PHP - Advice On Keeping Files Private

Hi folks, I had a working, editable profile but it wasn't visible to other users.  So I'm trying to make that conversion now.  Here's the current 'myprofile' code:
<?php

session_start();

include('config.php');
include('date.php');

$id = $_GET['id'];
$sql = mysql_query("SELECT * FROM members WHERE id = '$id' LIMIT 1");
$check = mysql_num_rows($sql);
$check = mysql_query($sql_user_verify) or die('Cannot Execute:'. mysql_error());

if ($check > 1)
{
echo "No one matches that id number!";
exit();
}


if($check == 1)
{
while($row = mysql_fetch_array($sql))
{


$user = $id;


echo "<h2>Profile</h2>
<table>";

$row = mysql_fetch_array($sql);
echo "<tr><th>ID#:</th><td>".$user."</td></tr>
    <tr><th>Name: </th><td>".$row['callname']."</td></tr>
<tr><th>Email: </th><td>".$row['email']."</td></tr>
<tr><th>Password: </th><td><input type='password' value='".$row['password']."' disabled='true' /></td></tr>
<tr><th>Registered: </th><td>".$row['registered']."</td></tr>
    <tr><th>Last Login: </th><td>".$row['lastlogin']."</td></tr>";
 
echo "</table><br />";
  }
  
  if($id = $_SESSION['id'])
  {
  echo "<h2>Profile</h2>
<form method='post' action='editprofile.php'>
<table>";

$row = mysql_fetch_array($sql);
echo "<tr><th>ID#:</th><td>".$user."</td></tr>
    <tr><th>Name: </th><td>".$row['callname']."</td></tr>
<tr><th>Email: </th><td>".$row['email']."</td></tr>
<tr><th>Password: </th><td><input type='password' value='".$row['password']."' disabled='true' /></td></tr>
<tr><th>Registered: </th><td>".$row['registered']."</td></tr>
    <tr><th>Last Login: </th><td>".$row['lastlogin']."</td></tr>";
 
echo "</table><br />
<input type='submit' value='edit profile' />
</form>";
  }
  }
  
  else {
  die (); 
  }
 ?>
 <?php

include('footer.php');

?>

Here's the link to the user's own profile:
<a href=myprofile.php?id='.$id.'>Profile</a>

And here's the edit profile link, which works fine:
<?php

include('config.php');
include('date.php');
 
if(isset($_POST['btnedit'])){
$callname = $_POST['callname'];
$email = $_POST['email'];
$password = $_POST['password'];
 
$sql = mysql_query( "UPDATE users SET callname='".$callname."', email='".$email."', password='".$password."' WHERE id='".$_SESSION['id']."'" );

if($sql){
echo "<script>alert('profile updated');window.location='myprofile.php'</script>";
}else{
echo "<script>alert('updating profile failed!');</script>";
}
 
}
 
 
 
 
$sql = mysql_query( "SELECT * FROM users WHERE id='".$_SESSION['id']."'" ); 
$row = mysql_fetch_array($sql);

$userfinal = $_SESSION['id'];

$user = $userfinal;

echo "<h2>Edit profile</h2>
<form method='post'>
<table><tr><th>ID#:</th><td>".$user."</td></tr>
<tr><th>Name:</th><td><input type='text' name='callname' value='".$row['callname']."'/></td></tr>
<tr><th>Email:</th><td><input type='text' name='email' value='".$row['email']."'/></td></tr>
<tr><th>Password:</th><td><input type='password' name='password' value='".$row['password']."'/></td></tr>
<tr><th>Registered:</th><td>".$row['registered']."</td></tr>
<tr><th>Last Login:</th><td>".$row['lastlogin']."</td></tr>
</table><br />
<input type='submit' name='btnedit' value='update' />
</form>";
 
 
 ?>
 <?php

include('footer.php');

?>

It fails, it says the query was empty, even though there are user accounts created and information is being stored (as it worked fine before I tried editing the code to make it public.  What am I doing wrong?

