PHP - Where Is The ' Coming From?

if any body copy and paste anything from word to editor some unwanted css also coming with that pasting. when we request the data same css also coming with that. so how to clean data  when we request
$desc =$_request['contents'];


how to solve this issue. please help me.

Hi i need help iv create an event upload on the back-end of a website where a user can enter name, location and date of an event into sql database which works fine, the problem is that i want to display only current and up and coming events and not display the events that  have passed if anyone can help that would be great   

Hello all,

I am trying to create a PHP CLi Script that will help me setup new config and server files / directories for every new web project i get instead of me having to manually create everything with each project. The script accepts the project name, and y/n for whether i want to create subdomains for css, jss and image files. After it has that, it must create a new http config file under sites-available (in Linux), by pasting the config file text.

Problem : If I output regular text to the file, it displays exactly in the format that I write the string variable. But when I use a printf, or try to use variables directly in the config text, it starts formatting the text in the config file in a strange way. I just want the variables to just be replaced and the text to appear in the exact format below. The text displays perfectly as i typed below in the config file if I don't use any variables.


$subDomainConfig .=
'<VirtualHost *:80>
ServerAdmin webmaster@%1$s
ServerName  %1$s.%2$s
ServerAlias %1$s.%2$s

# Indexes + Directory Root.
DirectoryIndex index.html index.php
DocumentRoot /var/www/%2$s/public_html/

# CGI Directory
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Location /cgi-bin>
Options +ExecCGI
</Location>


# Logfiles
ErrorLog  /var/www/%2$s/logs/apache/error.log
CustomLog /var/www/%2$s/logs/apache/access.log combined
</VirtualHost>
'.PHP_EOL;
$httpConfigFileText = sprintf($subDomainConfig, $subDomain, $shortProjectName);


The above code outputs text in this way in the file :

<VirtualHost *:80>
   ServerAdmin webmaster@images
   ServerName  images.mysite

   ServerAlias images.mysite


   # Indexes + Directory Root.
   DirectoryIndex index.html index.php
   DocumentRoot /var/www/mysite
/public_html/

   # CGI Directory
   ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
   <Location /cgi-bin>
      Options +ExecCGI
   </Location>


   # Logfiles
   ErrorLog  /var/www/mysite
/logs/apache/error.log
   CustomLog /var/www/mysite
/logs/apache/access.log combined
</VirtualHost>   

hello,
I have a search that matches users ISBN with two databases....code is below


$query_search_exact_match = mysql_query("SELECT 
   nvc_site.title, 
   nvc_site.id,
   nvc_site.description, 
   nvc_site.search_text, 
   nvc_site.image, 
   nvc_site.date, 
   nvc_site.price,
   nvc_site.location_city,
   nvc_site_ads_extra.name,
   nvc_site_ads_extra.value,
   nvc_site_ads_extra.classified_id
   
FROM   nvc_site,nvc_site_ads_extra
WHERE  name = 'ISBN%3A' AND live=1") or die(mysql_error());



then i take the ISBN that the user entered and match that with the isbn's in the DB


while ($fetch_extra = mysql_fetch_array($query_search_exact_match))
{

$value = ereg_replace( "[^0-9]", "", $fetch_extra['value'] );
$to_find_isbn = mysql_real_escape_string(ereg_replace( "[^0-9]", "",$_POST['szs']));
if($value == $to_find_isbn)
{
        echo "Match Found";
        } 
        else
        {
         echo "No Match Found";
         }
      //ELSE doesn't work here.....it displays both the if and else at the same time
}

i need it to display no match found if there was no match found.....I am soo lost right now!!

please help


thank you

I am using the classic
Code: [Select]
ini_set("display_errors","2");
ERROR_REPORTING(E_ALL);
but I am getting a notice that is posting on my page. I preffer not to remove the reporting yet since the site is still new and is there any way I can hide the notice but keep the fail errors

the error is Code: [Select]
Notice: Undefined index: HTTPS in /var/www/website/visitors.php on line 20
line 20 is Code: [Select]
if ($_SERVER["HTTPS"] == "on") {$pageURL .= "s";}

Hi I have a form that is popluated from the database now I am trying to get the switch case to be based on the option the user selects is this possible to make a case a variable popluated by the drop down if so can someone show me what am i missing?
the value I am trying to get from the form to the switch case is the ( $val->slug) but the value not been set help please

here the form
Code: [Select]
                                       <form method="post">
                                           <select name="deal-locations" onChange="this.form.submit()">
                                             <?php
                                              while(list($key,$val) = each($locations)) {
                                             ?><option value="<?php echo $val->slug; ?>"><?php echo $val->slug; ?></option><?php
                                                 }
                                              ?>
                                           </select>
                                           <input type="submit" value="submit">
                                       </form>
Here the switch case
Code: [Select]
switch ($_POST['deal-locations'])
   {
       case " $val->slug": echo "<h3>deal-locations: ASC</h3>";
           $args = array(
                 's' => $_GET['s'],
                 'post_type' => 'deals',
                 'deal-locations' => ' $val->slug',
                 'where' => ' $val->slug',
                 'paged' => 'paged'
                );
           break;
}

