PHP - How To Create Php Files From A Script.

I can't find out whats the problem here, would appreciate some input in how to think building my "if". The problem is that I don't seem to catch if an email exists, nor if user exists and neither can I create a new user :/.   Appreciate your help alot!

<?php

	// Start the session in case of errors to display within the page of user creation
	session_start();
	$err_msg = array();
	$errflag = false;



	// Check if the submit button was pressed
	if ($_SERVER['REQUEST_METHOD'] === 'POST'
		&& $_POST['submit'] === 'Skapa')
	{
		// Crypt password
		$options = ['cost' => 10];

		$username = strip_tags($_POST['uname']);
		$password = strip_tags(password_hash($_POST['pword'], PASSWORD_DEFAULT, $options));
		$email = strip_tags($_POST['uname'], '@');

		// Check so all the fields are filled
		if ($_POST['uname'] == '' || $_POST['pword'] == '' || $_POST['pwordcheck'] == '')
		{
			$err_msg[] = 'Please enter all fields<br>';
			$errflag = true;
		}

		// See if passwords and confirm matches
		if ($_POST['pword'] !== $_POST['pwordcheck'])
		{
			$err_msg[] = 'Passwords doesn\'t match!<br>';
			$errflag = true;
		}

		// Check password length, atleast 8 characters
		if (strlen($_POST['pword']) < 7)
		{
			$err_msg[] = 'Password must be atleast 8 characters long';
			$errflag = true;
		}

		// Check if email exists
		include_once('../includes/db.inc.php');
		$db = new PDO(DB_INFO, DB_USER, DB_PASS);

		$sql = "SELECT COUNT(*) AS count FROM movies WHERE email = :emailadress";
			$stmt = $db->prepare($sql);
			$stmt->bindParam(':emailadress', $email);
			$stmt->execute();
			$row = $stmt->fetch(PDO::FETCH_ASSOC);

		if ($row > 0)
		{
			$err_msg[] = 'Email already taken!';
			$errflag = true;
			$db = NULL;
		}
		

		// Check if user exists
		include_once('../includes/db.inc.php');
		$db = new PDO(DB_INFO, DB_USER, DB_PASS);

		$sql = "SELECT uname FROM users WHERE uname = :username";
			$stmt = $db->prepare($sql);
			$stmt->bindParam(':username', $username);
			$stmt->execute();
			$row = $stmt->fetch(PDO::FETCH_ASSOC);

		if ($row > 0)
		{
			$err_msg[] = 'User already exists';
			$errflag = true;
			$db = NULL;
		}

		if ($errflag = false)
		{
			// Everything passed, create the user!
			include_once('../includes/db.inc.php');
			$db = new PDO(DB_INFO, DB_USER, DB_PASS);

			$sql = "INSERT INTO users (uname, pword, email) VALUES (:username, :password, :emailadress)";
				$stmt = $db->prepare($sql);
				$stmt->bindParam(':username', $username);
				$stmt->bindParam(':password', $password);
				$stmt->bindParam(':emailadress');
				$stmt->execute();

			$_SESSION['uname'] = $username;
			header('Location: ../template/header.php');
			exit;
		}
				
		// If any error, send the user back and display messages
		if ($errflag == true)
		{
			$_SESSION['err_msg'] = $err_msg;
			session_write_close();
			header('Location: ../user/create.php');
			exit;
		}
	}

	else
	{
		$_SESSION['err_msg'] = $err_msg;
			session_write_close();
			header('Location: ../user/create.php');
		exit;
	}

?>

Hello,can anyone help me create members search script? here is image example     here is 'users 'table