Hello, i have a private message system nearly done , the only thing that i cant get to work is the Trash messages that a user has... so the user can delete messages either from the inbox/sent/friends box ... then each message row gets update with pm_sender_is_deleted='1' or pm_reciever_is_deleted='1' , depends if the message was deleted in the inbox or sent box respectively.

Here is my db structure on the first table:

        pm_id 

int(11)

pm_msg_id 

int(11)

pm_sender_id 

varchar(30)

pm_reciever_id 

varchar(30

pm_sender_isSpam 

tinyint(1)

pm_sender_isRead 

tinyint(1)

pm_sender_is_deleted 

tinyint(1)

pm_sender_is_removed 

tinyint(1)

pm_reciever_isSpam 

tinyint(1)

pm_reciever_isRead 

tinyint(1)

pm_reciever_is_deleted 

tinyint(1)

pm_reciever_is_removed 

tinyint(1)

here is the second:

usermessages_id 

int(11)

usermessages_msg_id 

int(11) 

usermessages_sender_id 

varchar(30)

usermessages_reciever_id 

varchar(30)

usermessages_subject 

varchar(300)

usermessages_content 

usermessages_created_at 

datetime

usermessages_canReply 

tinyint(1)

When a user decides to delete a message i update the _is_deleted as i said above successfully.
It seems that i cant get the a correct SQL code to display the mesages that i have deleted...

These 3 queries tells how many msgs are in the trash for each user:

//get messages that i have sent to  myself
                $get_same = mysql_query("SELECT * FROM glr_pm_data WHERE pm_sender_id='$email' && pm_reciever_id='$email' && pm_sender_is_deleted='1' && pm_reciever_is_deleted='1' && pm_sender_is_removed='0' && pm_reciever_is_removed='0'");

$same = mysql_num_rows($get_same);

//get messages that i have recieved

$get_rec = mysql_query("SELECT * FROM glr_pm_data WHERE pm_reciever_id='$email' && pm_reciever_is_deleted='1' && pm_sender_id!='$email' && pm_reciever_is_removed='0'");

$new = mysql_num_rows($get_rec);

//get messages that i have sent to others and NOT to myself

$get_snd = mysql_query("SELECT * FROM glr_pm_data WHERE pm_sender_id='$email' && pm_sender_is_deleted='1' && pm_sender_is_removed='0' && pm_reciever_id!='$email'");

a query i have tried to display the trash messages is:

$query = "SELECT *

  FROM glr_pm_data INNER JOIN glr_usermessages ON glr_pm_data.pm_msg_id=glr_usermessages.usermessages_msg_id &&

  (pm_sender_id='$email' && pm_reciever_id='$email'

  && pm_sender_is_deleted='1' && pm_sender_is_removed='0'

  && pm_reciever_is_deleted='1' && pm_reciever_is_removed='0')

  ||

  (pm_reciever_id='$email' && pm_sender_id!='$email'

  && pm_reciever_is_deleted='1' && pm_reciever_is_removed='0')

  ||

  (pm_sender_id='$email' && pm_reciever_id!='$email'

  && pm_sender_is_deleted='1' && pm_sender_is_removed='0')

  ORDER BY glr_pm_data.pm_id DESC $limit";
So if anyone can help me out create a correct query to display the trash messages i would appreciate..

Dear all ,

i am trying the following :

i have a class named ACCOUNT with many properties in .some of these properties are array , it is like this :
Code: [Select]
class ACCOUNT
{

    PRIVATE $DB_LINK;
    PRIVATE $COMP;
    PRIVATE $BRANCH;
    PRIVATE $CURRENCY;
    PRIVATE $GL;
    PRIVATE $CIF;
    PRIVATE $SL;
    PRIVATE $EXIST;
    PRIVATE $STATUS;
    private $ACCOUNT_NAME=ARRAY("LA"=>'',"LE"=>'',"SA"=>'',"SE"=>'');
    private $ACCOUNT_BALANCE =ARRAY('FC_YTD','CV_YTD','CV_BAL','YTD_BAL','BLOCKED_CV','BLOCKED_FC');
    private $CY_NAME=ARRAY("LA"=>'',"LE"=>'',"SA"=>'',"SE"=>'');
    private $ACCOUNT_NAME_USR=ARRAY("LA"=>'',"LE"=>'',"SA"=>'',"SE"=>'');
    private $LEDGER_NAME= ARRAY("LA"=>'',"LE"=>'');



i have created the following method to call any property

[code]    FUNCTION GET_SPECIFEC_ATT($ATT,$LANG)
    {
    $ATT=$ATT."['L$LANG']";
    ECHO $this->$ATT;