0
 

What is the best way to store this data coming from the api into a csv file to later put into the db. Output: rank, level, xp, rank, level, xp, etc. This api produces about 60 rows of data per name ran and x that by about roughly 300 names that equals a lot of data. Pretty much with my current code I am pretty much creating a endless loop almost that would take a long time to execute so updating said data would be a nightmare i would think. Is there a way to accomplish the same thing without the loop or I am not sure how to go about this. My current code is a mess that much I know I am gonna be told. This code works, just not efficiently. I am thinking there may be a better way to do this.

$query = $conn->prepare("SELECT name FROM users LIMIT 1");
$query->execute();

while($row = $query->fetch(PDO::FETCH_ASSOC)){
  $name = $row['name'];
  $url = 'https://secure.runescape.com/m=hiscore/index_lite.ws?player='. 
  $name . '';//api that the csv data is coming from 
  $highscores = file_get_contents($url);
  $fields = array("Name", "Rank", "Level", "Xp");//this is to add the headers 
 // for the csv files
  $implode1 = implode($fields, ",");//turn into csv format, not sure this is 
  //even needed
  $implode1 .= "\n";/*this is to add a line break so that the explode below 
   will properly put it into its own element*/
   //otherwise data starts joining togather
  $extra_data = array("$name");/*This is to add the name that the data
  pertains too*/
  $implode2 = implode($extra_data, ",");//turn into csv format
  $highscores =  $implode1 . $implode2 . $highscores;//join as one array    
  $highscores = explode("\n", $highscores);//turn each csv into an element of 
  //its own element
  a bunch of unsets to remove unwanted data. Omitted them to condense the code
  $i = 1;
  header('Content-Type: text/csv');
  header('Content-Disposition: attachment; filename="name.csv"');

  $data = $highscores;

  $fp = fopen('highscores/' . $name . '.csv', 'wb');
  foreach ( $data as $line ) {
     $val = explode(",", $line);
     fputcsv($fp, $val);
 }
   fclose($fp); 

The pdo part I was gonna include but the way I have it setup now wouldn't work. I was thinking that I would use mysql's LOAD DATA INFILE to insert the csv data to database. The end goal here is to be able to search for player stats and to use said data to keep track of xp earned during a xp competition. I PRAY that i have included enough info... I would really appreciate any feedback if possible.

Hi there I have a problem here, I think I may know what it is but just wanted some guidance on this issue.

I took the logic from a previous help from the people on this forum and here is my landing page:

<?php
// ini_set("display_errors", 1);

// randomly starts a session!

session_name("jeremyBasicLogin");
session_start();

if(isset($_SESSION['username']))  {

// display whatever when the user is logged in:

echo <<<ADDENTRY

<html>
<head>
<title>User is now signed in:<title>
</head>

<body>
<h1>You are now signed in!</h1>
<p>You can do now what you want to do!</p>
</body>
</html>
ADDENTRY;

} else {
// If anything else dont allow access and send back to original page!

header("location: signin.php");

}
?>


This is where the user goes to when they go to this system (not a functional system, ie it doesnt actually do anything its more for my own theory.

As you wont have a session on the first turn to this page it goes to:

signin.php which contains:
<?php
// ini_set("display_errors", 1);

require_once('func.db.connect.php');

if(array_key_exists('submit',$_POST)) {

dbConnect(); // connect to database anyways!

// Do a procedure to log the user in:

// Santize User Inputs
$username = trim(stripslashes(mysql_real_escape_string($_POST['username']))); // cleans up with PHP first!
$password = trim(stripslashes(mysql_real_escape_string(md5($_POST['password'])))); // cleans up with PHP first!

$sql = "SELECT * FROM users WHERE username='$username' AND password='$password'";
$result = mysql_query($sql);

if(mysql_num_rows($result) == 1) {

session_name("jeremyBasicLogin");
session_start();
$_SESSION['is_logged_in'] = true;
$_SESSION['username'] = $username;
//print_r($_SESSION);  // debug purposes only!
$_SESSION['time_loggedin'] = time(); // this is adding to the array (have seen the output in the SESSION vars!

