and auto-submits the form via JavaScript.

This works, but it requires two round trips to the browser to load a page. It's also a pain to code.

Is there a more efficient way to do this... perhaps a way to make the server send the browser a POST response, even though it made a GET request?

If it matters, the server is Apache 2.x.

Hello,

I need to execute a remote web page (distant server) every X seconds.

How is it possible and is there any way to make it look exactly like a normal user request through a standard browser like Firefox, Chrome, etc. ?

I've heard of cURL, but it seems that servers may block it, so there must be somehow a difference between a usual user request and a cURL execution.

Thank you for any help ! :-)
Matthew

Hi,

For about a month, I have been trying to figure out why my code will not return anything after posting a wwwForm (I have also tried the newer equivalent of this function but I had no luck with that either.) The nameField and passwordField are taken from text boxes within the game and the code used in my login script is copied and pasted from a Register script but I have changed the file location to the login.php file. The register script works fine and I can add new users to my database but the login script only outputs "Form Sent." and not the "present" that should return when the form is returned and it never gets any further than that point meaning that it lets the user through with no consequence if they use an invalid name because the script never returns an answer. What should I do to fix this?

Thanks,

Unity Code:

using System.Collections;
using UnityEngine;
using UnityEngine.UI;
using UnityEngine.Networking;

public class Login : MonoBehaviour
{
    public InputField nameField;
    public InputField passwordField;

    public Button acceptSubmissionButton;

    public void CallLogInCoroutine()
    {
        StartCoroutine(LogIn());
    }

    IEnumerator LogIn()
    {
        WWWForm form = new WWWForm();
        form.AddField("username", nameField.text);
        form.AddField("password", passwordField.text);
        WWW www = new WWW("http://localhost/sqlconnect/login.php", form);
        Debug.Log("Form Sent.");
        yield return www;
        Debug.Log("Present");        if (www.text[0] == '0')
        {
            Debug.Log("Present2");
            DatabaseManager.username = nameField.text;
            DatabaseManager.score = int.Parse(www.text.Split('\t')[1]);
            Debug.Log("Log In Success.");
        }
        else
        {
            Debug.Log("User Login Failed. Error #" + www.text);
        }
        
    }

    public void Validation()
    {
        acceptSubmissionButton.interactable = nameField.text.Length >= 7 && passwordField.text.Length >= 8;
    }
}

login.php:

<?php
    echo "Test String2";
    $con = mysqli_connect('localhost', 'root', 'root', 'computer science coursework');

    // check for successful connection.
    if (mysqli_connect_errno())
        {
            echo "1: Connection failed"; // Error code #1 - connection failed.
            exit();
        }

    $username = mysqli_escape_string($con, $_POST["username"]);
    $usernameClean = filter_var($username, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_LOW | FILTER_FLAG_STRIP_HIGH);
    $password = $_POST["password"];

    if($username != $usernameClean)
    {
        echo "7: Illegal Username, Potential SQL Injection Query. Access Denied.";
        exit();
    }

    // check for if the name already exists.

    $namecheckquery = "SELECT username, salt, hash, score FROM players WHERE username='" . $usernameClean . "';";

    $namecheck = mysqli_query($con, $namecheckquery) or die("2: Name check query failed"); // Error code # 2 - name check query failed.

    if (mysqli_num_rows($namecheck) != 1)
    {
    	echo "5: No User With Your Log In Details Were Found Or More Than One User With Your Log In Details Were Found"; // Error code #5 - other than 1 user found with login details
    	exit();
    }

    // get login info from query
    $existinginfo = mysqli_fetch_assoc($namecheck);
    $salt = $existinginfo["salt"];
    $hash = $existinginfo["hash"];

    $loginhash = crypt($password, $salt);
    if ($hash != $loginhash)
    {
    	echo "6: Incorrect Password"; // error code #6 - password does not hash to match table
    	exit;
    }
    echo "Test String2";
    echo"0\t" . $existinginfo["score"];

?>

 

Hi Guys

I have a shopping cart where the quantity refresh keeps defaulting to one (i.e. you change it from one to ten and the page refreshes and defaults back to one). This is the automatic refresh, not clicking a button.

We have lots of other carts using almost the exact same code and they work fine. I can swap over the code in the html page for something more basic and it works. I have compared the basket.php files (both in the lib folder and the html folder - we are using smarty templates) with working sites and they are identical.