    }
but i am getting the below error :
Notice:  Undefined property: ACCOUNT::$BRANCH_NAME['LA'] in D:\wamp\www\EBANK\account.class on line 186

if i used this :
Code: [Select]
    echo $this->BRANCH_NAME['LA'];
it is working fine .
and the method is working fine i can iam trying to call property which is NOT an array.


Can you please help me in what iam doing wrong ?


Thanks in advance

Hello World ! i got this script of PM system on my website where 2 or 3 users can send PM to each other it work ok but it

<?php
header :  PM (unread count)
$msgs_count = GetUnreadMessagesCount($session_user["id"]);
and got this in the Index header :  PM <span>( <?=$msgs_count;?> )</span>

 /* Hello World ! i got a website where 2 or 3 users can create and send PM everything work good but have this bug . */
Example message thread#id1 Sender: A send the message to  B & C  ok now B & C got PM (1)
B make reply to this PM and C the same now the bug is userA will have PM(2) like he have 2unread messages 
but is different reply in the same message so need to count only (1) by Thread not reply ok if A read it and send new reply now B & C will have PM (3)
i hope someone can help me with this code thank you ! 

this is message_tbl for database


<?php
$tbl_messages_fields = array(
	"id"		=> "INTEGER PRIMARY KEY AUTO_INCREMENT", 
	"threadId"	=> "INT(11)", 
	"type"		=> "VARCHAR(4)", 
	"heldById"	=> "INT", 
	"fromId"	=> "INT", 
	"toId"		=> "VARCHAR(32)", 
	"isRead"	=> "INT(1) $d0", 
	"isStarred"	=> "INT(1) $d0", 
	"isDeleted"	=> "INT(1) $d0", 
	"subject"	=> "VARCHAR(150)", 
	"message"	=> "VARCHAR(10000)", 
	"timestamp"	=> "INT(12)");
SetupTable('tbl_messages', $tbl_messages_fields);

function UpdateMessageField($conditions, $field, $value){
	global $dbPrep;
	$add = array();
	foreach($conditions as $key=>$val){
		$add[] = "`$key`=:$key";
	}
	$add = implode(" AND ", $add);
	$sql = "UPDATE `tbl_messages` SET $field=:$field WHERE $add";
	$query = $dbPrep->prepare($sql);
	$data = array_merge($conditions, array("$field"=>$value));
	$query->execute($data);
}

function GetMessagesQuery($data = array(), $complexConditions = "", $extra = ""){
	$dbPrep = GetDatabaseConnection();
	$sql = "SELECT * FROM `tbl_messages` ";
	$add = " ";
	foreach($data as $key=>$value){
		$add.= "AND `$key`=:$key ";
	}
	$add = ($add != " ") ? "WHERE" . substr($add, 4, strlen($add)) : $add;
	$sql.= $add." ".$complexConditions." ".$extra;
	$query = $dbPrep->prepare($sql);
	$query->execute($data);
	return GetRows($query);
}

function GetThreadQuery($conditions = array(), $complexConditions = "", $extra = ""){
	global $dbPrep;
	
	$add = array();
	foreach($conditions as $key=>$val){
		$add[] = "`$key`=:$key";
	}
	$add = implode(" AND ", $add);
	
	$sql = "SELECT a.*, b.username AS fromUsername, b.type AS fromType FROM `tbl_messages` AS a ";
	$sql .= "INNER JOIN `tbl_users` AS b ON a.fromId=b.id ";
	$sql .= "WHERE $add ORDER BY timestamp ASC";
	#echo $sql;
	
	$query = $dbPrep->prepare($sql);
	$query->execute($conditions);
	return GetRows($query);
}

