PHP - Small Coding Issue

Hi Guys, I have a small issue with a new php script I wrote.  It works fine, except for one issue.  When the scrip emails me the info it captures, I need it to have the email sent to me from the person filling out the form.  i.e.  from the email address located in the $email field.  It does not.  Here's the code. (domain.com is just a dummy name to hold the spot, obviously.)

<?php

/* Subject and email */

   $emailSubject = 'Centre Street Registration';
   $webMaster = 'email@domain.com';

/* Gathering Data */

   $firstname = $_POST['FirstName'];
   $lastname = $_POST['LastName'];
   $email = $_POST['Email'];
   $daytime = $_POST['Daytime'];
   $home = $_POST['Home'];
   $citytown = $_POST['CityTown'];
   $movingwhen = $_POST['MovingWhen'];
   $hearofus = $_POST['HearofUs'];
   $contactmethod = $_POST['ContactMethod'];
   $squareft = $_POST['SqareFt'];
   $important = $_POST['Important'];
   $pricerange = $_POST['PriceRange'];
   
   $body = <<<EOD


First Name: $firstname
Last Name: $lastname
Email: $email
Daytime Number: $daytime
Home Number: $home
City: $citytown
Moving When: $movingwhen
Hear of Us: $hearofus
Contact Method: $contactmethod
Square Feet: $squareft
Important to You: $important
Price Range: $pricerange

Excel Data: $firstname,$lastname,$email,$daytime,$home,$citytown,$movingwhen,$hearofus,$contactmethod,$squareft,$important,$pricerange
EOD;

   $headers = "From: $email";
   $headers .= "Conten-type: text/html";
   $success = mail($webMaster, $emailSubject, $body);

/* Results rendered as HTML */

/*   $theResults = 'domain.com'; */

header( "Location: http://www.dommain.com/thankyou_centre.shtml" );
   
?>

Hello all,

I'm designing an upload file section for a home medical company.
So far it has been going great, I am uploading files and they're being successfully inserted into my MYSQL Table.
However, my issue is when I download the files they claim to be corrupted and unusable.
If I save the PDF files to my desktop they won't open at all, they claim to be corrupted. If I download a JPG and then open it in photshop it warns me
the file may be corrupted, knowing it is not I clicked "yes". The jpg actually opens and looks like the image, however about 50 pixels on the bottom get cut off and look like a messy TV screen, if that makes sense.

Wondering if anyone has had this similar issue, the uploading part is not the issue - just downloading the files.

My Upload Form Code:

Code: [Select]
<p><a href="upload.php">Upload a File</a>&nbsp;&nbsp;<a href="../admin/admin.php">Back to Control Panel</a></p>
<form action="add_file.php" method="post" enctype="multipart/form-data">
       <input type="file" name="uploaded_file"><br>
       <input type="submit" value="Upload file">
</form>
       <p>
        <a href="list_files.php">See all files</a>
       </p>
My Add File Code (This is working fine but may cause issues with downloading?)
Code: [Select]
<?php
// Check if a file has been uploaded
if(isset($_FILES['uploaded_file'])) {
    // Make sure the file was sent without errors
    if($_FILES['uploaded_file']['error'] == 0) {
        // Connect to the database
       $dbLink = new mysqli('localhost', 'vzimbel_user', 'webdesign1', 'vzimbel_db');
        if(mysqli_connect_errno()) {
            die("MySQL connection failed: ". mysqli_connect_error());
        }
 
        // Gather all required data
        $name = $dbLink->real_escape_string($_FILES['uploaded_file']['name']);
        $mime = $dbLink->real_escape_string($_FILES['uploaded_file']['type']);
        $data = $dbLink->real_escape_string(file_get_contents($_FILES  ['uploaded_file']['tmp_name']));
        $size = intval($_FILES['uploaded_file']['size']);
 
        // Create the SQL query
        $query = "
            INSERT INTO `file` (
                `name`, `mime`, `size`, `data`, `created`
            )
            VALUES (
                '{$name}', '{$mime}', {$size}, '{$data}', NOW()
            )";
 


        // Execute the query
        $result = $dbLink->query($query);
 
        // Check if it was successfull
        if($result) {
            echo 'Success! Your file was successfully added!';
        }
        else {
            echo 'Error! Failed to insert the file'
               . "<pre>{$dbLink->error}</pre>";
        }
    }
    else {
        echo 'An error accured while the file was being uploaded. '
           . 'Error code: '. intval($_FILES['uploaded_file']['error']);
    }
 
    // Close the mysql connection
    $dbLink->close();
}
else {
    echo 'Error! A file was not sent!';
}
 
// Echo a link back to the main page
echo '<p>Click <a href="upload.php">here</a> to go back</p>';
?>


My List File Code (This is working fine also, but does contain the link that I click when I want to download a file)