  `id` int(11) NOT NULL auto_increment,
  `age` varchar(200) collate utf8_unicode_ci NOT NULL,
  `city` varchar(200) collate utf8_unicode_ci NOT NULL,
  `username` varchar(30) collate utf8_unicode_ci NOT NULL,
  `password` varchar(150) collate utf8_unicode_ci NOT NULL,
  `salt` varchar(10) collate utf8_unicode_ci NOT NULL,
  `mgroup` int(3) NOT NULL,
  `email` varchar(100) collate utf8_unicode_ci NOT NULL,
  `ip` varchar(15) collate utf8_unicode_ci NOT NULL,
  `posts` int(11) NOT NULL,
  `date_joined` varchar(25) collate utf8_unicode_ci NOT NULL,
  `logged_in` int(1) NOT NULL default '0',
  `last_action_time` int(25) NOT NULL,
  `signature` text collate utf8_unicode_ci NOT NULL,
  `avatar` varchar(300) collate utf8_unicode_ci NOT NULL default 'default',
  `what_is_doing` varchar(30) collate utf8_unicode_ci NOT NULL,
  `what_is_doing_id` varchar(100) collate utf8_unicode_ci NOT NULL,
  `name` varchar(200) collate utf8_unicode_ci NOT NULL,
  `website` varchar(200) collate utf8_unicode_ci NOT NULL,
  `title` varchar(150) collate utf8_unicode_ci NOT NULL,
  `rank_pips` int(11) NOT NULL,
  `friends` tinytext collate utf8_unicode_ci NOT NULL,
  `blocks` tinytext collate utf8_unicode_ci NOT NULL,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci AUTO_INCREMENT=1 ;

Please help me? 
Edited by sopranolv, 30 January 2015 - 05:26 AM.

<!doctype html>
<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="content-type">
<title>Untitled Document</title>
</head>

<body>
<form action="upload_image.php" method="post" enctype="multipart/form-data">
<label>select page<input type="file" name="image">
<input type="submit" name="upload">
</label>
</form>
<?php 
if(isset($_POST['upload']))
{
	$image_name=$_FILES['image']['name']; //return the name ot image
	$image_type=$_FILES['image']['type']; //return the value of image
	$image_size=$_FILES['image']['size']; //return the size of image
	$image_tmp_name=$_FILES['image']['tmp_name'];//return the value
	if($image_name=='')
	{
		echo '<script type="text/javascript">alert("please select image")</script>';
		exit();
	}
	else
	{
		$ex=move_uploaded_file($image_tmp_name,"image/".$image_name);
		if($ex)
		{
		    echo 'image upload done "<br>"';
			echo $image_name.'<br>';
			echo $image_size.'<br>';
			echo $image_type.'<br>';
			echo $image_tmp_name.'<br>';
		}
		else
		{
			echo 'error';
		}
	}
}
?>
</body>
</html>

I make this simple script for upload files like photo , It's work correctly ,but not upload the large files ex 8MB images 12MB images
Edited by Ch0cu3r, 04 October 2014 - 09:50 AM.
Modified topic title - changed download to upload

Hi All,

I need some help blocking files that don't pass authentication from being uploaded to the server.

Here is my script (below).  It correctly throws errors, but regardless of error / no-error, the file is uploaded. For example, the only files allowed to be uploaded should be .png, .jpeg, .gif -- but I see .flv .docx etc in the destination folder.

You'll see below a variable for each of the error messages.  They basically say that the file name is too long, too big, not an allowed file type, or English characters only allowed in file title name.

Again the errors work properly, but regardless files are uploaded to the "quiz_images" folder.

What do I need to do to stop the upload if an error is triggered?

Thank you for your help...  here is the code snip:

Code: [Select]

$directory_self = str_replace(basename($_SERVER['PHP_SELF']), '', $_SERVER['PHP_SELF']);

$uploadsDirectory = $_SERVER['DOCUMENT_ROOT'] . $directory_self . 'quiz_images/';

$fieldname = 'file';

if ($_POST[submit]) {

if ($_POST[title] <> "") {
$a = TRUE;
} else {
$a = FALSE;
$content .= "<p>$enter_title</p>\n";
}
if ($_POST[video] <> "") {
$b = TRUE;
} else {
$b = FALSE;
$content .= "<p>$enter_embed</p>\n";
}
if ($_POST[description_text] <> "") {
$c = TRUE;
} else {
$c = FALSE;
$content .= "<p>$enter_description</p>\n";
}
if ($_POST[submit] <> "") {
$f = TRUE;
} else {
$f = FALSE;
$content .= "<p>$sorry_error</p>\n";
}

if (is_uploaded_file($_FILES[$fieldname]['tmp_name'])) {
$g = TRUE;
} else {
$g = FALSE;
$content .= "<p>$sorry_error</p>\n";
}

if (getimagesize($_FILES[$fieldname]['tmp_name'])){
$h = TRUE;
} else {
$h = FALSE;
$content .= "<p>$error2</p>\n";
}

if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/png")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 50000)) {

$i = TRUE;
} else {
$i = FALSE;
$content .= "<p>$error2</p>\n";
}

if(preg_match('#^[a-z0-9_\s-\.]*$#i', $pic) ) {
$k = TRUE;
} else {
$k = FALSE;
$content .= "<p>$error3</p>\n";
}


