PHP - Display User Account Details

Hi I am currently making a site where users can upload second hand books for sale, I have everything working as i wish apart from i am having trouble creating a account page where users can review the books they have posted.

so far i use the following code to bring view a the data associated with an uploaded book based on its id

Code: [Select]
  public static function getById( $id ) {
    $conn = new PDO( DB_DSN, DB_USERNAME, DB_PASSWORD );
    $sql = "SELECT * FROM books WHERE id = :id";
    $st = $conn->prepare( $sql );
    $st->bindValue( ":id", $id, PDO::PARAM_INT );
    $st->execute();
    $row = $st->fetch();
    $conn = null;
    if ( $row ) return new Book( $row );
  }

I think i can use a similar function for my user account however, each book entered by a user has their member id attached to it, which is gained from there id in the members table which in turn is stored in $_SESSION['id']. My question is, is there a way to rework the code above to have something like select * where member_id = $_SESSION['id']. I have tried a few things and get stuck manly due to the fact i dont know what to replace the current :id with.

Thanks in advance, i hope i explained it well enough for you lot to understand.

Ian

The html Form I'm using works successfully with this php code:

 

<?php
//check if form was sent
if($_POST){
	$to = 's@hmail.com';
	$subject = 'Form1';

	$name = $_POST['name'];
	$email = $_POST['email'];
	$message = $_POST['message'];
	$headers = $name;
	$message .= "\r\n\r\n" . $name;

if( empty($_POST["some_place"]) or $_POST['some_place'] != "glory" )
{
   header("HTTP/1.0 403 Forbidden");
   	}else{
   		mail( $to, $subject, $message, $email, $headers );
   	}
		header('Location: https://.......com');
   exit;
}
?>

The problem is that when the email is received it shows the (from) email address to be my domain account user name @ the server name, like this:
domain1@host3servername.com, where I’d prefer something more like noReply@actualdomain.com

Any help or suggested remedy will be appreciated

This topic has been moved to Miscellaneous.

http://www.phpfreaks.com/forums/index.php?topic=321126.0

I am developing a CMS for my clients where the login to administrate their website is through my own website. This unified back-end allows me to develop the functionality and user experience without the issue of updating each site manually with the new files or running a complicated macro etc and then uploading them all individually too.

I would also like to combine as much of the "client side" CMS code too, i.e. as many of the php files that are stored on the clients website as possible.

All of the websites (and the backend website) are located on the same VPS, running PHP V5.3, allow_url_include is not available, I could have it turned on but this causes security issues if I understand correctly?

I figure my main options a

- Turn on allow_url_include and just include via IP/Domain.

- Use a FTP system similar to the way Wordpress allows remote install of plugins and system updates.

or

- Include the files using a different /home/username/cmsincludes/ path? Is it possible to use another VPS account to include from? I have tested and it gives me a "failed to open stream" error.
Example:

Client xyz Website
Website located: /home/xyz/public_html/
CMS Included: /home/mainsite/cms/

Client 123 Website
Website located: /home/123/public_html/
CMS Included: /home/mainsite/cms/

Client xxx Website
Website located: /home/xxx/public_html/
CMS Included: /home/mainsite/cms/

i am working on a project in which i am facing a problem.
 my question is that

is it possible to get information/details of a user who is not logged in or who is not registered.

if a user logged in then we can find get details easily. but how can i do this. is it possible. 

I have created a button which when pressed should present the user with their details (whoever is logged in), here is the form code:

<form id="form1" name="form1" method="post" action="getdetails.php">
 
  <input type="submit" name="Get Details" value="Get Details" />
   </label>
   
  </p>
</form>

Here is the getdetails.php file

<?php
 mysql_connect("localhost","root","");
 mysql_select_db("test");
 $username = $_POST['textfield'];
  echo '</br>';
 $query = mysql_query("SELECT * FROM membersdetails WHERE name=`$username` ");

while($result = mysql_fetch_array($query)) {
//display
echo $result['firstname'];
echo $result['surname'];
}
?>

Its not workin at all I have attacthed the error i am getting

Any help please?

Hello everyone.   I have a fully working form that gets data from a user (with $_post array) , and stores it in a database (mysql).   After successfulIy filling the form, I refer him to the "dashboard" page. In this page, i am having trouble to get his details from the database. How should I recognize him as the user that just registered?   should I use a $_post? or maybe a session? could you please give me a clue how to solve this? 

Hi,

I got this code which is meant to display the login details of the person that is logged in, however it just displays the details of the last person in the mysql table.

