PHP - Ideas Needed...

I'm just looking for some tips here. I am developing and selling an eccommerce shopping cart software package, and it has been received very well from the early adopters. There's just one small problem that prevents the software from being a truly out-of-the-box solution: the include path. Not all users have access to their php.ini file, and it's not always a php.ini file anyway. So this is something the installation is unable to set for the customer.

I'm using object-oriented PHP5 stuff, so I have a folder named "classes" with all the relevant stuff in there. I am unable to search for paths to the folder and hard-code those into source files (there are ajax calls and other fun stuff; hard to know the exact relation to the path).

I guess I could use set_include_path on the top of a bunch of files, but that is a small performance hit (and totally inelegant code). I could put the folder path in the database somewhere and query for it (and cache it so it's not a performance hit). None of this stuff seems good. The path seems like the best solution.

Unless you have better ideas....

I would like to be able to use this 

<img src="user/<?=$log_username. '/' . $main_image;?>" width="130" height="150" id="pic5"/>

to work within php and i am having a had time doing so  . Any ideas?  $log_username refers to the users specific username folder within the main users folder         html source code looks like this  ,but i need to reference this within  a PHP  code block not html

<img src="user/lexi/pic.png" width="130" height="150" id="pic5">

any ideas? thanks guys

Hi all,


I've been trying to improve the speed of my file download script and was wondering if anyone could advise me which of the following is more efficient (Don't worry its not the whole script, just one segment), in terms of speed and server load?

The way I have the segment currently:

//if file exists need to check authorision levels

//set access to no

$access = NULL;

//retrieve current user levels

$cpm = $_SESSION['MM_CPMGroup'];

$cpmh = $_SESSION['MM_CPMHGroup'];

$cm = $_SESSION['MM_CMGroup'];

$cj200 = $_SESSION['MM_CJ200Group'];

$cj = $_SESSION['MM_CJGroup'];

//set file category type & set access if allowed

if ($category == 'cpm') {

if ($cpm == '1') {

$access = 1;

if ($subcategory == 'techdata') {

$path = "files/techdata/cpm/";

}

elseif ($subcategory == 'msds') {

$path = "files/techdata/cpm/msds/";

}

elseif ($subcategory == 'symbols') {

$path = "files/symbols/cpm/";

}

else {

$path = "files/cpm/";

}

}

}

elseif ($category == 'cpmh') {

if ($cpmh == '1') {

$access = 1;

if ($subcategory == 'techdata') {

$path = "files/techdata/cpmh/";

}

elseif ($subcategory == 'msds') {

$path = "files/techdata/cpmh/msds/";

}

elseif ($subcategory == 'symbols') {

$path = "files/symbols/cpmh/";

}

else {

$path = "files/cpmh/";

}

}

}

elseif ($category == 'cm') {

if ($cm == '1') {

$access = 1;

if ($subcategory == 'techdata') {

$path = "files/techdata/cm/";

}

elseif ($subcategory == 'msds') {

$path = "files/techdata/cm/msds/";

}

elseif ($subcategory == 'symbols') {

$path = "files/symbols/cm/";

}

else {

$path = "files/cm/";

}

}

}

elseif ($category == 'cj200') {

if ($cj200 == '1') {

$access = 1;

if ($subcategory == 'techdata') {

$path = "files/techdata/cj200/";

}

elseif ($subcategory == 'msds') {

$path = "files/techdata/cj200/msds/";

}

elseif ($subcategory == 'symbols') {

$path = "files/symbols/cj200/";

}

else {

$path = "files/cj200/";

}

}

}

elseif ($category == 'cj') {

if ($cj == '1') {

$access = 1;

if ($subcategory == 'techdata') {

$path = "files/techdata/cj/";

}

elseif ($subcategory == 'msds') {

$path = "files/techdata/cj/msds/";

}

elseif ($subcategory == 'symbols') {

$path = "files/symbols/cj/";

}

else {

$path = "files/cj/";

}

}

}

if ($access < 1) {

// if user access not granted to file category return message

if($logging > 0){

$status = "Wrong Permissions";

include('logit.php');

}

if (! $_SESSION['PrevUrl']) {

//header("Location: ". $loginpage );

exit;

}

$redirect = $_SESSION['PrevUrl'];

header("Location: ". $redirect );

exit;

}

// if file exists and user access granted continue


Obviously the above is a lot of lines of code... So I have rewritten the above to look like:


//if file exists need to check authorision levels & retrieve current user levels

if ($category == 'cpm' && $_SESSION['MM_CPMGroup'] == '1') {

$access = 1;