$desc_length = strlen($pic);
        $limit = 40;
        if ($desc_length <= $limit) {
        $l = TRUE;
} else {
$l = FALSE;
$content .= "<p>$error4</p>\n";
}

$now = time();
while(file_exists($uploadFilename = $uploadsDirectory.$now.'-'.$_FILES[$fieldname]['name']))
{
$now++;
}

if (move_uploaded_file($_FILES[$fieldname]['tmp_name'], $uploadFilename)){
$j = TRUE;
} else {
$j = FALSE;
$content .= "<p>$enter_thumb</p>\n";
}

$pic=$now++.'-'.$_FILES[$fieldname]['name'];



if ($a AND $b AND $c AND $f AND $g AND $h AND $i AND $j AND $k AND $l) {............

I have created a page for users to upload files, but for some reason end users can't access the files. we are getting an access denied page and every time files get uploaded i have to ftp to the site and change the permissions.

is there something i am missing?

Thank you in advance.

Honestly, for something like this I don't know how to go about creating this script..

So I want to create a script that will generate every combination of 2 numbers that range from 0-749, so 750x750 = 562500 possible combinations, so for example, 0/749, 43/87, 0/0, 1/1, 2/1, 1/2, 500/450, 405/673, etc..

How would I go about starting to write a script that can generate all of the possible combinations and and put them in an array or write them to a file?

Thanks for the help in advanced!

-CLUEL3SS

I've decided to "re-learn" PHP.

I've created a registration script which works well, however, the login script is not going to plan for me.

This is the script:

<?php include "./global/global.php"; ?>
<?php error_reporting (E_ALL ^ E_NOTICE); ?>

<?php

$username = $_POST['username'];
$password = $_POST['password'];

$submit = $_POST['submit'];

if($submit){
    $sql1 = "SELECT * FROM test2 WHERE username = '".$username."'";
    $res1 = mysql_query($sql1) or die(mysql_error());
    
    $numrows = mysql_num_rows($res1);
        
    if($numrows != 0){
        while($row = mysql_fetch_assoc($res1)){
            $dbusername = $row['username'];
            $dbpassword = $row['password'];
        }
        
        if($username==$dbusername && $password==$dbpassword){
            ob_start();
            $_SESSION['username']=$username;
            header("Location: index.php");
        }
    }else{
        echo("That user doesn't exist!");
    }               
}else{
    
    ?>
    <form action="login.php" method="POST">

    <input type="text" name="username" />
    <input type="password" name="password" />
    <input type="submit" name="submit" value="Login" />

    </form>
    
<?php

}

?>

The problem is that it isn't building the session, so when I go back to the homepage, which looks like this:

<?php include "./global/global.php"; session_start(); ?>
<?php error_reporting (E_ALL ^ E_NOTICE); ?>

<html>

<?php

if($_SESSION){
    echo("Welcome, ".$_SESSION['username']);
}else{
    echo("Please login <a href='login.php'>here</a>");
}

?>

</html>

It shows that I should login.

I can't seem to see what's wrong because I have a script very similar to it and it works fine, so if anyone could help, I'd appreciate it.

Hi guys,

Before I am going to create php script to make a proxy detection, I want to ask that if it possible to create a method that checking whether if the proxy server is a located governments or fbi. Is it possible?

If so, what method I would use?


Thanks,
Mark

Hi all.  I work at a university library where I am the default web coding person.  Although I know far more than anyone else who works here, my skills are not exactly at the guru level. 

At the moment I'm fighting with libcURL, trying to use a (secured) submission form to upload files from faculty to a remote server.  (Of course, I had one that worked which uploaded to a safe directory on our web server, but that was deemed insufficient.  )

I have managed to connect to the FTP server with cURL, and I have managed to create files on that server which have the same name as the files uploaded in the form.  However, for some reason that escapes me, the files created on the FTP server are empty files. 

The server is using Server 2003 and IIS 6, and I am able to successfully upload to it using Filezilla, so I suspect the problem is with my code.

I have searched Google for help with this, but all I can get is examples of how to upload which are the same as the one I already have, and how to delete a file using cURL, which is not what I want to do. 

