PHP - Rss_reader Class Problem.

class Z {
   function foo() {
      // do somethig
   }
}


class X {
   $x
   
   function __contruct() {
        $this->x = new z();
   }

   function var() {
      $this->x->foo(); // Fatal error: Using $this when not in object contex
   }
}

// Class declaration here
class Y {
    function __contruct() {
        $z = new z();         
        $x = new x();
    }
}

Hi,
this php code not working for some reason
Code: [Select]
class db {

public function connect() {
$yhteys = new PDO("mysql:host=*****;dbname=*****", "*******", "******");
}

public function get($query, $parameters){
$prepare = $yhteys->prepare($query);
$prepare->execute($parameters);
$result = $prepare->fetch();
$count = $prepare->rowCount();
return array($result, $count);
}

}

Code: [Select]
$db = new db();
$content = $db->get("SELECT * FROM tuotteet WHERE id = ?", array("1"));
print $content;
It gives error:Parse error: syntax error, unexpected T_OBJECT_OPERATOR

Thank you for help!

Hey guys!

I have spent the last 5 and a half hours banging my head up against the wall trying to fix this to no avail so I guess its time to ask the experts!!!

I am having a problem with my membership class.

Basically, it works perfectly if a user logs in using sessions and not cookies. But when remember is set to 1 (they ticked the remember me checkbox), the mysql query fails on this line when we run $member_class->member_class();

Code: [Select]
$result = mysql_fetch_array(mysql_query("SELECT * FROM members WHERE email = '{$email}' AND token ='{$token}' AND ip_address LIKE '{$ip_address}%'"), MYSQL_ASSOC) or DIE ($this->query_error);
Everything matches up except for the $token value.

Basicly I believe that a new token is updated in the mysql database, before the token value in the cookie is updated as when I print $token, it definitly matches up with the token value in the mysql database. But from reading through the code, it all looks perfectly fine to me which is why i am so confused.


If i change $newtoken = $this->token(); // generate a new token to $newtoken = '1234'; the script also works perfectly fine without errors (though not very secure so would like the token to change values!


Really appreciate any input! Cheers






<?php
     // member class
     // handlers member logon
     class member_class   {
         var $message = '';
      var $query_error = 'ERROR: something went wrong when accessing the database. Please consult your webmaster';
  
         function member_class()   {   //constructor
             if (!$_SESSION['member_id'])   {   //fills session with empty values 
                 $this->set_session_defaults();;
             }
  
             if ($_SESSION['logged_in'])   {    //already logged in
                 $this->check_session();
             }
  
             if ($_COOKIE['remember'])   {  
                 $this->check_remembered($_COOKIE['remember']);
             }
         }    
     


         function check_login($email,$password,$remember,$redirect)   {
             $email = mysql_escape_string($email);

 $salt='s+(_v';
             $password = mysql_escape_string(hash('sha512', $salt . $password));
     
          $result=mysql_fetch_array(mysql_query("SELECT * FROM members WHERE email = '{$email}' AND password = '{$password}'"), MYSQL_ASSOC);
             if ($result)   {
                 $this->set_session($result,$remember,true);
                 return true;
             } else {
                 $this->failed = true;
                 $this->logout();

 //create error message telling user that either the email address does not exist, or they have entered the wrong password associated with the email address

$result=mysql_fetch_array(mysql_query("SELECT email FROM members WHERE email = '{$email}'"));

if($result) { $this->message .= 'Incorrect Password. Please try again'; }

    else { $this->message .= 'The email address '.$email.' does not exist. Please try again or <a href="/register.php" class=" cboxElement">create a new account</a>.'; }
                 return false;
             }
         }
     
         function logout()   {
             // blowup cookie
             setcookie('remember',time()-3600);
             $this->set_session_defaults();
         }
     
         function set_session($result,$remember,$init = true)   {
             $member_id=$result['member_id'];
             if ($init)   {
                 $session = mysql_escape_string(session_id());
                 $ip_address = mysql_escape_string($_SERVER['REMOTE_ADDR']);
              $newtoken = $this->token(); // generate a new token

  

  

  // generate a random token

  

  
              $update = mysql_query("UPDATE members SET session='{$session}', token='{$newtoken}', ip_address='{$ip_address}' WHERE member_id='{$member_id}'") or DIE ($this->query_error);