I have set up some test logins, so if I login as paul1 the details for paul3 are displayed...confused

Anyway, here is the page which displays the details

Code: [Select]
<?php

session_start();

// This checks to make sure the session variable is registered

// WARNING: DO NOT DELETE THE FOLLOWING LINE OF TEXT

if( isset($_SESSION['username']) && isset($_SESSION['sid'])) {

// You are free to edit the following code to suit your requirements
include_once("../../data/server.php");

include_once("../../lib/userdata.php");

// THIS BIT WORKS AND DISPLAYS THE USERNAME

 $data = mysql_query("SELECT * FROM members") 
 or die(mysql_error()); 
 while($info = mysql_fetch_array( $data )) 
 { 
 


include("../../lib/userinfo.php"); 
 
 //////////////////////////////////////////// WARNING: YOU SHOULD NOT EDIT ANYTHING ABOVE THIS LINE ////////////////////////////////////////////////////////
 
 
ECHO <<<PAGE

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>$siteName</title>
<link rel="stylesheet" href="../../userstylesheet.css" type="text/css" />

</head>

<div id="page">
  <img alt="" src="../../images/leftCurve" height="6" width="6" id="left" /> <img alt="" src="../../images/rightCurve.gif" height="6" width="6" id="right" />
  
  <div id="pageName">
    <h1>$siteName</h1>
     </div>
  <div id="pageNav">
    <div id="sectionLinks"> <a href="profile.php?username=$username">My Profile</a> <a href="modify.php?username=$username">Personal Details</a> <a href="message.php?username=$username">Messages</a> <a href="../../logout.php?username=$username">Logout</a></div>
  </div>
  <div id="content">
    <div class="feature">

<h2>Welcome $username </h2>
  

      <p>This is the demonstration home.html template. You are free to edit this or any of the other templates to suit your own needs. </p>
      <p>This is the first page your member will see once they have logged in. </p>
  <p>If you look at the code for this page, you will see that all HTML code is placed between the ***PAGE and PAGE; tags. Please note that the three * should be replaced with the < character. 
  This format must be kept to ensure that the user variables work. Changing this format may result in errors being returned.</p>
  <p>You may call member information using the $ tag and the variable name eg $ firstname without the space, will show the members first name, such as $firstname</p>
      <p>For any information please visit our site http://www.membersitemaker.co.uk. User guides will be added shortly and the forum will soon be full of help. </p>
    </div>
  </div>
  <div id="information">  <a href="#">About Us</a> | <a href="#">Site Map</a> | <a href="#">Privacy Policy</a> | <a href="#">Contact Us</a> | &copy;2011 $siteName </div>
</div>

</body>
</html>
PAGE;

}
//////////////////////////////////////// WARNING: DO NOT DELETE ANYTHING BELOW THIS LINE  //////////////////////////////////////////////////////////

} else {

// This will redirect the user to the login page if the session variables do not exist

header( "Location: ../../../login.html" );
}
?>
And here is the code for userdata.php

Code: [Select]
<?php


// Decode sitename

function decode_variable(&$siteName)
{
    $siteName = urldecode($siteName);
    $siteName = str_replace('%20',' ',$siteName); 
    return $siteName;
} 

decode_variable($siteName);

// Connnect to MySQL database

include_once("../../data/mysql.php");

$mysqlPassword = (base64_decode($mysqlpword));

$db = mysql_connect("$localhost", "$mysqlusername", "$mysqlPassword") or die ("Error connecting to database");

mysql_select_db("$dbname", $db) or die ("An error occured when connecting to database");

// Carry out MySQL query


?>
and userinfo.php

Code: [Select]
<?php

$username = $info['username'];
 $firstname = $info['firstname'];
 $lastname = $info['lastname'];
 $address = $info['address'];
 $town = $info['town'];
 $county = $info['county'];
 $postcode = $info['postcode'];
 $email = $info['email'];



$birth_year = $info['birth_year'];

$country = $info['country'];

$telephone_number = $info['telephone_number'];

$mobile_number = $info['mobile_number'];

$nickname = $info['nickname'];


As always, your help is much appreciated

Paul

hi
i had database with field of name,title,post,content

i want to fetch the post and content for a specific user from giving name of that user by form help me to get that

ps just give me idea to how to do that/

Code: [Select]
<form id="form1" name="form1" method="post" action="view.php">
  <label>Name
  <input type="text" name="textfield" />
  </label>
  <p>
    <label>
    <input type="submit" name="Submit" value="Submit" />
    </label>
  </p>
</form>

I am ok with codeing but NOT half-as good as some of your GUYS here.
I'm trying to write a simple sql query based on returning certain values from a table for that user.

I would like to just beable to include this as a page user.info.php and render it on any page as include to return need values .