The problem does seem to be somewhere in the file transfer process.  die($_Files['syllabus']['size']); gives me the correct file size, and I tried moving the file onto the (local) webserver before transfering it via FTP, and the server one was fine--the FTPed version still showed up empty.

If anybody has any idea what's going on, your help would be greatly appreciated.


                //the syllabus file from the form
$syllabus=$_FILES['syllabus']['name'];

                //the syllabus as it will appear on the server (to make it a clickable link in the e-mail sent 
                //to our processing librarian later in the script.  Removing this did not fix the problem anyway.)
$REMsyllabus = str_replace(' ', '-', $_FILES['syllabus']['name']);

                //formatted URL, with FTP information defined just before the syllabus and REMsyllabus files.
$SYLremoteurl = "ftp://${ftpuser}:${ftppasswd}@${ftpserver}/${REMsyllabus}";

$ch = curl_init();

$fp = fopen($syllabus, 'r');

curl_setopt($ch, CURLOPT_URL, $SYLremoteurl);
curl_setopt($ch, CURLOPT_UPLOAD, 1);
curl_setopt($ch, CURLOPT_INFILE, $fp);
curl_setopt($ch, CURLOPT_INFILESIZE, $_FILES['syllabus']['size']);
curl_exec ($ch);
$error_no = curl_errno($ch);
curl_close ($ch);
if ($error_no == 0) {
$error = 'File uploaded succesfully.';
} //if
else {
$error = 'File upload error: '.$error_no;
}//else

} //if
else {
$error = 'No syllabus file selected.';
}//else



This is pretty much the example code from the libcURL PHP section web page, so I'm not entirely sure why it doesn't work.

Thanks in advance for any help anybody can offer!

Hi all,

I am having a few problems.

Basically I have a multiple file upload script, that I can get successfully to save the images to a folder. However what I am trying to do is enter a record in the database for every file that is uploaded, giving it a picture id, album id and user id (p_id, a_id, u_id). From here I then want to rename the image to the p_id in the database(auto_increment).

I am starting just by counting the amount of images uploaded and then creating a record. However I seem to have something wrong, as when I tried it to upload 1 image as a test it created 388,000 blank records! (just p_id as auto)

Can someone explain what I am doing wrong? I am quite new to php.

<?php


$result = array();

$result['time'] = date('r');
$result['addr'] = substr_replace(gethostbyaddr($_SERVER['REMOTE_ADDR']), '******', 0, 6);
$result['agent'] = $_SERVER['HTTP_USER_AGENT'];

if (count($_GET)) {
$result['get'] = $_GET;
}
if (count($_POST)) {
$result['post'] = $_POST;
}
if (count($_FILES)) {
$result['files'] = $_FILES;
}

// we kill an old file to keep the size small
if (file_exists('script.log') && filesize('script.log') > 102400) {
unlink('script.log');
}

$log = @fopen('script.log', 'a');
if ($log) {
fputs($log, print_r($result, true) . "\n---\n");
fclose($log);
}


// Validation

$error = false;

if (!isset($_FILES['Filedata']) || !is_uploaded_file($_FILES['Filedata']['tmp_name'])) {
$error = 'Invalid Upload';
}

else

{



include('../includes/config.php');
session_start();
$a_id = $_SESSION["a_id"];
$u_id = $_SESSION["id"];
$togo = $result['files'];
$i=0;
while ($i < $togo) 

{
$query = mysql_query("INSERT into images (a_id,u_id)
VALUES
('$a_id','$u_id')");

$i++;
}

}

?>



Many Thanks

Maybe some of the great coders here can help this noob out.
So here is what I have so far:

Code: [Select]
//set age criteria for deletion
$age = 60;

//get current date
$datenow  = date("Y-m-d");

//set the range we want to delete
$delete_range = $datenow - $age;

//get old user_id from users table
$oldusers_users = mysql_query ("SELECT user_id FROM users WHERE lastvisit < $delete_range ");

//get user_id from images table that correspond to users table
$oldusers_images = mysql_query ("SELECT user_id FROM images WHERE $oldusers_users=user_id.images ");

//find folders that correspond to the usernames and delete
$oldusers_files = mysql_query ("SELECT username FROM users WHERE lastvisit < $delete_range ");
//print out username
//$result = mysql_($oldusers_files);
$foldername = mysql_result($oldusers_files, 0);

$sigspath = "sigs/";
unlink($sigspath . $foldername . ".gif/index.php");
rmdir($sigspath . $foldername . ".gif");
//now delete user_id's from database
mysql_query("DELETE * FROM users WHERE user_id=$oldusers_users");
mysql_query("DELETE * FROM images WHERE user_id=$oldusers_images");
unset($oldusers_users, $oldusers_images, $oldusers_files, $foldername, $sigspath );
mysql_close($link);
Right now it is only returning the first entry, not the entire list that meets the criteria.  It does delete that one file though but does not remover the rows from the database.