}
     
             $_SESSION['member_id'] = $result['member_id'];
              $_SESSION['email'] = htmlspecialchars($result['email']);
              $_SESSION['fullname'] = $result['fullname'];
             $_SESSION['token'] = $newtoken;
             $_SESSION['logged_in'] = true;
     
            if ($remember)   {
                 $this->update_cookie($newtoken);
             }
     
         }
     
         function update_cookie($token)   {
             $cookie = serialize(array($_SESSION['email'],$token));

 //print $token;
             setcookie('remember',$cookie, time()+12099600);
         }
     
         function check_remembered($cookie)   {
     
             $serializedArray=$cookie;
             $serializedArray = stripslashes($serializedArray);
             list($email,$token) = unserialize($serializedArray);
     
             if(empty($email) or empty($token))   {
                 return;
             } else {
                 $email = mysql_escape_string($email);
                 $token = mysql_escape_string($token);
                 $ip_address = mysql_escape_string($_SERVER['REMOTE_ADDR']);

 //changed  from = '{ip_address} to like '{ipaddress}% so we are not strict in ip address we only limit to  first 3 charactors of ip

$ip_address = substr($ip_address, 0, 3);

$query = "SELECT * FROM members WHERE email = '{$email}' AND token ='{$token}' AND ip_address LIKE '{$ip_address}%'";

print $query;
          $result = mysql_fetch_array(mysql_query("SELECT * FROM members WHERE email = '{$email}' AND token ='{$token}' AND ip_address LIKE '{$ip_address}%'"), MYSQL_ASSOC) or DIE ($this->query_error);

  

  
                 if (!$result)   {
         //            $this->set_session($result,false,false);
                 }else{ 
                     $this->set_session($result,true,true);
                 }
             }
         }
     
         function token()   {
             // generate a random token
             for($i=1;$i<33;$i++)   {
                 $seed .= chr(rand(0,255));
             }
             return md5($seed);
         }
     
         function check_session()  {
             $email = mysql_escape_string($_SESSION['email']);
             $token = mysql_escape_string($_SESSION['token']);
             $session = mysql_escape_string(session_id());

 //if ip address changes it will fail POSSIBLY DO NOT NEED THIS!
             $ip_address = mysql_escape_string($_SERVER['REMOTE_ADDR']);

 //check only the first 4 charactors of ip address incase user changes ip in corporate workplace etc ALSO CHANGED = TO LIKE IN MYSQL QUERY AND ADDEED % TO THE END AS WILDCARD

 $ip_address = substr($ip_address, 0, 3);
          $result = mysql_fetch_array(mysql_query("SELECT * FROM members WHERE email='{$email}' AND token='{$token}' AND session='{$session}' AND ip_address LIKE '{$ip_address}%'"), MYSQL_ASSOC or DIE ($this->query_error));
  
             if ($result != false){
             }else{
                 $this->logout();
             }
         }
     
     }?> 

I got some help from this forum previously and am having some more issues.  I created a database class that works and returns a PDO object.  I am having trouble figuring out how to use the object in another class I want to use to access some CRUD functions.  I get to the point where I  start using the pdo object I create in the database class and my code fails.  I am obviously calling the pdo object property incorrectly.  I guess I don't understand the proper syntax.  I've included the code for the database class and the CRUD class.  The problem starts at the point where I try to run a prepared statement.  I have include a comment "Problem stars here" to indicate that point.  There is a lot of debug stuff still in the code.

Thanks,

--Kenoli

<?php
	
	class Db {
	
	public $pdo = '';
	public $message = 'A message from db!<br><br>';

function __construct() {
	
	$servername = "localhost";
	$username = "root";
	$password = "";
	$dbname = "tio-local";
	
	$db_options = array(
	PDO::ATTR_EMULATE_PREPARES => false, 
	PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, 
	PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
	);
	
	try {
		
	  $this->pdo = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password, $db_options);
	  // set the PDO error mode to exception
	  $this->pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

	}  // End Try
	
	catch(PDOException $e) {
		  echo "Error: " . $e->getMessage();
		}
		
	} // End __construct
	
} // End class definition DB.php

$db = new Db;

$pdo = $db->pdo;

print_r ($pdo);

?>

<?php // Db_functions.php

include_once ('Db.php'); // $db instantiated in class file

$pdo = $db->pdo;

class Db_functions {
	
	public $pdo = '';
	
	function __construct($pdo) { 
		
		$this->pdo = $pdo;
		
