PHP - Sessions - Get Username

How to show the username of the person who uploaded something?

I know how to make the upload script etc. but what is the script needed for the person's username and where do I put it?

Thanks.

Hi!
I want to add the users nickname to the urlcode. I don't have any clue how to :O
And maybe add more text after the url www.url.comTEXTusername
echo $row["url"];$row["username"];

Please help

Hi,
I used to use the php session to get the username of the user that was logged on and use that variable on our intranet. Recently we are having to redevelop the site, and we can no longer use this variable.

Is there another way of getting the username of the user who is logged onto the computer?

Thanks in Advance,
Stuart

I'm wanting to increment usernames in ONLY the lowercase a-z for example if a user enters "abc" it will automatically be given "abc1" and the next user if entering the same username will automatically be given "abc2", the next "abc3" and so on. The base login and register script I'm using can be found on http://evolt.org/node/60265/   The database.php and register.php pages are below, but excluding the amendments I am seeking.   I have created a MySQL database with 2 tables, 1 table named 'Users' with 3 columns named (1) 'userid' primary key, auto increment, (2) 'username' (3) 'password'.   The other table is named 'UserCount' with 2 columns named (1) 'username' (2) 'count'.

Can someone provide the PHP coding for the following process?   When a new user registers a new username firstly PHP to check the characters are in lowercase a-z only and no other characters, and reject if they do not match, then for PHP to check to see if that username exists in the 'UserCount' table.   If it doesn't exist, PHP to insert the new username into the 'username' column and also set the value of the 'count' column to 1.   If the username does exist, PHP to add that username to the 'username' column and increment the value of the 'count' column by 1. Then in the 'Users' table PHP to insert a record with 'Users.username = UserCount.username + count' and PHP to inform the new user of their complete username including the integer that has been added to their first entered username.

It would also help if I could be provided a link to a website on where I can better understand how to collate coding of this kind, coz I have tried to formulate this coding but as I'm playing around in the dark I have no idea if it is the right process in particular considering security factors.

database.php
Code: [Select]
<?php

/**
 * Connect to the mysql database.
 */
$conn = mysql_connect("localhost", "your_username", "your_password") or die(mysql_error());
mysql_select_db('your_database', $conn) or die(mysql_error());

?>
register.php

Code: [Select]
<?php
session_start(); 
include("database.php");

/**
* Returns true if the username has been taken
* by another user, false otherwise.
*/
function usernameTaken($username){
global $conn;
if(!get_magic_quotes_gpc()){
$username = addslashes($username);
}
$q = "select username from Users where username = '$username'";
$result = mysql_query($q,$conn);
return (mysql_numrows($result) > 0);
}

/**
* Inserts the given (username, password) pair
* into the database. Returns true on success,
* false otherwise.
*/
function addNewUser($username, $password){
global $conn;
$q = "INSERT INTO Users VALUES ('$username', '$password')";
return mysql_query($q,$conn);
}

/**
* Displays the appropriate message to the user
* after the registration attempt. It displays a 
* success or failure status depending on a
* session variable set during registration.
*/
function displayStatus(){
$uname = $_SESSION['reguname'];
if($_SESSION['regresult']){
?>

<h1>Registered!</h1>
<p>Thank you <b><?php echo $uname; ?></b>, your information has been added to the database, you may now <a href="main.php" title="Login">log in</a>.</p>

<?php
}
else{
?>

<h1>Registration Failed</h1>
<p>We're sorry, but an error has occurred and your registration for the username <b><?php echo $uname; ?></b>, could not be completed.<br>
Please try again at a later time.</p>

<?php
}
unset($_SESSION['reguname']);
unset($_SESSION['registered']);
unset($_SESSION['regresult']);
}

if(isset($_SESSION['registered'])){
/**
* This is the page that will be displayed after the
* registration has been attempted.
*/
?>

<html>
<title>Registration Page</title>
<body>

<?php displayStatus(); ?>

</body>
</html>

<?php
return;
}

/**
* Determines whether or not to show to sign-up form
* based on whether the form has been submitted, if it
* has, check the database for consistency and create
* the new account.
*/
if(isset($_POST['subjoin'])){
/* Make sure all fields were entered */
if(!$_POST['user'] || !$_POST['pass']){
die('You didn\'t fill in a required field.');
}

