PHP - Once Member Register Creates Page

I'am trying to make the page show the errors in the same page under the register button, but it always disable all the forms and show the error by it self.

my code:
Quote

<?php
ob_start();
session_start();
include_once "functions.php";

connect();

if(!$_POST['submit']){
    echo "<table border=\"0\" cellspacing=\"3\" cellpadding=\"3\">\n";
    echo "<form method=\"post\" action=\"register.php\">\n";
    echo "<tr><td colspan=\"2\" align=\"center\">Registration Form</td></tr>\n";
    echo "<tr><td>Username</td><td><input type=\"text\" name=\"name\" maxLength=14></td></tr>\n";
    echo "<tr><td>Password</td><td><input type=\"password\" name=\"password\" maxLength=14></td></tr>\n";
    echo "<tr><td>Confirm</td><td><input type=\"password\" name=\"passconf\" maxLength=14></td></tr>\n";
    echo "<tr><td>E-Mail</td><td><input type=\"text\" name=\"email\" maxLength=24></td></tr>\n";

    echo "<tr><td>Question</td><td><input type=\"text\" name=\"idnumber\" maxLength=14></td></tr>\n";
    echo "<tr><td>Answer</td><td><input type=\"text\" name=\"phone\" maxLength=14></td></tr>\n";

    echo "<form method=\"post\" action=\"captcha.php\">\n";
    echo "<table border=\"0\" cellspacing=\"3\" cellpadding=\"3\">\n";
    echo "<tr><td>Type The Letters You See Below Into the Box</td></tr>\n";
    echo "<tr><td align=\"center\"><img src=\"image.php\"></td></tr>\n";
    echo "<tr><td align=\"center\"><input type=\"text\" name=\"image\"></td></tr>\n";

    echo "<tr><td colspan=\"2\" align=\"center\"><input type=\"submit\" name=\"submit\" value=\"Register\"></td></tr>\n";
    echo "</form></table>\n";
}else
{
    $errors = array();
    $name = protect($_POST['name']);
    $password = protect($_POST['password']);
    $confirm = protect($_POST['passconf']);
    $email = protect($_POST['email']);
    $phone = protect($_POST['idnumber']);
    $ownerReply = protect($_POST['phone']);
    $image = $_POST['image'];

    if($image == $_SESSION['string']){}else{
    $errors[] = "Wrong Captcha!";
    }ob_end_flush();

 

        if(!$name){
            $errors[] = "Username is not defined!";
        }
       
        if(!$password){
            $errors[] = "Password is not defined!";
        }
       
        if($password){
            if(!$confirm){
                $errors[] = "Confirmation password is not defined!";
            }
        }
       
        if(!$email){
            $errors[] = "E-mail is not defined!";
        }

        if(!$idnumber){
            $errors[] = "Security Question is not defined!";
        }

        if(!$phone){
            $errors[] = "Security Answer is not defined!";
        }
       
        if($name){
            if(!ctype_alnum($name)){
                $errors[] = "Username can only contain numbers and letters!";
            }
           
            $range = range(8,14);
            if(!in_array(strlen($name),$range)){
                $errors[] = "Username must be between 8 and 14 characters!";
            }
        }
       
        if($password && $confirm){
            if($password != $confirm){
                $errors[] = "Passwords do not match!";
            }

            $range = range(10,14);
            if(!in_array(strlen($password),$range)){
                $errors[] = "Password must be between 10 and 14 characters!";
            }
        }
       
        if($email){
            $checkemail = "/^[a-z0-9]+([_\\.-][a-z0-9]+)*@([a-z0-9]+([\.-][a-z0-9]+)*)+\\.[a-z]{2,}$/i";
            if(!preg_match($checkemail, $email)){
                $errors[] = "E-mail is not valid, must be name@server.tld!";
            }
        }

        if($idnumber){
            if(!ctype_alnum($phone)){
                $errors[] = "Securty Question can only contain numbers and letters!";
            }
           
            $range = range(8,14);
            if(!in_array(strlen($idnumber),$range)){
                $errors[] = "Securty Question must be between 8 and 14 characters!";
            }
        }
       
        if($phone){
            if(!ctype_alnum($phone)){
                $errors[] = "Securty Answer can only contain numbers and letters!";
            }
           
            $range = range(8,14);
            if(!in_array(strlen($phone),$range)){
                $errors[] = "Securty Answer must be between 8 and 14 characters!";
            }
        }
       
        if($email){
            $sql2 = "SELECT * FROM `account` WHERE `email`='".$email."'";
            $res2 = mysql_query($sql2) or die(mysql_error());
           
                if(mysql_num_rows($res2) > 0){
                    $errors[] = "The e-mail address you supplied is already in use of another user!";
                }
        }
       
        if(count($errors) > 0){
            foreach($errors AS $error){
                echo $error . "<br>\n";
            }
        }else {
            $sql4 = "INSERT INTO `account`
                    (`name`,`password`,`email`,`idnumber`,`phone`)
                    VALUES ('".$name."','".md5($password)."','".$email."','".$idnumber."','".$phone."')";
            $res4 = mysql_query($sql4) or die(mysql_error());
            echo "You have successfully registered with the username <b>".$name."</b> and the password of <b>".$password."</b>!";
        }
}