Code: [Select]
<?php
         $dbLink = new mysqli('localhost', 'vzimbel_user', 'webdesign1', 'vzimbel_db');
        if(mysqli_connect_errno()) {
            die("MySQL connection failed: ". mysqli_connect_error());
        }
     
    // Query for a list of all existing files
    $sql = 'SELECT `id`, `name`, `mime`, `size`, `created` FROM `file`';
    $result = $dbLink->query($sql);
     
    // Check if it was successfull
    if($result) {
        // Make sure there are some files in there
        if($result->num_rows == 0) {
            echo '<p>There are no files in the database</p>';
        }
        else {
            // Print the top of a table
            echo '<table width="100%">
                    <tr>
                        <td><b>Name</b></td>
                        <td><b>Mime</b></td>
                        <td><b>Size (bytes)</b></td>
                        <td><b>Created</b></td>
                        <td><b>&nbsp;</b></td>
                    </tr>';
     
            // Print each file
            while($row = $result->fetch_assoc()) {
                echo "
                    <tr>
                        <td>{$row['name']}</td>
                        <td>{$row['mime']}</td>
                        <td>{$row['size']}</td>
                        <td>{$row['created']}</td>
                        [u][b]<td><a href='get_file.php?id={$row['id']}'>Download</a></td>[/b][/u]
                    </tr>";
            }
     
            // Close table
            echo '</table>';
        }
     
        // Free the result
        $result->free();
    }
    else
    {
        echo 'Error! SQL query failed:';
        echo "<pre>{$dbLink->error}</pre>";
    }
     
    // Close the mysql connection
    $dbLink->close();
    ?>


And here is my Get File page. This is where my problem lies. (I think)

Code: [Select]
<?php
// Make sure an ID was passed
if(isset($_GET['id'])) {
// Get the ID
    $id = intval($_GET['id']);
 
    // Make sure the ID is in fact a valid ID
    if($id <= 0) {
        die('The ID is invalid!');
    }
    else {
        // Connect to the database
      $dbLink = new mysqli('localhost', 'vzimbel_user', 'webdesign1', 'vzimbel_db');
        if(mysqli_connect_errno()) {
            die("MySQL connection failed: ". mysqli_connect_error());
        }
     
            // Fetch the file information
            $query = "
                SELECT `mime`, `name`, `size`, `data`
                FROM `file`
                WHERE `id` = {$id}";
            $result = $dbLink->query($query);
     
            if($result) {
                // Make sure the result is valid
                if($result->num_rows == 1) {
                // Get the row
                    $row = mysqli_fetch_assoc($result);
     
                    // Print headers
                    header("Content-Type: ". $row['mime']);
                    header("Content-Length: ". $row['size']);
                    header("Content-Disposition: attachment; filename=". $row['name']);
     
                    // Print data
                    echo $row['data'];
                }
                else {
                    echo 'Error! No image exists with that ID.';
                }
     
                // Free the mysqli resources
                @mysqli_free_result($result);
            }
            else {
                echo "Error! Query failed: <pre>{$dbLink->error}</pre>";
            }
            @mysqli_close($dbLink);
        }
    }
    else {
        echo 'Error! No ID was passed.';
    }
    ?>



Thanks for any help that anyone can provide, this issue is really causing some stress and hurting my sleep at night! Can't figure out why this won't work, it's literally the last step in completing this website.
Please let me know if you need any other information regarding this issue.

Thanks,
- Mike

Hi:

I have another small issue like the one I just posted about.

I am trying to get the full state name based upon the state abbreviation.

Like this:
Code: [Select]
<?php

$query=mysql_query("SELECT full_state FROM zip_codes WHERE abbr_state = abbr_state") or die("Could not get data from db: ".mysql_error());

$full_state=$result['full_state'];

?>

...

State Name: <input type="text" name="full_state" value="<?php echo $full_state; ?>" /><br />
[CODE]

No errors, but also no "full_state" appears.

(It is pulling in the correct "abbr_state")

What am I missing here?

Below is my code that is suppose to insert and show records from database using ajax.    Retrieving the records from the database works.  However it won't insert a record.  I do not get any errors. The page simply refreshes when I hit submit button.   Can you see what might be wrong in my code?     index.php

<script>
	$(document).ready(function(){
		function showComment(){
		  $.ajax({
			type:"post",
			url:"process.php",
			data:"action=showcomment",
			success:function(data){
				 $(".wrapper").html(data);
			}
		  });
		}

		showComment();


		$("#submit").click(function(){

			  var name=$("#name").val();
			  var message=$("#details").val();

			  $.ajax({
				  type:"post",
				  url:"process.php",
				  data:"name="+name+"&details="+message+"&action=addcomment",
				  success:function(data){
					showComment();
					  
				  }

			  });

		});
   });
   </script>

$id      =     $_GET['id'];
$title    =    $_GET['title'];
        
$_SESSION['id']      =    $id;
$_SESSION['title']   =    $title;