/* Spruce up username, check length */
$_POST['user'] = trim($_POST['user']);
if(strlen($_POST['user']) > 30){
die("Sorry, the username is longer than 30 characters, please shorten it.");
}

/* Check if username is already in use */
if(usernameTaken($_POST['user'])){
$use = $_POST['user'];
die("Sorry, the username: <strong>$use</strong> is already taken, please pick another one.");
}

/* Add the new account to the database */
$md5pass = md5($_POST['pass']);
$_SESSION['reguname'] = $_POST['user'];
$_SESSION['regresult'] = addNewUser($_POST['user'], $md5pass);
$_SESSION['registered'] = true;
echo "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[PHP_SELF]\">";
return;
}
else{
/**
* This is the page with the sign-up form, the names
* of the input fields are important and should not
* be changed.
*/
?>

<html>
<title>Registration Page</title>
<body>
<h1>Register</h1>
<form action="<?php echo $HTTP_SERVER_VARS['PHP_SELF']; ?>" method="post">
<table align="left" border="0" cellspacing="0" cellpadding="3">
<tr><td>Username:</td><td><input type="text" name="user" maxlength="30"></td></tr>
<tr><td>Password:</td><td><input type="password" name="pass" maxlength="30"></td></tr>
<tr><td colspan="2" align="right"><input type="submit" name="subjoin" value="Join!"></td></tr>
</table>
</form>
</body>
</html>


<?php
}
?>

I have created a simple login system but need help getting the username after login is successfull.

The login page
<?php
session_start();
require_once 'classes/Membership.php';
$membership = new Membership();

// If the user clicks the "Log Out" link on the index page.
if(isset($_GET['status']) && $_GET['status'] == 'loggedout') {
   $membership->log_User_Out();
}

// Did the user enter a password/username and click submit?
if($_POST && !empty($_POST['username']) && !empty($_POST['pwd'])) {
   $response = $membership->validate_User($_POST['username'], $_POST['pwd']);
}
?>
      <div id="login">
        <form method="post" action="">
          <table width="200" border="0" align="center">
            <tr>
              <th scope="col">Username:</th>
              <th scope="col"><input type="text" name="username" /></th>
            </tr>
            <tr>
              <td>Password:</td>
              <td><input type="password" name="pwd" /></td>
            </tr>
            <tr>
              <td colspan="2"><input type="submit" id="submit" value="Login" name="submit" /></td>
            </tr>
          </table>
          <p>&nbsp;</p>
          <p>
            <?php if(isset($response)) echo "<h4 class='alert'>" . $response . "</h4>"; ?>
          </p>
    </form>
      </div>

Membership.php file

<?php

require 'Mysql.php';

class Membership {
   
   function validate_user($un, $pwd) {
      $mysql = New Mysql();
      $ensure_credentials = $mysql->verify_Username_and_Pass($un, md5($pwd));
      
      if($ensure_credentials) {
         $_SESSION['status'] = 'authorized';
         header("location: myaccount.php");
      } else return "Please enter a correct username and password";
      
   }
   
   function log_User_Out() {
      if(isset($_SESSION['status'])) {
         unset($_SESSION['status']);
         
         if(isset($_COOKIE[session_name()]))
            setcookie(session_name(), '', time() - 1000);
            session_destroy();
      }
   }
   
   function confirm_Member() {
      session_start();
      if($_SESSION['status'] !='authorized') header("location: login.php");
   }
}


myaccount page

<?php

require_once 'classes/Membership.php';
$membership = New Membership();

$membership->confirm_Member();

?>

<p>Welcome <?= $_SESSION['status'] ?></p

Hello I am trying to add an IF statement to my login script so that if the username entered is 'admin' it directs to 'adminpage.php

Here is my script:

<?php
include ("connection.php");


session_start();
// Collect data from form and save in variables
//See if any info was submitted 
$Username = $_GET['Username'];  
//Clean data - trim space 
$Username = trim ( $Username);  
//Check its ok - if not then add an error message to the error string 
if (empty($Username))  
    $errorString = $errorString."<br>Please supply Username.";
//See if any info was submitted 
$Password = $_GET['Password'];  
//Clean data - trim space 
$Password = trim ( $Password);  
//Check its ok - if not then add an error message to the error string 
if (empty($Password))  
    $errorString = $errorString."<br>Please supply Password.";        