?>



Direct link to the register page in case you didn't understand what i mean.

http://hebrithco.com/server/bew/

Hi nothing seems to work! No error messages appear and no data enters my database! Can people please help me please! Needs to be solved by today! Thanks







<?php
 
//connect to db
   $connect = mysql_connect("l", "", "");
   mysql_select_db("", $connect);

   //if submit button gets pressed
   if(isset($_POST['submit'])){
   
   //Grab data from the form
            $username = preg_replace('#[^A-Za-z0-9]#i','', $_POST['username']); // filter everything but letters and numbers
            $firstname = preg_replace('#[^A-Za-z]#i', '', $_POST['firstname']); // filter everything but Letters
            $lastname = preg_replace('#[^A-Za-z]#i', '', $_POST['lastname']); // filter everything but Letters
            $phone = preg_replace('#[^0-9]#i', '', $_POST['phone']); // filter everything but numbers
            $address= preg_replace('#[^A-Za-z]#i', '', $_POST['address']); // filter everything but Letters
            $postcode= preg_replace('#[^A-Za-z]#i', '', $_POST['postcode']); // filter everything but Letters
            $town= preg_replace('#[^A-Za-z]#i', '', $_POST['town']); // filter everything but Letters
            $housenumber= preg_replace('#[^0-9]#i', '', $_POST['housenumber']); // filter everything but numbers
            $b_m = preg_replace('#[^0-9]#i', '', $_POST['birth_month']); // filter everything but numbers
            $b_d = preg_replace('#[^0-9]#i', '', $_POST['birth_day']); // filter everything but numbers
            $b_y = preg_replace('#[^0-9]#i', '', $_POST['birth_year']); // filter everything but numbers
   
      
            $email1 = mysql_real_escape_string (stripslahes (strip_tags($_POST['email1'])));
            $email2 = mysql_real_escape_string (stripslahes (strip_tags($_POST['email2'])));
            $pass1 = md5(mysql_real_escape_string (stripslahes (strip_tags($_POST['pass1']))));
            $pass2 = stripslashes(strip_tags($_POST['pass2']));
   
            $emailCHecker = mysql_real_escape_string($email1);
            $emailCHecker = str_replace("`", "", $emailCHecker);
   
            // Database duplicate username check setup for use below in the error handling if else conditionals
            $sql_uname_check = mysql_query("SELECT username FROM member WHERE username='$username'");
            $uname_check = mysql_num_rows($sql_uname_check);
     
            // Database duplicate e-mail check setup for use below in the error handling if else conditionals
            $sql_email_check = mysql_query("SELECT email FROM member WHERE email='$emailCHecker'");
            $email_check = mysql_num_rows($sql_email_check);
   
   
            // Convert Birthday to a DATE field type format(YYYY-MM-DD) out of the month, day, and year supplied
            $dateofbirth = "$b_y-$b_m-$b_d";
   
   
   //If any errors have been found, DO NOT register the member, and instead, redisplay the form
   
   
   }

   if (!isset($username) || !isset($firstname) || !isset ($lastname) || !isset($address) || !isset($postcode) || !isset($town) || !isset($b_m) || !isset($b_d) || !isset($b_y) || !isset($email1) || !isset($email2) || !isset($pass1) || !isset($pass2)) {
   
            $errorMsg = 'ERROR: You did not submit the following required information:<br /><br />';
 
            if(!isset($username)){
            $errorMsg .= ' * User Name<br />';
         }
            if(!isset($firstname)){
            $errorMsg .= ' * First Name<br />';
         }    
            if(!isset($lastname)){
            $errorMsg .= ' * Last Name<br />';
         }    
            if(!isset($address)){
            $errorMsg .= ' * Address<br />';
         }    
            if(!isset($postcode)){
            $errorMsg .= ' * postcode<br />';
         }    
            if(!isset($town)){
            $errorMsg .= ' * town<br />';
         }    
            if(!isset($b_m)){
            $errorMsg .= ' * Birth Month<br />';     
         }
            if(!isset($b_d)){
            $errorMsg .= ' * Birth Day<br />';       
         }
            if(!isset($b_y)){
            $errorMsg .= ' * Birth year<br />';       
         }       
            if(!isset($email1)){
            $errorMsg .= ' * Email Address<br />';     
         }
            if(!isset($email2)){
            $errorMsg .= ' * Confirm Email Address<br />';       
         }    
            if(!isset($pass1)){
            $errorMsg .= ' * Login Password<br />';     
         
