PHP - Send Post Request With Multiple Headers

Hello, I am a newbie regarding PHP and have done mostly only front-end web design for a couple of years and recently started querying DB's and displaying the data, but now this is a new project.

1) I have an external application sending HTTP POST requests to a specific php page on my web server.
2) I would like to store each new POST in a MySQL table and sort the value of all header names in their designated columns and add the current timestamp as well.
The headers included are "X", "Z", "Player", "UUID"

my DB has the columns 'X', 'Z', 'Player', UUID', 'Timestamp'.

I've tested code snippets as the ones below, but fail to incorporate them in the bigger picture of what I'm trying to achieve.
This one saves the data into a CSV, but it rewrites the file, appending a new line would already be a big step forward.

<?php
// https://gist.github.com/magnetikonline/650e30e485c0f91f2f40

class DumpHTTPRequestToFile {

	public function execute($targetFile) {

		$data = sprintf(
			"%s %s %s\n\nHTTP headers:\n",
			$_SERVER['REQUEST_METHOD'],
			$_SERVER['REQUEST_URI'],
			$_SERVER['SERVER_PROTOCOL']
		);

		foreach ($this->getHeaderList() as $name => $value) {
			$data .= $name . ': ' . $value . "\n";
		}

		$data .= "\nRequest body:\n";

		file_put_contents(
			$targetFile,
			$data . file_get_contents('php://input') . "\n"
		);

		echo("Done!\n\n");
	}

	private function getHeaderList() {

		$headerList = [];
		foreach ($_SERVER as $name => $value) {
			if (preg_match('/^HTTP_/',$name)) {
				// convert HTTP_HEADER_NAME to Header-Name
				$name = strtr(substr($name,5),'_',' ');
				$name = ucwords(strtolower($name));
				$name = strtr($name,' ','-');

				// add to list
				$headerList[$name] = $value;
			}
		}

		return $headerList;
	}
}


(new DumpHTTPRequestToFile)->execute('./dumprequest.csv');

This snippet also seems to return the headers and their values but I don't know how to efficiently write and append it to a TXT or CSV, or preferably, directly into a MySQL database.

<?php
foreach (getallheaders() as $name => $value) {

    echo "$name: $value";
	echo "<br>";
}
?>

Any help towards storing the header values of HTTP POST requests into a database would be greatly appreciated!
Also, storing the body data in a separate column is optional, but nice to have.

Hey everyone, so im trying to utilize a systems OPTION command send prior to the POST command, the OPTION command will for example state that it would like to request specific headers. im trying to perform this to get the headers needed before the POST command im trying to execute, the values are required for the POST command i need to perform to get a response.

The URL in question would be:

https://media-entitlement.mlb.com/api/v3/jwt?os=windows&did=ffeae86c-9447-4bac-a021-caad0c02c605&appname=mlbtv_web

Host: media-entitlement.mlb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,x-api-key
Referer: https://www.mlb.com/tv/g566992/v4db99327-63d3-4f23-a94d-a1ff465e177d
Origin: https://www.mlb.com
Connection: keep-alive
Cache-Control: max-age=0
 

then a post command is performed just after which retrieves the values originally requested by the OPTIONS command prior to the POST:

Host: media-entitlement.mlb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mlb.com/tv/g566992/v4db99327-63d3-4f23-a94d-a1ff465e177d
x-api-key: arBv5yTc359fDsqKdhYC41NZnIFZqEkY5Wyyn9uA
Authorization: bearer eyJraWQiOiJUNXQteURjQ2pQeWg0anBpOF9Dcm5YR2hkR0hjLUhLb1F6cmo5X3QyeENZIiwiYWxnIjoiUlMyNTYifQ.eyJ2ZXIiOjEsImp0aSI6IkFULjVudzBlOElzZlFLaDhHYWE1Qzc1blMyQ1FwWVpkSHVCdVFhVFd0a25CY0EiLCJpc3MiOiJodHRwczovL2lkcy5tbGIuY29tL29hdXRoMi9hdXMxbTA4OHlLMDdub0JmaDM1NiIsImF1ZCI6ImFwaTovL21sYl9kZWZhdWx0IiwiaWF0IjoxNTYwNDcwNjYyLCJleHAiOjE1NjA1NTcwNjIsImNpZCI6IjBvYXA3d2E4NTdqY3ZQbFo1MzU1IiwidWlkIjoiMDB1N2psN2UxSjlhM0JGVVMzNTYiLCJzY3AiOlsib3BlbmlkIiwiZW1haWwiXSwic3ViIjoicmF5bmFqcGFudGhlckBtc24uY29tIiwiaXBpZCI6IjY3NzIwMjEiLCJndWlkIjoiNjc1ZmYxNzdiZTE2NTE0ZDRjYmYxNmVhOTNmYzg3NTcifQ.YDW-3f8T5ZcHg2wTvyAfHX0A5LdijP3lgvoSTKla_hBoE5_RBwU9aUYinrATQDNg8d_6wQkCo-ejAX_t9SGE7IGE8j-FE-oQlqIz2ubG7XDz3-84l5zJrSZ0QwxPoGOXMt_0-9DkZ_V4uzISGhN_pI_HnUr26IW-8sf0XK3yNSBOJLQnqx-iZ6HtiUEuI9Qi2T2J2zZuFSnDytxGlqmjC1mAyf0inLdr1LIuUfDayak3G5-YnP91z-8f2_k8QwSVw9IMg_bOCUaMD9suu67VaCU5EnREgZoTxCKEUIIKeJtlSCx6VgW_oXbOguRO0L0BlMR6eHDX9pDt0CgPftfxTw
Origin: https://www.mlb.com
Connection: keep-alive
Cache-Control: max-age=0