//  Query to search the user table
 $query= "SELECT * FROM Users WHERE Username='$Username' AND  Password='$Password'";

// Run query through connection
  $result = mysql_query ($query); 

$row = mysql_fetch_assoc($result);

// if rows found set authenticated user to the user name entered 
if (mysql_num_rows($result) > 0) { 
$_SESSION["authenticatedUser"] = $Username;

$_SESSION['UserID'] = $row['UserID'];

// Relocate to the logged-in page
header("Location: loggedon.php");
} 
else
// login failed redirect back to login page with error message
{
$_SESSION["message"] = "Could not connect as $Username " ;
header("Location: login.php");
}
?>

Thank you

Hi,

iam pretty new and have made a forum style page for intern project display. ATM i use a standard php loginscript, just so i can add the author of the text.

But as you can imagine thats pretty inconvinient.

Is their a way to get the username from my roaming profil or from the current AD user (dont need to auth, just so i can add my nameunder post, like i login on windows with username "Heinz", and write a post on my side, so he can take the username "Heinz" and display it beneth the post?

iam pretty clueless where to start looking, would you be so nice and provide me some topic/hints to give me a push in the right direction.

 

Sry if my english is..... a bit rubbish.

i greatfull for all your time

sincerly

Nasten

I have written the code for email check, but how and where can I put the code to check if a username has been used twice? Thanks in advance.
Code: [Select]
<?php

$servername = "localhost";
$username = "";
$password = "";

//validate fields
if(!$_POST["username"] || !$_POST["email"] || !$_POST["password1"] || !$_POST["password2"]){
echo "<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><br />Please fill the required fields, <p>&nbsp;</p><p>&nbsp;</p><a href='register.php'>Go to register page</a>";

//validate password
}else if($_POST["password1"] != $_POST["password2"]){
echo "<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><br />Please go back, PASSWORDS do not match! <p>&nbsp;</p><p>&nbsp;</p><a href='register.php'>Go to register page</a>";

//validate email
}else if(!(eregi("^.+@.+\\..+$", $_POST['email']))){
echo "<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><br />Please enter a valid EMAIL! <a href='register.php'><p>&nbsp;</p><p>&nbsp;</p>Go to register page</a>";

//validate captcha
}else if(($_SESSION['security_code'] != $_POST['security_code']) || (empty($_SESSION['security_code'])) ){
echo "<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><br />CAPTCHA CODE does not match! <p>&nbsp;</p><p>&nbsp;</p><a href='register.php'>Go to register page</a>";

}else{
$conn=  mysql_connect($servername,$username,$password)or die(mysql_error());
mysql_select_db("genesis_members",$conn);

// check if already registered
$sql_check = "SELECT * FROM users WHERE email = '".$_POST[email]."'";
$result_check = mysql_query($sql_check,$conn) or die(mysql_error());
$row = mysql_fetch_assoc($result_check);
if($row['id']){
echo "<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><br />EMAIL already registered! <p>&nbsp;</p><p>&nbsp;</p><a href='register.php'>Go to register page</a>";
}else{

// insert in db
$sql = "INSERT INTO users (username, email, password, company, phone, services) VALUES ('".$_POST[username]."', '".$_POST[email]."', '".$_POST[password1]."', '".$_POST[company]."', '".$_POST[phone]."', '".$_POST[services]."')";
$result = mysql_query($sql,$conn) or die(mysql_error());

echo "<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><br /><h1>You Have Successfully Registered</h1>";
echo "<p>&nbsp;</p><p>&nbsp;</p><br /><a href='main_login.php'>go to login page</a>";
}
}

?>

Today I noticed something quite strange on youtube. This:
http://www.youtube.com/user/mcgloomy

Not the profile by itself, but the way the username can be added there to take us to the profile.
I mean, USER must be a folder, but I really doubt MCGLOOMY is another folder, even if it looks like it is.
I've read about using htaccess to hide the file name of a folder, but... How does this youtube thingy happens?

how would this code work?
Code: [Select]
if ($_POST['username'] == "[, ., ,, _, -" ){
 die('Invalid characters.');
i want it to mean if there are any characters like ", [ . - _ ' " or anything in the username then die('invalid characters.'); for extra safety

I don't know anything about php and I'm trying to fix these two links. 

One of which will bring the user to view's his/her profile to view it and the other will bring the user to his/her profile to edit.