// call function to update the time stamp in MySQL?


header("location: index.php");

} else if(mysql_num_rows($result) != 1) {
$message = "You typed the wrong password or Username Please retry!";
}
} else {
$message = "";
}
// displays the login page:
echo <<<LOGIN
<html>
<body>
<h1>Example Login</h1>

<form id="login" name="login" action="{$_SERVER['PHP_SELF']}" method="post">
<label for="username">Username: </label><input type="text" id="username" name="username" value="" /><br>
<label for="password">Password: </label><input type="text" id="password" name="password" value="" /><br>
<input type="submit" id="submit" name="submit" value="Login" />
</form>
LOGIN;
echo "<p>" . $message . "</p>";
echo <<<LOGIN

<p>Please Login to View and Edit Your Entries</p>
<p><a href="register.php">Click Here To Signup</a><p>
</body>
</html>
LOGIN;
?>


This checks through user inputs and hopefully logs them in, when Ive inserted the data into the database itself it works, if I try and login but if a user fills in this form:

signup.php:

<?php
//ini_set("display_errors", 1);

$message ='';

require_once('func.db.connect.php');

if(array_key_exists('submit',$_POST)) {

dbConnect(); // connect to database anyways!

// do some safe protecting of the users variables, apply it to all details!
$username = trim(stripslashes(mysql_real_escape_string($_POST['username']))); // cleans up with PHP first!
$email = trim(stripslashes(mysql_real_escape_string($_POST['email']))); // cleans up with PHP first!
$password = trim(stripslashes(mysql_real_escape_string(md5($_POST['password'])))); // does as above but also encrypts it using the md5 function!
$password2 = trim(stripslashes(mysql_real_escape_string(md5($_POST['password2'])))); // does as above but also encrypts it using the md5 function!

if($username != '' && $email != '' && $password != '' && $password2 != '') {
// do whatever when not = to nothing/empty fields!

if($password === $password2) {
// do database stuff to enter users details

$sql = "INSERT INTO `test`.`users` (`id` ,`username` ,`password`) VALUES ('' , '$username', MD5( '$password' ));";
$result = mysql_query($sql);
if($result) {
$message = 'You may now login by clicking <a href="index.php">here</a>';
}

} else {
// echo out a user message says they got their 2 passwords incorrectly typed:
$message = 'Pleae re enter your password';
}

} else {
// they where obviously where empty
$message = 'You missed out some required fields, please try again';
}

}

echo <<<REGISTER

<html>
<body>
<h1>Register Form</h1>
<p>Please fill in this form to register</p>
<form id="register" name="register" action="{$_SERVER['PHP_SELF']}" method="post">

<table>
<tr>
<td><label for="username">Username: </label></td>
<td><input type="text" id="username" name="username" value="" /></td>
</tr>

<tr>
<td><label for="email">Email: </label></td>
<td><input type="text" id="email" name="email" value="" /></td>
</tr>

<tr>
<td><label for="password">Password: </label></td>
<td><input type="text" id="password" name="password" value="" /></td>
</tr>

<tr>
<td><label for="password">Confirm Password: </label></td>
<td><input type="text" id="password2" name="password2" value="" /></td>
</tr>

<tr>
<td><input type="submit" id="submit" name="submit" value="Register" /></td>
</tr>

<table>

REGISTER;
echo "<p>" . $message . "</p>";
echo <<<REGISTER

</form>
</body>
</html>
REGISTER;
?>


As I said when the user signs up when submitting the above form, it doesnt work, keeps coming up with a different value for the password, so I am about 99% certain its the password, but I have been maticulous about copying in the sanitize function for SQL injections and it just doesnt still work, really puzzled now.

Any helps appreciated,
Jeremy.

For example with an IDE to run a program is there a way to put some code in the path and let it tell me where it came from like a referral?
For example lets say I am at pgm1.php and at the top of that program i put something like.

$ref = $_SERVER['HTTP_REFERER'];
echo("$ref<br>";

Result: https://www.mydomain.com/wp-admin/admin.php?page=lambo

As you can clearly see the page that we have entered the code in is referred by the URL here.

It tells me that it was last at a word press page /wp-admin/admin-php and I can go to that page and it will be the last page it was at..

So bottom line then if i add this code to the admin page and click the same button i had before.. it will tell me the file that called out the admin page.

Baslcaly I am looking for ideas on how to track the page i am now all the way back to the page with the button on it and all intermediate pages that it passes thru to get to the final destination.  It seems that to succesfully troubleshoot a fault is to follow the path of the entire job and see if any breaks...

Any thoughts or suggestions on how to best do this would greatly be appreciated.

 

This topic has been moved to mod_rewrite.

http://www.phpfreaks.com/forums/index.php?topic=351137.0