$p_NewMessage = $dbPrep->prepare("INSERT INTO `tbl_messages` (type, threadId, heldById, fromId, toId, subject, message, timestamp) VALUES (:type, :threadId, :heldById, :fromId, :toId, :subject, :message, :timestamp);");

$sql = "SELECT a.*, b.type as fromType FROM `tbl_messages` AS a ";
$sql .= "INNER JOIN `tbl_users` AS b ON a.fromId=b.id ";
$sql .= "WHERE threadId=:id AND heldById=:heldById AND isDeleted=0 ORDER BY timestamp ASC";
$p_GetSingleMessage = $dbPrep->prepare($sql);

function UnDeleteThread($threadId, $heldById){
	global $dbPrep;
         $p_UnDeleteThread = $dbPrep->prepare("UPDATE `tbl_messages` SET isDeleted=0,isRead=0 WHERE threadId=:threadId AND heldById=:heldById");
	$p_UnDeleteThread->execute(array("threadId"=>$threadId, "heldById"=>$heldById));
}

function GetRecipients($sessId, $fromId, $toId){
	$allParties = $sessId . "," . $fromId . "," . $toId;
	$arr = array_unique(explode(",", $allParties));
	if (($key = array_search($sessId, $arr)) !== false) {
		unset($arr[$key]);
	}
	return implode (",", $arr);
}

function GetRecipientName($id){
	global $dbPrep;
	$sql = "SELECT username FROM `tbl_users` WHERE id=:id";
	$query = $dbPrep->prepare($sql);
	$query->execute(array("id"=>$id));
	$row = $query->fetch( PDO::FETCH_ASSOC );
	return $row["username"];
}

function GetRecipientNames($recipients){
	$all = explode(",", $recipients);
	$val = array();
	foreach ($all as $a){
		$val[] = GetRecipientName($a);
	}
	return $val;
}

$p_GetUnreadMessagesCount = $dbPrep->prepare("SELECT COUNT(*) FROM `tbl_messages` WHERE isRead=0 AND heldById=:heldById AND type='recv'");
$unreadMsgsCount = -1;
function GetUnreadMessagesCount($uid){
	global $unreadMsgsCount;
	global $p_GetUnreadMessagesCount;
	if($unreadMsgsCount == -1){
		$p_GetUnreadMessagesCount->execute(array("heldById"=>$uid));
		$unreadMsgsCount = $p_GetUnreadMessagesCount->fetch( PDO::FETCH_ASSOC );
		$unreadMsgsCount = $unreadMsgsCount["COUNT(*)"];
	}
	return $unreadMsgsCount;
}

function GetNewThreadId(){
	global $dbPrep;
	$threadId = 1;
	$p_GetLatestThreadId = $dbPrep->prepare("SELECT MAX(threadId) FROM `tbl_messages`");
	$p_GetLatestThreadId->execute();
	$latestThreadId = $p_GetLatestThreadId->fetch( PDO::FETCH_ASSOC );
	if($latestThreadId){
		$threadId = $latestThreadId["MAX(threadId)"]+1;
	}
	return $threadId;
}			
?>