I'm sure it's just a matter of deleting a space or adding some sort of variable but I just don't know.

<br><a href="http://mysailingconnection.com/using-this-website"><Font color="#000033"><b>Using This Website</b></font></a><br><br><a href="/members/<?php global $current_user; echo $current_user->user_login;?>/profile/">Click here to visit your profile.</a> </p><a href="/members/<?php echo $current_user->user_login;?>/profile/edit/">Click here to edit your personal profile.</a><br />

hi i have beeen trying for awhile now to get this code working but with no joy.
For after you make a comment username and avatar of the person that made the comment doesn't show.
Can anyone help me on this thanks.

Code: [Select]
<div id="center">
<div class="container_box1">
<div id="headergames2">Profile</div>
<?php
if(!isset($_SESSION["user"])) {
echo '<center><span style="font-size:150%;text-align:center;">You must Register or log in to view member profiles.</span></center>';
     } else {
if(isset($_POST['addcomment'])) {
if(empty($_POST['userid'])) {
echo 'Sorry, the member you were commenting seems to be invalid.';
     } elseif (empty($_POST['comment']) || empty($_POST['name'])) {
echo 'Please go back and try again, it seems the comment or name was left empty.';
     } else {
            $userid = yasDB_clean($_POST['userid']);
            $comment = yasDB_clean($_POST['comment'],true);
            $name = yasDB_clean($_POST['name']);
            $ipaddress = $_SERVER['REMOTE_ADDR'];
     yasDB_insert("INSERT INTO `memberscomments` (id,userid, comment, ipaddress, name) values ('', '{$userid}', '{$comment}', '{$ipaddress}', '{$name}')",false);
echo '<span style="color:red;">Comment added!</span>';
     }
}
$id = yasDB_clean($_GET['id']);
$query = yasDB_select("SELECT * FROM `user` WHERE id = '$id'");
$row = $query->fetch_array(MYSQLI_ASSOC);$query->close();
$joined = date('m/d/y',$row['date']);
$points = $row['plays']*50;
if ( $row['website'] != '') {
$website = '<a href="'.$row['website'].'" target="_blank">Website</a><br>';
} else {
$website = 'No Website';
};
if ( $row['location'] != '') {
$location = ''. $row['location'].'<br>';
} else {
$location = 'Place where you stay.<br>';
};
if ( $row['job'] != '') {
$occupation = ''. $row['job'].'<br>';
} else {
$occupation = 'Work place.<br>';
};
if ( $row['useavatar'] == '1' ) {
$avatarimage = $setting['siteurl'] . 'avatars/' . $row['avatarfile'];
}else { 
$avatarimage = $setting['siteurl'] . 'avatars/useruploads/noavatar.JPG';
}
if ($setting['seo'] == 'yes') {
   $membersprofile = $setting['siteurl'].'profile.html';
} else {
   $membersprofile = $setting['siteurl'].'index.php?act=profile';
}
?>
<div class="containbox2">
<div class="profile">
<ul>
<li class="title">Username: <?php echo $row['username'];?></li>
<li class="profilepic"><img src="<?php echo $avatarimage;?>" width="130" height="100">
<br/>
<a href="<?php echo $membersprofile;?>">Edit Profile</a>
<hr><?php echo $website;?><hr>
</li>
</ul>
<ul>
<li class="title2">About Me</li>
<li class="aboutme"><?php echo $row['aboutme'];?></li>
</ul>
</div>
<div class="clear"></div>
<div class="profile2">
<ul>
<li class="info2">Location:</li>
<li class="info2">Joined:</li>
<li class="info2">Plays:</li>
<li class="info2">Points:</li>
<li class="info2">Occupation:</li>
</ul>
<ul>
<li class="info"><?php echo $location;?></li>
<li class="info"><?php echo $joined;?></li>
<li class="info"><?php echo $row['plays'];?></li>
<li class="info"><?php echo $points;?></li>
<li class="info"><?php echo $occupation;?></li>
</ul>
<ul>
<li class="info2">AIM:</li>
<li class="info2">MSN:</li>
<li class="info2">Skype:</li>
<li class="info2">Yahoo:</li>
</ul>
<ul>
<li class="info"><?php echo $row['aim'];?></li>
<li class="info"><?php echo $row['msn'];?></li>
<li class="info"><?php echo $row['skype'];?></li>
<li class="info"><?php echo $row['yahoo'];?></li>
</ul>
</div>
</div>
<div class="clear"></div>
</div>