Here is the basket.html code:

Code: [Select]
<form action="basket.html" method="post" name="update" id="update" >
<table class="basket-table" cellpadding="0" cellspacing="0">
<tr>
<th width="64">Item</th>
<th width="285" class="basket-desc">Item Description</th>
<th width="47">Quantity</th>
<th width="82">Price</th>
<th width="53" class="no-rb">Remove</th>
</tr>
<!--{section name=c loop=$basket.products}-->
<tr class="<!--{cycle values="colour1,colour2"}--><!--{if $smarty.section.c.last}--> no-bb<!--{/if}-->">
<td><!--{if isset($basket.products[c].image) }--><a href="/category/<!--{$basket.products[c].categoryLink}-->/product/<!--{$basket.products[c].link}-->/<!--{if $basket.products[c].hasSiblings}-->?option=<!--{$basket.products[c].productOptionId}--><!--{/if}-->"><img src="<!--{$basket.products[c].image}-->" alt="<!--{$basket.products[c].title}-->" class="img-border" /></a><!--{else}-->&nbsp;<!--{/if}--></td>
<td class="basket-desc"><a href="/category/<!--{$basket.products[c].categoryLink}-->/product/<!--{$basket.products[c].link}-->/<!--{if $basket.products[c].hasSiblings}-->?option=<!--{$basket.products[c].productOptionId}--><!--{/if}-->"><!--{$basket.products[c].prodtitle}-->&nbsp;<!--{if $basket.products[c].hasSiblings}--><!--{$basket.products[c].optiontitle}-->:<!--{$basket.products[c].title}--><!--{/if}--></a></td>
<td><input name="quantity<!--{$smarty.section.c.index}-->" id="<!--{$basket.products[c].prodtitle}-->" value="<!--{$basket.products[c].quantity}-->" maxlength="3" onchange="this.form.submit()" type="text" /></td>
<td>&pound;<!--{$basket.products[c].lineTotal|string_format:"%.2f"}--></td>
<td class="no-rb"><a href="/basket.html?action=delete&amp;po=<!--{$basket.products[c].productOptionId}-->"><img src="/images/btn_bin.gif" alt="Remove" title="Remove" /></a></td>
</tr>

<!--{/section}-->

</table>
<div class="basket-text">
Free UK mainland delivery on order value over &pound;150
</div>
<div class="basket-shipping">
<label for="region">Choose Shipping Region</label>
<select name="region" id="region" onchange="this.form.submit();">
<!--{html_options options=$region selected=$basket.region}-->
</select>
</div>
<div class="basket-prices">
<span>Sub-Total:</span><span class="subtotal">&pound;<!--{$basket.totalPrice|string_format:"%.2f"}--></span>
<span>Delivery:</span><span class="subtotal">&pound;<!--{if isset($basket.shipping.dprice)}--><!--{$basket.shipping.dprice}--><!--{else}-->0.00<!--{/if}--></span>
<span>VAT:</span><span class="subtotal">&pound;<!--{$basket.totalTaxIncShipping|string_format:"%.2f"}--></span>
</div>
<div class="clear"></div>
<div class="coupon">
<img src="images/logo_coupon.gif" alt="Radmore &amp; Tucker" align="left" />
<label for="coupon">Enter Coupon Code</label>
<input name="coupon" id="coupon" onchange="this.form.submit()" type="text" />
</div>
<div class="updatetext">
After making any changes to the quantity or shipping please use the update button to amend your total<br />
<input type="image" src="/images/btn_update.gif" alt="update" value="submit" />
</div>
<div class="clear"></div>
<!--{if isset($basket.totalDiscountTaxed) && $basket.totalDiscountTaxed neq '0'}-->
<div class="total">
Discount: <span>&pound;<!--{$basket.totalDiscountTaxed|string_format:"%.2f"}--></span>
</div>
<div class="clear"></div>
<!--{/if}-->
<div class="total">
Total: <span>&pound;<!--{$basket.totalPriceIncShippingTaxed|string_format:"%.2f"}--></span>
</div>
<div class="clear"></div>
<input type="hidden" name="formAction" value="update"/>
<a href="/checkout.html" class="btn-continue"><img src="/images/btn_continue.gif" alt="continue" title="Continue To Checkout" /></a>
</form>
The other refreshes work (region and coupon).