		if(isset($_REQUEST["mark_read"])){
			if(isset($_REQUEST["message_all_toggle"]))
				foreach($_REQUEST["message_all"] as $m)
					SetNotificationRead($m, $session_user["id"], 1);
			elseif(isset($_REQUEST["message"]))
				foreach($_REQUEST["message"] as $m)
					SetNotificationRead($m, $session_user["id"], 1);
			else
				foreach($_REQUEST["message_all"] as $m)
					SetNotificationRead($m, $session_user["id"], 1);
		}
		if(isset($_REQUEST["mark_unread"])){
			if(isset($_REQUEST["message_all_toggle"]))
				foreach($_REQUEST["message_all"] as $m)
					SetNotificationRead($m, $session_user["id"], 0);
			elseif(isset($_REQUEST["message"]))
				foreach($_REQUEST["message"] as $m)
					SetNotificationRead($m, $session_user["id"], 0);
			else
				foreach($_REQUEST["message_all"] as $m)
					SetNotificationRead($m, $session_user["id"], 0);
		}
		if(isset($_REQUEST["delete"])){
			if(isset($_REQUEST["message_all_toggle"]))
				foreach($_REQUEST["message_all"] as $m)
					RemoveNotificationById($m, $session_user["id"]);
			elseif(isset($_REQUEST["message"]))
				foreach($_REQUEST["message"] as $m)
					RemoveNotificationById($m, $session_user["id"]);
		}
	} else {
		if(isset($_REQUEST["delete"])){
			if(is_numeric($_REQUEST["delete"])){
				UpdateMessageField(array("threadId"=>$_REQUEST["delete"], "heldById"=>$session_user["id"]), "isStarred", 0);
				UpdateMessageField(array("threadId"=>$_REQUEST["delete"], "heldById"=>$session_user["id"]), "isDeleted", 1);
				UpdateMessageField(array("threadId"=>$_REQUEST["delete"], "heldById"=>$session_user["id"]), "isRead", 1);
			}elseif(isset($_REQUEST["message_all_toggle"])){
				$messages = $_REQUEST["message_all"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isStarred", 0);
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isDeleted", 1);
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isRead", 1);
				}
			}elseif(isset($_REQUEST["message"])){
				$messages = $_REQUEST["message"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isStarred", 0);
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isDeleted", 1);
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isRead", 1);
				}
			}
		}
		if(isset($_REQUEST["messagestar"])){
			if(isset($_REQUEST["message_all_toggle"])){
				$messages = $_REQUEST["message_all"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isStarred", 1);
				}
			}elseif(isset($_REQUEST["message"])){
				$messages = $_REQUEST["message"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isStarred", 1);
				}
			}
		}
		if(isset($_REQUEST["deletestarred"])){
			if(isset($_REQUEST["message_all_toggle"])){
				$messages = $_REQUEST["message_all"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isStarred", 0);
				}
			}elseif(isset($_REQUEST["message"])){
				$messages = $_REQUEST["message"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isStarred", 0);
				}
			}
		}
		if(isset($_REQUEST["mark_unread"])){
			if(isset($_REQUEST["message_all_toggle"])){
				$messages = $_REQUEST["message_all"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isRead", 0);
				}
			}elseif(isset($_REQUEST["message"])){
				$messages = $_REQUEST["message"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isRead", 0);
				}
			} 
		}
		if(isset($_REQUEST["mark_read"])){
			if(isset($_REQUEST["message_all_toggle"])){
				$messages = $_REQUEST["message_all"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isRead", 1);
				}
			}elseif(isset($_REQUEST["message"])){
				$messages = $_REQUEST["message"];
				foreach($messages as $m){
					UpdateMessageField(array("threadId"=>$m, "heldById"=>$session_user["id"]), "isRead", 1);
				}
			}
		}
	}

	$details = isset($_REQUEST["details"])?$_REQUEST["details"]:0;
	$session_user = GetUserById($session_user["id"]);

 

Hey all,

I'm sure this is a really basic question but I'd like a definite answer.  I've been watching a tutorial and seeing some site references regarding connecting to a sql database using php.  Since it contains a password to the database, my question is, how secure is this page on a webserver, or does it not even matter since the code is so specific to the website and the database it is connecting to.

Thank you in advance.
Chris

Hi,
when i extend a class containing a private variable and then access the variable in the extended class it doesn't produce any error and works fine and when i access the variable using the object of the extended class it works even then, i think private variable should not be accessable in an extended class neither by object of that extended class
here is the code


<?php

class textbox{

var $body_text, $body_text1;

private $body_private="this is private value";

protected $body_protect="this is protected value";

function __construct($text_in, $text_out){

$this->body_text=$text_in;

$this->body_text1=$text_out;

}

function display(){

echo "$this->body_text<br>";

echo "<i>";

echo "$this->body_text1</i><br>";

echo "$this->body_private<br/>";

echo "$this->body_protect<br/>";

}

function test_new(){

echo "see if this private echo works";

}

}

$box=new textbox("any new value","any old value" );

$box->display();

$box->body_text="this is public thats why i can access it";