} elseif ($category == 'cpmh' && $cpmh = $_SESSION['MM_CPMHGroup'] == '1') {

$access = 1;

} elseif ($category == 'cm' && $cm = $_SESSION['MM_CMGroup'] == '1') {

$access = 1;

} elseif ($category == 'cj200' && $_SESSION['MM_CJ200Group'] == '1') {

$access = 1;

} elseif ($category == 'cj' && $_SESSION['MM_CJGroup'] == '1') {

$access = 1;

} else {

$access = NULL;

}

if ($access == NULL) {

// if user access not granted to file category return message

$status = "Unauthorised";

include('logit.php');

header("Location: ".$_SESSION['PrevUrl']);

exit;

}

// if file exists and user access granted continue

switch($subcategory) {

case "techdata":$path="files/techdata/".$category."/".$filename; break;

case "msds":

$path="files/techdata/".$category."/msds/".$filename; break;

case "symbols":

$path="files/symbols/".$category."/".$filename; break;

default:

$path="files/".$category."/".$filename;

}


The second version is a lot shorter, but is it better? And could I shorten the if statement further so its more like:


//if file exists need to check authorision levels & retrieve current user levels

if (($category == 'cpm' && $_SESSION['MM_CPMGroup'] == '1') || ($category == 'cpmh' && $cpmh = $_SESSION['MM_CPMHGroup'] == '1') || ($category == 'cm' && $cm = $_SESSION['MM_CMGroup'] == '1') || ($category == 'cj200' && $_SESSION['MM_CJ200Group'] == '1') || ($category == 'cj' && $_SESSION['MM_CJGroup'] == '1') {

$access = 1;

} else {

$access = NULL;

}

if ($access == NULL) {

// if user access not granted to file category return message

$status = "Unauthorised";

include('logit.php');

header("Location: ".$_SESSION['PrevUrl']);

exit;

}

// if file exists and user access granted continue

switch($subcategory) {

case "techdata":$path="files/techdata/".$category."/".$filename; break;

case "msds":

$path="files/techdata/".$category."/msds/".$filename; break;

case "symbols":

$path="files/symbols/".$category."/".$filename; break;

default:

$path="files/".$category."/".$filename;

}


Any advice would be appreciated! Thanks!!

So this is a bit of a puzzler for me? I have a code that takes a form submit and chucks it to a DB that all works fine but the second part is it also takes the submit and sends it to a email. now this is the crazy part it works fine 80% of the time but some times it sends back a blank email or one that is only hafe there, but still all shows fine in the DB and I have been trying to work this out for 5 days now and ..... nothing worked and I am lost for any ideas on what it could be 

Hello Friends,

Iam in a little bit confused matter. Iam developing a website & it requires a user's banning system too so my question begin here that if i use user's IP to ban but they can easy access the website by using different proxy sites & almost ip address are dynamic not static.
Banning their email is waste thing because they can create a new email within 1min.

Anyone have experiences in these things ? How we can ban a user permanently from accessing the website ?

I am looking to create a Wish List using cookies without using MySql and without the user having to register but i don't use cookie very often and i am not sure where to start,  Any ideas or help would be appreciated?

This topic has been moved to Application Design.

http://www.phpfreaks.com/forums/index.php?topic=353714.0

Hey guys I have a few pages where im echoing in one row at a time. Like for a email system. I want to color in every other row with CSS.
since im echoing in one row at a time i cant place a class on every other row saying which one is even or odd. wondering what are some ideas on how to do this.

One idea i had was maybe assign a number to each row then maybe a php math function to find if a number is odd or even? like to know if there is a correct or standard way to do this.
typed a small little example below

           $list3 = "SELECT message FROM pm WHERE id = '".($_SESSION['user_id'])."'";
           $list2 = mysql_query($list3) or trigger_error("SQL", E_USER_ERROR);
while ($list = mysql_fetch_assoc($list2)) { 
?>

<td class="odd"><?php echo $list['message']; ?></td> 

<?php } ?>

A picture to show what I mean by coloring every other row

Hello

I am having problems setting some security to a prize page on my website.
What I need, is to make sure that a user cannot just refresh and get the price again.
The price page is loaded in a frame so redirection is no good, and that doesn't stop the user from just hitting the "back" button and then refresh.


Anyone have an idea how to do this the simple way?

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=359016.0

Hi Guys and Gals,

I run a simple fansite for some of my fellow MTG Tactics players at www.onlinegamekey.com

I recently made a Booster Page value page he http://www.onlinegamekey.com/booster-packs.php

And it seems the page loads really slow, but I kind of understand that since its doing a lot of math and dealing with a lot of data.