         }
            if(!isset($pass2)){
            $errorMsg .= ' * Confirm Login Password<br />';       
         }    
            if ($email1!= $email2){
            $errorMsg.='ERROR: Your email fields below do not match<br />';
         }
            if ($pass1!= $pass2){
            $errorMsg.='ERROR: Your password fields below do not match<br />';
         }
   
            if(strlen($username)<6){
            $errorMsg.="<u>ERROR:</u><br/>Your User Name is too short. 6-20 characters please. <br/>";
         }
   
            if(strlen($username)>20){
            $errorMsg.="<u>ERROR:</u><br/>Your User Name is too long. 6-20 characters please. <br/>";
         }

            if($username_check>0){
            $errorMsg.="<u>ERROR:</u><br/> Your User Name is already in use inside of our system. Please try another.<br/>";
         }
   
            if($email_check >0){
            $errorMsg.="<u>ERROR:</u><br/>Your Email address is already in use inside of our system. Please use another.<br/>";
         }
   
   
   }
     else{   
   
   
            mysql_query("INSERT INTO member (username, firstname, lastname, email, password, dateofbirth, phone, lastlogin)
            VALUES('$username','$firstname','$lastname','$email1','$password', '$dateofbirth','$phone', now())") 
   
            or die (mysql_error());
   
   
            $sql = mysql_query("INSERT INTO address (address, postcode, town, housenumber)
            VALUES('$adress','$postcode,'$town','$housenumber'")
   
            or die (mysql_error());
   
            mysql_close();
   
            Echo "Welcome to my site, $username! You may now <a href=\"index.php\">login</a>.";
   
         }

      
   
   
   ?>

I installed phpbb to my site; however i didn't like it so i deleted it. Now my register.php (which hasn't been changed and worked before the phpbb install) will not post data to my database. If someone can help me fix this problem id be most thankful.

Hi,

I'm very new to php/mysql, but for a project I'm working on I need to create users that are admins, and normal users. The admins would be able to post news stories, and delete user accounts. Whereas the users would just be able to comment on the news stories.

I'm just wondering how I would create a normal 'register' page for both, which has the same fields, but somehow creates some people as admins, and others as normal users... with the ability to limit who can become an admin, so not everyone can register as one. I'm not sure how I would achieve this, or even know how to do it.

Does anyone know any tutorials or code on how to achieve this?

Your help is greatly appreciated,

Thanks.

hi! i dont know if the query below from mysql is slowing down the page or i have not written it properly:
It is very slow, even when you limit the results to 100 . Thanks in advance..
Code: [Select]
SELECT  `tbl_business`.`appformno`, " _
            & "`tbl_business`.`pobox`, `tbl_business`.`plotno`, `tbl_business`.`postalcode`, " _
            & "`tbl_business`.`zonecode`, `tbl_business`.`ne`, `tbl_activities`.`act_code`, " _
            & "`tbl_activity_codes`.`approved_fee`, `tbl_payment_status`.`status`, " _
            & "`tbl_business`.`company`, `tbl_activity_codes`.`description` " _
            & "FROM (`citycouncil`.`tbl_activity_codes` `tbl_activity_codes` " _
            & "LEFT JOIN (`citycouncil`.`tbl_business` `tbl_business` " _
            & "LEFT JOIN `citycouncil`.`tbl_activities` `tbl_activities` " _
            & "ON `tbl_business`.`appformno`=`tbl_activities`.`appformno`) " _
            & "ON `tbl_activity_codes`.`act_code`=`tbl_activities`.`act_code`) " _
            & "LEFT JOIN `citycouncil`.`tbl_payment_status` `tbl_payment_status` " _
            & "ON `tbl_activities`.`id`=`tbl_payment_status`.`activity_id` " _
            & "WHERE tbl_business.appformno LIKE '%" & strFormNo & "%' " _
            & "AND tbl_business.bid LIKE '%" & strBizIdNo & "%'" _
            & " AND `tbl_business`.`contperson` LIKE '%" & strContPerson & "%' " _
            & "AND `tbl_business`.`zonecode` LIKE '%" & strZoneCode & "%' " _
            & " AND `tbl_activities`.`act_code` LIKE '%" & strBizActCode & "%' " _
            & "AND `tbl_business`.`roadstreet` LIKE '%" & strStreet & "%' " _
            & " AND `tbl_business`.`company` LIKE '%" & strBizName & "%' " _
            & "AND `tbl_business`.`building` LIKE '%" & strBuilding & "%' " _
            & "ORDER BY `tbl_business`.`appformno`