I think the problem is in the line:

Code: [Select]
<input name="quantity<!--{$smarty.section.c.index}-->" id="<!--{$basket.products[c].prodtitle}-->" value="<!--{$basket.products[c].quantity}-->" maxlength="3" onchange="this.form.submit()" type="text" />
this is the basket.php from the html folder:

Code: [Select]
<?php

require_once('../lib/config.php');
require_once(LIBDIR . "app_top.php");
require_once(LIBDIR . "region.php");


$params = processParams();

// get the regions
$region = new region_collection();

$clist = $region->getRegionList();

$smarty->assign("region", $clist);

if (isset($_POST['formAction']) && $_POST['formAction'] == "update") {

updateBasket();

} elseif (isset($_GET['action']) && $_GET['action'] == "delete") {

if (isset($_GET['po']) && is_numeric($_GET['po'])) {

$basket->edit($_GET['po'], 0);
}
}

if (isset($_POST['region']) && is_numeric($_POST['region'])){
$_SESSION['region'] = intval($_POST['region']);
}

//print_r($basket->output());

if (isset($_SESSION['discountCode'])) {

$message = $basket->coupon($_SESSION['discountCode']);

$smarty->assign('message',$message);

}
//print_r($basket->output());
$smarty->assign('basket', htmlescape($basket->output()));

if(isset($_GET['perror']) && $_GET['perror'] == "1"){

$smarty->assign('message',"There has been a error with the SagePay payment gateway. <br/><br/> Your order has been saved on the system email or phone Radmore and Tucker to proceed with the order.");

}elseif(isset($_GET['perror']) && $_GET['perror'] == "2"){
$smarty->assign('message',"Item/Items in your basket no long have the required quantity, your basket has been updated, plaese check before proceeding with the order.");

}

display('basket.html');

function updateBasket() {

global $smarty, $params, $basket;

for ($i=0;$i<count($_POST);$i++) {

if (isset($_POST['productOption' . $i]) && is_numeric($_POST['productOption' .$i]) &&
isset($_POST['quantity' . $i]) && is_numeric($_POST['quantity' . $i])) {

$backVale = $basket->edit($_POST['productOption' . $i], $_POST['quantity' . $i]);

if ($backVale !== true){
$errorsUpdate[] = $backVale;
}
}
}

if (isset($_POST['coupon']) && !empty($_POST['coupon'])) {

$message = $basket->coupon($_POST['coupon']);

$smarty->assign('message',$message);

}

if(isset($errorsUpdate) && !empty($errorsUpdate)){

$smarty->assign('errorUpdate',implode("<br />", $errorsUpdate));

}

return;

}

function display($screen) {

global $smarty, $params;

$smarty->assign('backlink', $params['backlink']);

$smarty->display($screen);
exit();

}

function processParams() {

$params = array();

if (isset($_SERVER['HTTP_REFERER']) && strpos($_SERVER['HTTP_REFERER'], SITEURL) === 0 &&
strpos($_SERVER['HTTP_REFERER'], "basket") === false && strpos($_SERVER['HTTP_REFERER'], "checkout") === false) {

$params['backlink'] = "/" . str_replace(SITEURL, "" ,$_SERVER['HTTP_REFERER']);

} elseif (isset($_SESSION['backlink'])) {

$params['backlink'] = $_SESSION['backlink'];

} else {

$params['backlink'] = "/index.html";
} 

$params['backlink'] = preg_replace("/\?.*/", "", $params['backlink']);

$_SESSION['backlink'] = $params['backlink'];

return $params;

}

?>
Here is a snippet from the basket.php file in the lib folder.I hope I have grabbed the relevant bit (have attached the full file just in case).

Code: [Select]
/**
* adds product to the basket
* @params int $option the product option id
* @params int $quantity the quantity of the products to add
  */
function add($product, $option, $quantity) {

if (!isset($option) || !is_numeric($option)) {

//trigger_error("No options selected");
return false;
}

if (!isset($quantity) || !is_numeric($quantity) || $quantity < 1 ) {

trigger_error("No quantity selected");
return false;
}

if (!isset($product) || !is_numeric($product) || $product < 1) {

trigger_error("No product selected");
return false;
}

/**
* if the session var doesn't already exist recreate it
*/
if (!isset($_SESSION['basket']) || !is_array($_SESSION['basket'])) {

$_SESSION['basket'] = array();
$_SESSION['basketinfo'] = array();
}

sort($_SESSION['basket']);

Any help the community can give would this would be much appreciated.