I am wondering if there is a way to possibly optimize the page and querys in such a way that it doesn't take so long to load.

I'm basically using 4 queries to get the value of each pack and 1 function to average the query data. And I add them up as I go.

This is my function to find average values
Code: [Select]
///AVERAGE FUNCTION
function calculate_average($arr) {
    $count = count($arr); //total numbers in array
    foreach ($arr as $value) {
        $total = $total + $value; // total value of array numbers
    }
    $average = ($total/$count); // get average value
    return $average;
}
These are the queries to get the Average Values
Code: [Select]
<?php
///SETTING THE DAY
$today = date("Y/m/d");
///ALTERING DAY QUERY TIME (20 Days of Data)
$minusday = mktime(0,0,0,date("m"),date("d")-20,date("Y"));
///SETTING THE DAY FOR THE QUERIES
$queryday = date("Y/m/d",$minusday);

///DATA SET FOR BOOSTER PACK 1
//GET THE MYTHIC AVERAGE VALUE
$sqlMythic=mysql_query("SELECT AVG( ab.Price_Per ) AS Aaverage
FROM auctions AS ab
INNER JOIN cardlist AS c ON c.card_name = ab.Card_Name
WHERE ab.Day >= '$queryday'
AND c.rarity = 'Mythic Rare'
AND c.set = '1'
GROUP BY c.card_name, ab.Card_Name") or die;
while ($row=mysql_fetch_array($sqlMythic)) {
$MythicValues[]=$row['Aaverage'];
}
///MYTHIC VALUE IS 10% OF AVERAGE VALUE
$Mythic = calculate_average($MythicValues) * .1;

//GET THE RARE AVERAGE VALUE
$sqlRare=mysql_query("SELECT AVG( ab.Price_Per ) AS Aaverage
FROM auctions AS ab
INNER JOIN cardlist AS c ON c.card_name = ab.Card_Name
WHERE ab.Day >= '$queryday'
AND c.rarity = 'Rare'
AND c.set='1'
GROUP BY c.card_name, ab.Card_Name") or die;
while ($row=mysql_fetch_array($sqlRare)) {
$RareValues[]=$row['Aaverage'];
}
///RARE VALUE IS 90% OF AVERAGE RARE VALUE
$Rare = calculate_average($RareValues) *.9;
///TOTAL CONTRIBUTION TO PACK 100% IS 10% MYTHIC + 90% RARE
$raremythic= $Mythic + $Rare;

///GET THE UNCOMMON AVERAGE VALUE
$sqlUncommon=mysql_query("SELECT AVG( ab.Price_Per ) AS Aaverage
FROM auctions AS ab
INNER JOIN cardlist AS c ON c.card_name = ab.Card_Name
WHERE ab.Day >= '$queryday'
AND c.rarity = 'Uncommon'
AND c.set='1'
GROUP BY c.card_name, ab.Card_Name") or die;
while ($row=mysql_fetch_array($sqlUncommon)) {
$ucValues[]=$row['Aaverage'];
}
///UNCOMMON VALUE IS VALUE * 3
$Uncommon = calculate_average($ucValues);
$urm= ($Uncommon * 3) + $raremythic;

///GET THE COMMON VALUE
$sqlCommon=mysql_query("SELECT AVG( ab.Price_Per ) AS Aaverage
FROM auctions AS ab
INNER JOIN cardlist AS c ON c.card_name = ab.Card_Name
WHERE ab.Day >= '$queryday'
AND c.rarity = 'Common'
AND c.set='1'
GROUP BY c.card_name, ab.Card_Name") or die;
while ($row=mysql_fetch_array($sqlCommon)) {
$cValues[]=$row['Aaverage'];
}
///COMMON VALUE IS VALUE * 10
$common = calculate_average($cValues);
//TOTAL SET 1 VALUE IS ALL VALUES ADDED UP
$curm= ($common * 10) + $urm;
?>
But I'm not real sure where the strain is coming from. The page seems to load really slow, and I'm not sure if I should just try and write all these queries as a separate function then have it write the data to a separate table, or if there is another way to optimize this code.

I'm still have a lot to learn so I would appreciate any thoughts or ideas you folks can offer me.

Many thanks

We're running a foreclosure bid service that sends a lot of email status notifications. (ie bid received, high number, outbid, sale results etc)

Most days it works great. However, occasionally, there are a handful of emails that people claim they never got. I have a log file I write to immediately after the mail function. It is not conditioned on the return var... it just writes the mail vars to the log. So according to the log it APPEARS that all the emails were sent.

I've asked the host to check if there are any smtp errors. He says he doesn't see any.