$box->body_text1="this is public thats why i can access it";

/*$box->body_private="this is private value changed";   //you will see we can't access the private and protected memebers from outside

$box->body_protect="this is protected value changed"; */

$box->display();

$box->test_new();



class textboxbold extends textbox{

function __construct($text_on, $text_off, $text_get, $text_go)

{$this->body_text=$text_on;

$this->body_text1=$text_off;

$this->body_protect=$text_get;

$this->body_private=$text_go;

}

function display(){

echo "<b>$this->body_text</b><br>";

echo "<b>$this->body_text1</b><br>";

echo "<b>$this->body_protect</b><br>";

echo "<i>$this->body_private</i><br>";

}

}

$boxnew=new textboxbold("new Bold text", "text in bold","protected member","private");

$boxnew->display();

$boxnew->body_private="this is simple text taken from outside";

$boxnew->display();

$boxnew->test_new();

?>


please recommend, is it working as it should be

Hi there people of the PHP forum,

This functions intention is to output the same code 4 digit code twice before generating a new one, I can get it to do one fine, but I cannot for the life of me figure out how to get it to repeat twice before changing on the third call.
 
private function KeyGen(){

$Numerical  = range(0,9);
$Alpha = range("A","Z");

$Keys = array_merge($Numerical, $Alpha);
return $Keys[rand(0,35)].$Keys[rand(0,35)].$Keys[rand(0,35)].$Keys[rand(0,35)];
}

I am needing it to do this so that each 'set' of 2 calls to the function (within the class) gives the same 4 digit code.  At the moment I am just making one call & then assigning that single call to a variable and then referencing that var twice, this is not what I want to do, but it scratches the itch for now...

Any idea's/other logic would be greatly appreciated.

Cheers,
Rw

Hello,

I've got a huge database that is filled with text. It is encoded in UTF8 and some of the symbols used (like emoticons) are encoded in the private use area of UTF8 (http://www.fileformat.info/info/unicode/block/private_use_area/utf8test.htm). Now I want to replace those codes of the private use area with the corresponding smilies etcetera.

So actually my question is, how do I replace specific UTF8 codes with something else in PHP?

Thanks in advance!

Hello-
   I want to create is fairly simple client login. Basically we have an area in our server, a directory really, filled with pw protected directories which house client project sites, basically viewing rooms for graphics and video we post. we have a few sites up and working, but instead of giving our clients a link and a password (which is kinda sloppy) it would be ideal to have them go to a single index page and login from there.

I see the client entering a name and password and the script would match it to the directory and they would be taken to their designated client area. Another way would be to select their directory from a drop down and then enter the user and password, though then clients will be able to see other clients names, which would be less than ideal for disclosure reasons.

I hope this makes sense. I am not new to html css, but have only a bit of experience with php, so any help would be greatly appreciated.

thanks
Matt

Hi, I am making a dating site where I have made the user profile edit page visible to the user when they log in, and I think I can get away with not showing the user their "public" profile view. But I definitely need to show other users on the site the "public" non editing profile page view. But I don't know how to do this.

I have yet to create the search, search results, thumbnails with optional descriptions of the possible dating results.

But I first want to just get 2 versions of the user profile page view. One that the user sees that I have already done. (The editable one). And the other I need to make which is the page the other users will see, (The public profile)

Please if anyone has any idea how to do this I would greatly appreciate it, especially if you have any pseudocode ideas. thank you. 

This topic has been moved to PHP Freelancing.

http://www.phpfreaks.com/forums/index.php?topic=357368.0

Hi all,  I have a function that is only used in the file it is declared in :

/index.php
Code: [Select]
/**
 * This function is used to display form messages.
 *
 * @param string $msg This explains login and session status .
 *
 * @access private
 *
 * @return string
 */
function pred($msg)
{
    return
        "<p class='content' style='color:red;'>
        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$msg</p>";
}

I'm using netbeans 7.0 (which by the way rocks !!!!! ), and I don't want to be able to see the documentation in other files when I start typing something similar.

I read at pear.net coding standards that the '@param private' can be used on class methods.  Is there a way to make the documentation private to the file that the function is declared in?