	} // Close __construct
  
  public function insert($table_name, $white_list, $insert_array) {
		
			if ($white_list == '' && $table_name == 'Sites') {
		
			$white_list = array('gone'=>'','site_name' =>'', 'site_address' =>'', 'grommets' =>'', 'tape' =>'', 'site_image' =>'',  'description' =>'', 'surface' =>'', 'tio_contact' =>'', 'site_contact' =>'','owner' =>'', 'lessee' =>'',  'contact_phone' =>'', 'contact_email' =>'', 'contact_date' =>'', 'comments' =>'');
			} elseif  ($white_list == '' && $table_name == 'Persons') {
				
				$white_list = array('gone'=>'', 'fname'=>'', 'lname'=>'', 'tio'=>'', 'volunteer'=>'', 'general'=>'', 'artist_pic'=>'', 'email'=>'', 'website'=>'', 'telephone'=>'', 'address'=>'', 'city'=>'', 'state'=>'', 'zip'=>'', 'statement'=>'');
			}
			
			echo '<strong>***The following is the PDO object: </strong>';
		print_r ($this->pdo);
			
			echo '<p>The following is the $white_list:<br>';
			
			echo '<pre>';
			print_r ($white_list);
			echo '</pre>';
			
			echo '<strong>***The following is the PDO object: </strong>';
		print_r ($this->pdo);
			
			/** Test and remove any unpermitted columns **/
			
			$insert_array = array_intersect_key($insert_array, $white_list);
			
			echo '<strong>***The following is the PDO object: </strong>';
		print_r ($this->pdo);
		
		/** Generate variables to create prepared statements **/
		
			foreach($insert_array as $key => $value) {  
				$col .= $key . ', ';  
				$val .= ':' .$key . ', ';
			}
			
			echo '$col = ' . $col . '<p>';
			echo '$val = ' . $val . '<p>';
			
			echo '<strong>***The following is the PDO object: </strong>';
		print_r ($this->pdo);
		
		/** Remove ', ' at end of arrays and create prepared statement */
		
			$col = substr_replace($col ,"",-2);
			$val = substr_replace($val ,"",-2);
			$sql = "INSERT INTO Sites ($col) VALUES ($val)";
			
			echo "<p>SQL = $sql<br><br>"; /** Debug **/
		
		echo '<h3>More</h3<br>';	
			
		/** Register prepared statement */
		
		/****** PROBLEM STARTS HERE *****/
		
			$stmt = $this->pdo->prepare($sql);
			
		echo '<h3>More2</h3>';	
		
		/** Create [:field, $value] pairs. */
		
			foreach($insert_array as $key => $value) {
				$param = ':' . $key;
				$stmt->bindParam($param, $$value);
				
			//}
		
		/** Create [field => value] array */
		
			foreach($insert_array as $key => $value) {
				$insert[$key] =  $value;
			}
			
		
		/** Execute statement using $insert array. **/
		
			$stmt->execute($insert);
	
	} // End insert function
	
	
} // Close class definition

$db_functions = new Db_functions($pdo);

$insert_array = array('fname' => 'John', 'lname' => 'Hancock');

$db_functions->insert('Persons', '', $insert_array);

echo '<pre>';
print_r ($db_functions);
echo '</pre>';

?>

 

Edited February 6 by kenoli

   

Well i have this set of codes

<?php
include "includes/config.php";
class template{
    var $page;
    var $built;
    public $block = array();

    function _start($tpl){
        $this->page = $tpl;
    }

    function set_array($data){
        $this->block[] = $data;
    }

    function _show(){
        foreach($this->block as $k => $v){
            foreach($v as $k1 => $v1){
                //echo $k1."<br />";
                //echo $v1."<br />";
                $this->page = str_replace("{".$k1."}", $v1, $this->page);
            }
        }
        echo $this->page;
    }
}

$template = new template();

$file = "<html>
<body>
<p>{CAT}</p>
<p>{SUBCAT}</p>
</body>
</html>";

$template->_start($file);

// Category Query
while($row1 = mysql_fetch_assoc($cat)){

$template->set_array(array("CAT" => $row1['title']));

// Sub Category Query
while($row2 = mysql_fetch_assoc($subcat)){

$template->set_array(array("SUBCAT" => $row2['title']));

}
}

$template->_show();

?>
Now, when i echo $k1 or $v1 they display the keys and values in the correct order like

CAT1
SUBCAT1.1
SUBCAT1.2
CAT2
SUBCAT2.1
SUBCAT2.2

but when it goes through the str_replace its only displays the CAT1 and SUBCAT1.2 what going wrong?