So..... is there a best practice for attempting to send again on failure?

Should I just try a few times if it returns false?
Should I write it all to the db, use a pending/success flag and cron to work through the pendings? That way it continues to attempt failures and I can run a failure report.

I don't know. Any bright ideas?

Hi all I was trying to connect to a database which is running on an external host.
So i thought i try the stuff below.
That didn't work. Is it possible that the host has disabled external connection or something?
I tried to add http:// before the domain, but no succes either
Code: [Select]
<?php
$dbc = mysqli_connect('db87654321.somedomain.com','user','pass','database')// this is line 5
        or die(mysqli_error($dbc));
echo 'connected';
?>

it gave the following error:
Quote

Warning: mysqli_connect() [function.mysqli-connect]: (HY000/2005): Unknown MySQL server host 'db87654321.somedomain.com' (11004) in H:\xampp\htdocs\databasetestfile.php on line 5


P.s. the script worked when upload to the server.
P.p.s  is there something i should be carefull with when connection to an external database?

I have a little php site that looks up data in my crm database quickly and easily on my iphone.
Right now it's wide open because I'm in and out of it all day and trying to input uid/pw into a secure login page is a pain in the rear. (we're not talking about sensitive data here and I'm the only user.)

So, I would like to design a screen with several large graphic buttons and be able to touch those buttons in a specific sequence that would functionally allow a secure login.

Similar in concept to the android screen lock. You touch a sequence of numbered buttons and voila, the screen unlocks. It does not open a text field for data entry into two separate fields.

So if my access code was 1,2,3,4 and the screen was divided into quarters with a large number on each one, I would touch the buttons in that order and it would open the main page.

How would this best be accomplished? Is there a php function to essentially build a variable through successive key presses? then with a final submit it would just check that against a "secret code" and allow access.

Thanks for any input.   

I have a situation where I need to put a textbox and a submit button on a page. The user is logged in. The script needs to check against a list of words to make sure the word the user entered is correct and if so submit their information(ie:name, email, time, date, word entered to a database table. The part i'm having trouble with is figuring out how to make it check against a specific set of words.

Code: [Select]
<p><strong>Enter Word</strong></p>
<form action="/paradisepassword.php" method="post">
<input type="hidden" name="action" value="password2paradise" />
                <table cellpadding="5px">
<tr>
<td style="padding:3px;"><label for="password2paradise">Enter he :</label></td>
<td style="padding:3px;"><input name="password2paradise" type="password2paradise" id="password2paradise" value="" maxlength="30" tabindex="5" /></td>
</tr>
                    <tr>
<td style="padding:3px;">&nbsp;</td>
<td style="padding:3px;"><input name="submit" type="submit" value="Submit Password" tabindex="7" class="generalButton" /></td>
</tr>
                 </table>
              </form>
and the php file to process it:


<?php
include_once($_SERVER['DOCUMENT_ROOT']."/_core/config.php");
include_once($_SERVER['DOCUMENT_ROOT']."/_core/db-connect.php");
include_once($_SERVER['DOCUMENT_ROOT']."/_core/functions.php");
include_once($_SERVER['DOCUMENT_ROOT']."/_core/user-cookies.php"); 

/////////////////////////////////////////////////////////////////////////////

//function submitParadisePassword($intContestantID, $intDateSent, $intParadisePassword, $strType){

$paradise_password = paradisePassword("password1", "password2", "password3", "password4", "password5", "password6", "password7", "password8", "password9", "password10");

if (!$paradise_password == paradisePassword); {

// success!
$query_insert="INSERT INTO ".DB_DATABASE.".paradisepassword_2010
(
accountID,
nickname,
firstName,
lastName,
email,
paradisePassword,
sentFromUrl,
dateSent,
dateSentTimestamp,
ipAddress
)
VALUES
(
'".mysql_real_escape_string($_POST['accountID'])."',
'".mysql_real_escape_string($_POST['nickname'])."',
'".mysql_real_escape_string($_POST['firstName'])."',
'".mysql_real_escape_string($_POST['lastName'])."',
'".mysql_real_escape_string($_POST['email'])."',
'".mysql_real_escape_string($_POST['paradisePassword'])."',
'".mysql_real_escape_string($_POST['sentFromUrl'])."',
'".date("Y-m-d")."',
'".time()."',
'".$_SERVER['REMOTE_ADDR']."'
)
";
mysql_query($query_insert);

header("Location: ".$_POST['sentFromUrl']."?p2p=success");

} else {

header("Location: ".$_POST['sentFromUrl']."?p2p=fail");
}
//}

?>


what am i missing?