I'm simply trying not to flood other files in the project with needless function suggestions.

Thanks in advance.

This topic has been moved to PHP Freelancing.

http://www.phpfreaks.com/forums/index.php?topic=358545.0

So far I have managed to create an upload process which uploads a picture, updates the database on file location and then tries to upload the db a 2nd time to update the Thumbnails file location (i tried updating the thumbnails location in one go and for some reason this causes failure)

But the main problem is that it doesn't upload some files

Here is my upload.php

<?php
include 'dbconnect.php';

$statusMsg = '';

$Title = $conn -> real_escape_string($_POST['Title']) ; 
$BodyText = $conn -> real_escape_string($_POST['ThreadBody']) ; 
	 

// File upload path
$targetDir = "upload/";
$fileName = basename($_FILES["file"]["name"]);
$targetFilePath = $targetDir . $fileName;
$fileType = pathinfo($targetFilePath,PATHINFO_EXTENSION);
$Thumbnail = "upload/Thumbnails/'$fileName'";

if(isset($_POST["submit"]) && !empty($_FILES["file"]["name"])){
    // Allow certain file formats
    $allowTypes = array('jpg','png','jpeg','gif','pdf', "webm", "mp4");
    if(in_array($fileType, $allowTypes)){

        // Upload file to server
        if(move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)){

            // Insert image file name into database
            $insert = $conn->query("INSERT into Threads (Title, ThreadBody, filename) VALUES ('$Title', '$BodyText', '$fileName')");
            if($insert){
               $statusMsg = "The file ".$fileName. " has been uploaded successfully."; 

		$targetFilePathArg = escapeshellarg($targetFilePath);
		$output=null;
		$retval=null;
		 //exec("convert $targetFilePathArg -resize 300x200 ./upload/Thumbnails/'$fileName'", $output, $retval);
		 exec("convert $targetFilePathArg -resize 200x200 $Thumbnail", $output, $retval);
		echo "REturned with status $retval and output:\n" ; 
		if ($retval == null) { 
		echo "Retval is null\n" ;
		echo "Thumbnail equals $Thumbnail\n" ; 
		}

            }else{
                $statusMsg = "File upload failed, please try again.";
            } 
        }else{
            $statusMsg = "Sorry, there was an error uploading your file.";
        }
    }else{
        $statusMsg = 'Sorry, only JPG, JPEG, PNG, GIF, mp4, webm & PDF files are allowed to upload.';
    }
}else{
    $statusMsg = 'Please select a file to upload.';
}

//Update SQL db by setting the thumbnail column to equal $Thumbnail
$update = $conn->query("update Threads set thumbnail = '$Thumbnail' where filename = '$fileName'");
            if($update){
               $statusMsg = "Updated the thumbnail to sql correctly.";
		echo $statusMsg ;  } 
else 
{ echo "\n Failed to update Thumbnail. Thumbnail equals $Thumbnail" ; } 


// Display status message
echo $statusMsg;
?>

And this does work on most files however it is not working on a 9.9mb png file  which is named "test.png" I tested on another 3.3 mb gif file and that failed too?

For some reason it returns the following

Updated the thumbnail to sql correctly.Updated the thumbnail to sql correctly.

Whereas on the files it works on it returns

REturned with status 0 and output: Retval is null Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif' Failed to update Thumbnail. Thumbnail equals upload/Thumbnails/'rainbow-trh-stache.gif'The file rainbow-trh-stache.gif has been uploaded successfully.

Any idea on why this is?

Hello


I have a simple question about file handling...


Is it possible to list all files in directories / subdirectories, and then read ALL files in those dirs,
and put the content of their file into an array?

Like this:

array:
[SomePath/test.php] = "All In this php file is being read by a new smart function!";
[SomePath/Weird/hello.txt = "Hello world. This is me and im just trying to get some help!";

and so on, until no further files exists in that rootdir.

All my attempts went totally crazy and none of them works... therefore i need to ask you for help.


Do you have any ideas how to do this?
If so, how can I be able to do it?


Thanks in Advance, pros