<div class="container_box1"><div id="headergames2">Member's Comments:</div>
<div class="containbox2">
<div id="messages">
<?php
$query = yasDB_select("SELECT * FROM memberscomments");
$query2 = yasDB_select("SELECT * FROM user"); 
$prefix = $setting['siteurl'] . 'templates/' . $setting['theme'] . '/skins/' . $setting['skin'] . '/images/smileys/';
if($query->num_rows == 0) {
?>
<div class="container_box5">This member has no comments, be the first to add one!</div>
<?php
    } else {        
$query = yasDB_select("SELECT *,DATE_FORMAT(`timestamp`,'%b %e, %y, %r') AS formatted_time FROM memberscomments WHERE `userid`=`id` ORDER BY `id` DESC LIMIT 5");    
    $row = $query->fetch_array(MYSQLI_ASSOC);       
    $query2 = yasDB_select("SELECT `username`, `useavatar`, `avatarfile` FROM `user` WHERE `username` = '{$row['name']}'");     
    $row2 = $query2->fetch_array(MYSQLI_ASSOC);
    $text = $row['comment'];
$text = str_replace(':D','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/biggrin.gif" title="biggrin" alt="biggrin" />',$text);
$text = str_replace(':?','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/confused.gif" title="confused" alt="confused" />',$text);
$text = str_replace('8)','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/cool.gif" title="cool" alt="cool" />',$text);
$text = str_replace(':cry:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/cry.gif" title="cry" alt="cry" />',$text);
$text = str_replace(':shock:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/eek.gif" title="eek" alt="eek" />',$text);
$text = str_replace(':evil:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/evil.gif" title="evil" alt="evil" />',$text);
$text = str_replace(':lol:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/lol.gif" title="lol" alt="lol" />',$text);
$text = str_replace(':x','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/mad.gif" title="mad" alt="mad" />',$text);
$text = str_replace(':P','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/razz.gif" title="razz" alt="razz" />',$text);
$text = str_replace(':oops:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/redface.gif" title="redface" alt="redface" />',$text);
$text = str_replace(':roll:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/rolleyes.gif" title="rolleyes" alt="rolleyes" />',$text);
$text = str_replace(':(','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/sad.gif" title="sad" alt="sad" />',$text);
$text = str_replace(':)','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/smile.gif" title="smile" alt="smile" />',$text);
$text = str_replace(':o','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/surprised.gif" title="surprised" alt="surprised" />',$text);
$text = str_replace(':twisted:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/twisted.gif" title="twisted" alt="twisted" />',$text);
$text = str_replace(':wink:','<img src="' . $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/wink.gif" title="wink" alt="wink" />',$text);                      
    if ($setting['seo']=='yes') {
    $memberlink = $setting['siteurl'].'showmember/'.$id.'.html';
    } else {
    $memberlink = $setting['siteurl'] . 'index.php?act=showmember&id='.$id;
    }
    if ( $row2['useavatar'] == '1' ) {           
    $avatarimage = $setting['siteurl'] . 'avatars/' . $row2['avatarfile'];            
    } else {             
    $avatarimage = $setting['siteurl'] . 'avatars/useruploads/noavatar.jpg';           
    }
?>
<div class="profile">
<ul>
<li class="title">Username - <a href="<?php echo $memberlink;?>"><?php echo $row['name'];?></a></li>
<li class="profilepic"><a href="<?php echo $memberlink;?>"><img src="<?php echo $avatarimage;?>" width="130" height="100"></a>
</li>
</ul>
<ul>
<li class="title2"><?php echo $row['timestamp'];?></li>
<li class="aboutme"><?php echo $text;?></li>
</ul>
</div>
<div class="clear"></div>
<?php
}
?>
</div>
<div class="clear"></div>
</div>
<div class="clear"></div>
</div>