See My CODE. PLESE HELP ME.
Code: [Select]
<?php 

     @session_start();
 $user = $_SESSION['username'];

// Set cookie
$userid = JRequest::getVar('userid');

$data       = new stdClass();
$model      =& $this->getModel('profile');
$my         = CFactory::getUser();

// Test if userid is 0, check if the user is viewing its own profile.
$db =& JFactory::getDBO();
$user =& JFactory::getUser();
        $userId = $user->id;

// Return with empty data
if($userId == null || $userId == '')
{
//return false;
}

$user =& JFactory::getUser($userId);

if($user->id == null){
//return false;
}

$id = & JFactory::getUser($userId);
$query = 'SELECT user_id, id, format_id, year, name FROM #__muscol_albums WHERE user_id = ' . $id;
//$query = 'SELECT user_id FROM #__muscol_albums WHERE id = ' . $album_id ;
$result = mysql_query($query) or die('Error, No Album Search failed');
list($name, $user_id, $id, $year) = mysql_fetch_array($result);

 
echo $id;
echo $user_id;
echo $year;

 
 
    // preform id return check and redirecto to correct url
    if ($user->get('id') == 0 || $userid == 0 || $userid <> $user->get('id')){
 $url=JURI::root().'index.php?'.$component.'&id='.$id.'&amp;tmpl=component&amp;print=1';
} else {
    $url=JURI::root().'index.php?option=com_community&amp;view=profile&amp;id=1&amp;tmpl=component&amp;print=1'; //redirect      is a function 
 
}

?>

hi im new to php   im using a script that i found at the link below:   http://forums.devshe...sql-891201.html   It works fine but i have added a couple of fields to the database : telephone    and   mobile_telephone   Ive change the register.php to include these fields but im struggling with the edit_account   Could anyone help please

Hi all,

Here i have a serious problem. I want to sought it out using PHP and MySQL only.
I have a form includes fields of customer id and Account type( stored in a jump menu and includes 6 different types of accounts)


<style type="text/css">
<!--
body,td,th {
font-size: 18px;
font-weight: bold;
}
-->
</style>
<p><img src="../images/mahapitiya 1.jpg" width="1024" height="139" /></p>
<form id="form1" name="form1" method="post" action="">
  <label>
    <input type="submit" name="button" id="button" value="Logout" />
  </label>
</form>
<p>&nbsp;</p>
<form action="" method="post" name="form2" id="form2" 
onsubmit="return Validate();">
  <fieldset>
    <legend class="cap">Create an Account</legend>
    <table width="75%" border="0" cellspacing="0" cellpadding="5" align="center">
      <tr>
        <td>&nbsp;</td>
        <td class="title02">&nbsp;</td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
      </tr>
      <tr height="30">
        <td width="10%">&nbsp;</td>
        <td width="25%" class="title02" align="left">Customer ID</td>
        <td width="55%" class="attribute1" align="left"><input type="text" name="customer_id" class="attribute1" /></td>
        <td width="10%">&nbsp;</td>
      </tr>
      <tr height="30">
        <td>&nbsp;</td>
        <td width="25%" class="title02" align="left">Account Type</td>
        <td width="55%" align="left" bgcolor="#FFFFFF" class="attribute1"><select name="account_type" id="jumpMenu" >
            <option selected="selected"></option>
            <option>Savings Investment</option>
            <option>Shakthi</option>
            <option>Surathal</option>
            <option>Abhimani Plus</option>
            <option>Yasasa Certificates</option>
            <option>Fixed Deposits</option>
          </select>&nbsp;</td>
        
        <td width="10%">&nbsp;</td>
      </tr>
    </table>
    <p align="center">&nbsp;</p>
    <p align="center">
      <input type="submit" onclick="return Validate();" name="submit" value="Submit" class="attribute1" />
      &nbsp;&nbsp;
      <input type="reset" name="reset" value="Reset" class="attribute1" />
      &nbsp;&nbsp;
      <label>
        <input type="submit" name="button2" id="button2" value="Help" />
      </label>
    </p>
  </fieldset>
  </td>
  <td width="5%">&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td align="center">&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td><font color="red" size="1" ></font></td>
    <td>&nbsp;</td>
  </tr>
  </table>
</form>
<p>&nbsp;</p>

<script language = "Javascript">
  
function Validate()
{
    if (document.form2.customer_id.value == '') 
    {
        alert('Please enter the valid customer id!');
        return false;
}
else if ( document.form2.account_type.selectedIndex == '' )
    {
        alert ( "Please select an account type!." );
        return false;
    }
return true;
}
</script>



There are 6 different types of tables exist in my database representing 6 different types of accounts.Each and every table there is a field called "account number" which is auto incremented.When user clicks on submit button i want account number to be opened based on selected account type.

How this could be done?

Thanks,
Heshan.

hi,

i'm new in php/mysql. i'm stored student marks values in following format in mysql db table.


id student_code Tamil English Maths Science Social
1                1        100      75       78      88       95
2                2         85      90        88     80      100

But i want to search and display the specific student marks in following format.

id:1

student_code:1

Tamil:100

English:75

Maths:78

Science:88

Social:92

Total:?

Avg:?

please give correct code for this format.

I'm trying to display relevant user details when click after user details button.it is css pop up window.i want to know how to catch relevant user when click the button.my primary key is email.

friends my url is like this

Category=Love&ID=1

now in url if i do something like this

Category4637=Hate19203&ID=1

the details are still showing, how can i fix this? if someone type Capegory instead of Category and a wrong category name which do not exist with that id in db send them to index.php?