Now Generally speaking, i fully understand their authorization etc. but this specific set of values seem only used in this one situation, they use bam-sdk which i understand pretty well. but needless to say this authorization bearer, and api-key value only seem generated via the initial OPTIONS grab in browser. so in summary i need to understand how these OPTIONS commands can be utilized to store the required headers as a variable which can be used in the POST command.

Thanks in advance for your time and energy responding.

mosb3rgler

Hey people of php freaks recently, I've been having issues changing a discord webhook [curl] post request to a website [curl] post request. My knowledge in PHP is very limited so, I really would appreciate some help

This is the function:

function postToDiscord($message)
{
    $data = array("content" => $message, "username" => "Payouts Bot");
    $curl = curl_init("https://discordapp.com/api/webhooks/591662537293168650/eyme87xmCuKne4njucoDSqzojq78NaS9x7t4sgP9m-l5EmrvUeZegkM4wok-L-UdBDxo");
    curl_setopt($curl, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($curl, CURLOPT_POSTFIELDS, json_encode($data));
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
    return curl_exec($curl);
}

Currently the discord bot transfers the message into a discord channel and, I do not want that. I want it to transfer it onto a website page. As, I said i'm not very keen on this so please help me.

Hi,

For about a month, I have been trying to figure out why my code will not return anything after posting a wwwForm (I have also tried the newer equivalent of this function but I had no luck with that either.) The nameField and passwordField are taken from text boxes within the game and the code used in my login script is copied and pasted from a Register script but I have changed the file location to the login.php file. The register script works fine and I can add new users to my database but the login script only outputs "Form Sent." and not the "present" that should return when the form is returned and it never gets any further than that point meaning that it lets the user through with no consequence if they use an invalid name because the script never returns an answer. What should I do to fix this?

Thanks,

Unity Code:

using System.Collections;
using UnityEngine;
using UnityEngine.UI;
using UnityEngine.Networking;

public class Login : MonoBehaviour
{
    public InputField nameField;
    public InputField passwordField;

    public Button acceptSubmissionButton;

    public void CallLogInCoroutine()
    {
        StartCoroutine(LogIn());
    }

    IEnumerator LogIn()
    {
        WWWForm form = new WWWForm();
        form.AddField("username", nameField.text);
        form.AddField("password", passwordField.text);
        WWW www = new WWW("http://localhost/sqlconnect/login.php", form);
        Debug.Log("Form Sent.");
        yield return www;
        Debug.Log("Present");        if (www.text[0] == '0')
        {
            Debug.Log("Present2");
            DatabaseManager.username = nameField.text;
            DatabaseManager.score = int.Parse(www.text.Split('\t')[1]);
            Debug.Log("Log In Success.");
        }
        else
        {
            Debug.Log("User Login Failed. Error #" + www.text);
        }
        
    }

    public void Validation()
    {
        acceptSubmissionButton.interactable = nameField.text.Length >= 7 && passwordField.text.Length >= 8;
    }
}

login.php:

<?php
    echo "Test String2";
    $con = mysqli_connect('localhost', 'root', 'root', 'computer science coursework');

    // check for successful connection.
    if (mysqli_connect_errno())
        {
            echo "1: Connection failed"; // Error code #1 - connection failed.
            exit();
        }

    $username = mysqli_escape_string($con, $_POST["username"]);
    $usernameClean = filter_var($username, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_LOW | FILTER_FLAG_STRIP_HIGH);
    $password = $_POST["password"];

    if($username != $usernameClean)
    {
        echo "7: Illegal Username, Potential SQL Injection Query. Access Denied.";
        exit();
    }

    // check for if the name already exists.

    $namecheckquery = "SELECT username, salt, hash, score FROM players WHERE username='" . $usernameClean . "';";

    $namecheck = mysqli_query($con, $namecheckquery) or die("2: Name check query failed"); // Error code # 2 - name check query failed.

    if (mysqli_num_rows($namecheck) != 1)
    {
    	echo "5: No User With Your Log In Details Were Found Or More Than One User With Your Log In Details Were Found"; // Error code #5 - other than 1 user found with login details
    	exit();
    }

    // get login info from query
    $existinginfo = mysqli_fetch_assoc($namecheck);
    $salt = $existinginfo["salt"];
    $hash = $existinginfo["hash"];

    $loginhash = crypt($password, $salt);
    if ($hash != $loginhash)
    {
    	echo "6: Incorrect Password"; // error code #6 - password does not hash to match table
    	exit;
    }
    echo "Test String2";
    echo"0\t" . $existinginfo["score"];

?>