<div class="wrapper"></div>

<form action="" method="post" enctype="multipart/form-data">
    <div class="newfield">
        <label for="title">Name <span class="highlight">*</span></label>
        <input id="name" type="text" name="name">
    </div>
    <div class="newfield">
        <label for="details">Details <span class="highlight">*</span></label>
        <textarea id="details" name="details""></textarea>
    </div>
    <input type="submit" name="submit" id="submit" value="Submit Tale">
</form>

process.php

<?php require_once '/core/init.php';

$id 	= 	$_SESSION['id'];
		
$action = $_POST['action'];

if($action == 'showcomment') {

	try {
		$get = $db->prepare("SELECT * FROM sub_posts WHERE id = :id");
		$get->bindParam('id', $id);
		$get->execute();
		$getStmt = $get->fetchAll(PDO::FETCH_ASSOC);
		if(count($getStmt) > 0) {
			
			foreach($getStmt as $row) {
			
				$new_name		= 	$row['name'];
				$new_details	= 	$row['details'];
				
				?>	
					<ul>
						<li>
							<?php echo $new_name; ?>
						</li>
						<li>
							<?php echo $new_details; ?>
						</li>
					</ul>
				<?php 
			}	
			
		} else {

			// no records found.
			
		}
		
	} catch(Exception $e) {
		die($e->getMessage());
	}

} else if($action == 'addcomment') {
								
	$name		= 	$_GET['name'];
	$details	= 	$_GET['details'];
			
	
		try {
			
			$insert = $db->prepare("INSERT INTO sub_posts(id, name, details) VALUES(:id, :name, :details)");
			$insert->bindParam('id', $id);
			$insert->bindParam('name', $name);
			$insert->bindParam('details', $details);
			$insert->execute();
			
			if($insert == false){
				
				echo 'record could not be inserted.';
				
			} else {
			
				echo 'record has been inserted.';
			
			}
			
		} catch(Exception $e) {
			die($e->getMessage());
		}
	

} else {

	echo 'no results.';
}

Edited by helloworld001, 20 December 2014 - 05:18 PM.

My Error Output is this:
Warning: Cannot modify header information - headers already sent by (output started at city-search.php:1) in city-search.php on line 65

What I'm I missing in the code, I can't seem to get these. It works excellent in Localhost, but in production. Error above.
Code: [Select]
<?php
// MG CREATED THIS SIMPLE REGISTRATION PHP FOR THAT GOES TO ONE SPECIFIC USER.
// WILL TEST FORM REGSITRATION NG 07-2011
//If the form is submitted
if(isset($_POST['submit'])) {

//Check to make sure that the name field is not empty
if(trim($_POST['name']) == '') {
$hasError = true;
} else {
$name = trim($_POST['name']);
}

//Check to make sure that the subject field is not empty
if(trim($_POST['subject']) == '') {
$hasError = true;
} else {
$subject = trim($_POST['subject']);
}

//Check to make sure sure that a valid email address is submitted
if(trim($_POST['email']) == '')  {
$hasError = true;
} else if (!eregi("^[A-Z0-9._%-]+@[A-Z0-9._%-]+\.[A-Z]{2,4}$", trim($_POST['email']))) {
$hasError = true;
} else {
$email = trim($_POST['email']);
}
//Check to make sure comments were entered
if(trim($_POST['message']) == '') {
//$hasError = true;
$comments == 'Have No Friends';
} else {
if(function_exists('stripslashes')) {
$comments = stripslashes(trim($_POST['message']));
} else {
$comments = trim($_POST['message']);
}
}

//If there is no error, send the email
if(!isset($hasError)) { 
//$emailTo = 'regina@shushmedeals.com';
//$emailTo = 'reginabyrd32@yahoo.com';
$emailTo = 'mp3@danjaproduction.com'; 
//$emailBcc = 'ganja99@netzero.net';
//$emailBcc = 'info@danjaproduction.com';  
//$emailBcc = 'ganja99@netzero.net';    
//Put your own email address here
$body = "Location: $name \n\nEmail: $email \n\nShushMeDeals Sign-up Info:\n $comments";

// To send HTML mail, the Content-type header must be set

$headers  = 'From: ShushMeDeals.com City Location  sign-up - '.$name.'' . "\r\n" . 'Reply-To: ' . $email . "\r\n" .'Bcc: print@extremeatlanta.com'; 
//$headers .= 'Cc: birthdayarchive@example.com' . "\r\n";
        //$headers .= 'Bcc: info@danjaproduction.com' . "\r\n";

mail($emailTo, $subject, $body, $headers);
$emailSent = true;
if($emailSent = true) {
setcookie("location", $name);

//echo '<script type="text/javascript">
           //       window.location = "index.php?option=com_enmasse&controller=deal&task=today&locationName='.$name.'"
           //      </script>';
}
}
}
?>