I am sure the database stuff is jacked up I am really new to that part.  What am I doing wrong here or is there a better way to do this perhaps

So far I have managed to create an upload process which uploads a picture, updates the database on file location and then tries to upload the db a 2nd time to update the Thumbnails file location (i tried updating the thumbnails location in one go and for some reason this causes failure)

But the main problem is that it doesn't upload some files

Here is my upload.php

<?php
include 'dbconnect.php';

$statusMsg = '';

$Title = $conn -> real_escape_string($_POST['Title']) ; 
$BodyText = $conn -> real_escape_string($_POST['ThreadBody']) ; 
	 

// File upload path
$targetDir = "upload/";
$fileName = basename($_FILES["file"]["name"]);
$targetFilePath = $targetDir . $fileName;
$fileType = pathinfo($targetFilePath,PATHINFO_EXTENSION);
$Thumbnail = "upload/Thumbnails/'$fileName'";

if(isset($_POST["submit"]) && !empty($_FILES["file"]["name"])){
    // Allow certain file formats
    $allowTypes = array('jpg','png','jpeg','gif','pdf', "webm", "mp4");
    if(in_array($fileType, $allowTypes)){

        // Upload file to server
        if(move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)){

            // Insert image file name into database
            $insert = $conn->query("INSERT into Threads (Title, ThreadBody, filename) VALUES ('$Title', '$BodyText', '$fileName')");
            if($insert){
               $statusMsg = "The file ".$fileName. " has been uploaded successfully."; 

		$targetFilePathArg = escapeshellarg($targetFilePath);
		$output=null;
		$retval=null;
		 //exec("convert $targetFilePathArg -resize 300x200 ./upload/Thumbnails/'$fileName'", $output, $retval);
		 exec("convert $targetFilePathArg -resize 200x200 $Thumbnail", $output, $retval);
		echo "REturned with status $retval and output:\n" ; 
		if ($retval == null) { 
		echo "Retval is null\n" ;
		echo "Thumbnail equals $Thumbnail\n" ; 
		}

            }else{
                $statusMsg = "File upload failed, please try again.";
            } 
        }else{
            $statusMsg = "Sorry, there was an error uploading your file.";
        }
    }else{
        $statusMsg = 'Sorry, only JPG, JPEG, PNG, GIF, mp4, webm & PDF files are allowed to upload.';
    }
}else{
    $statusMsg = 'Please select a file to upload.';
}

//Update SQL db by setting the thumbnail column to equal $Thumbnail
$update = $conn->query("update Threads set thumbnail = '$Thumbnail' where filename = '$fileName'");
            if($update){
               $statusMsg = "Updated the thumbnail to sql correctly.";
		echo $statusMsg ;  } 
else 
{ echo "\n Failed to update Thumbnail. Thumbnail equals $Thumbnail" ; } 


// Display status message
echo $statusMsg;
?>

And this does work on most files however it is not working on a 9.9mb png file  which is named "test.png" I tested on another 3.3 mb gif file and that failed too?

For some reason it returns the following

Updated the thumbnail to sql correctly.Updated the thumbnail to sql correctly.

Whereas on the files it works on it returns

REturned with status 0 and output: Retval is null Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif' Failed to update Thumbnail. Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif'The file rainbow-trh-stache.gif has been uploaded successfully.

Any idea on why this is?

Hello


I have a simple question about file handling...


Is it possible to list all files in directories / subdirectories, and then read ALL files in those dirs,
and put the content of their file into an array?

Like this:

array:
[SomePath/test.php] = "All In this php file is being read by a new smart function!";
[SomePath/Weird/hello.txt = "Hello world. This is me and im just trying to get some help!";

and so on, until no further files exists in that rootdir.

All my attempts went totally crazy and none of them works... therefore i need to ask you for help.


Do you have any ideas how to do this?
If so, how can I be able to do it?


Thanks in Advance, pros

I am using WPSQT plugin in my blog site .I code some files in PHP also.how to add that files in plugin files.