<div class="container_box1"><div id="headergames2">Leave a comment:</div>
<div class="containbox">
<center><div id="preview"></div></center>
<div id="commentBox">
<center>
<form name="addcomment" id="addcomment" method="post" action=""><strong>Message:</strong><br />
<div id="smiles"><center>
<a href="javascript:addsmilie(' :D ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/biggrin.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :? ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/confused.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' 8) ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/cool.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :cry: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/cry.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :shock: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/eek.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :evil: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/evil.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :lol: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/lol.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :x ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/mad.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :P ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/razz.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :oops: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/redface.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :roll: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/rolleyes.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :( ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/sad.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :) ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/smile.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :o ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/surprised.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :twisted: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/twisted.gif';?>" border="0"  /></a>
<a href="javascript:addsmilie(' :wink: ')"><img src="<?php echo $setting['siteurl'].'templates/'.$setting['theme'].'/skins/'.$setting['skin'].'/images/smileys/wink.gif';?>" border="0"  /></a>
</center></div>
<textarea name="comment" rows="10" cols="60" id="comment_message"></textarea>
<br />
<input type="hidden" name="timestamp" id="timestamp" value="<?php echo time(); ?>" /><br/>
</center>
<center>
<input name="name" type="hidden" value="<?php echo $_SESSION['user'];?>" /><br />
<input type="hidden" name="recaptcha" id="recaptcha" value="no">
<input type="hidden" name="security" id="security" value="10">
<input type="hidden" name="member" value="yes">
<input type="hidden" name="userid" id="userid" value="<?php echo $id; ?>">
<input name="addcomment" type="submit" value="Add Comment" style="border: 1px solid #000; margin-top: 2px;" /><br/><br/>
</form></center></div></div>
<div class="clear"></div>
<?php
} 
?>
</div>

Ps: sry for the long code.

Took Skoglund's Lynda course on creating a CMS for a project I am doing for a customer.

I was extremely careful to set up the database, and pretty much copying everything he was doing in the course.

So, I try to create a user in the database, and....crickets.  Name and password don't come up.  No error messages from the site.  Just, nothing.  So I'm sure it's pretty simple to fix, otherwise, there would have been chaos, right?

For the page: hawcreekrenovations.com/new_user.php

We know the page is correctly connecting to the MySQL because the drop down in the form is populated by the user-types in the database.

So, I guess, you need the pertinent code:

Code: [Select]
// START FORM PROCESSING
if (isset($_POST['submit'])) { //Form has been submitted
$errors = array();

// perform validations on the form data
$required_fields = array('username', 'password', 'user_type_id' );
$errors = array_merge($errors, check_required_fields($fields_with_lengths, $_POST));

$fields_with_lengths = array('username' => 30, 'password'=> 30);
$errors = array_merge($errors, check_max_field_lengths($fields_with_lengths, $_POST));

$username = trim(mysql_prep($_POST['username']));
$password = trim(mysql_prep($_POST['password']));
$hashed_password = sha1($password);
$user_type_id = trim(mysql_prep($_POST['user_type_id']));

if ( empty($errors) ) {
$query = "INSERT INTO users (
username, hashed_password, user_type_id
) VALUES (
'{$username}', '{$hashed_password}', '{$user_type_id}'
)";
$result = mysql_query($query, $connection);
if ($result) {
$message = "The user was successfully created.";
} else {
$message = "The user could not be created.";
$message .= "<br />" . mysql_error();
}
} else {
if (count($errors) == 1) {
$message = "There was 1 error in the form.";
} else {
$message = "There were " . count($errors) . " erros in the form.";
}
}
} else { // Form has not been submitted.

$username = "";
$password = "";
}
?>
And the form:

Code: [Select]
<form action="new_user.php" method "post">
            <table>
            <tr>
                <td>Username:</td>
                    <td><input type="text" name="username" maxlength="30" value="<?php echo htmlentities($username); ?>" /></td>
                </tr>
                <tr>
                <td>Password:</td>
                    <td><input type="password" name="password" maxlength="30" value="<?php echo htmlentities($password); ?>" ? /></td>
                </tr>
                <tr>
                <td>User Type:</td>
                    <td><?php // 3. Perform database query 
                $result = mysql_query("SELECT * FROM user_type", $connection);
                    if (!$result) { 
                        die("Database query failed: " . mysql_error());
                    }
                // 4. Use returned data (if any) 
                echo "<select name='type'>";
                while ($row = mysql_fetch_array($result)) {
                        echo "<option value=\"".$row["user_type_id"]."\">".$row["type"] . "</option>";
                }
                echo "</select>"; ?></td>
                </tr>
                <tr>
                <td colspan="2"><input type="submit" name="submit" value="Create user" /></td>
                </tr>
            </table>
            </form>