PHP - Username Not Being Added To The Database

Hi,

my goal is to be able to create a web based interface for someone who has no programming skills or interest to be able to maintain a list of usernames and passwords for protecting a page of links on a website.

so, I've created a page that can write to a database, and I can see that it is working, I can read entries, etc.

now, I need to know how to make a script that will check against that database for valid UN/PW combinations.

what is the best method for this?

James

Hi,

I'm am trying to use a search engine that search's for a username in the database and displays the information back. I have searched for a script but none of them has helped me. I have tried to use this without any luck:

mysql_connect("localhost", "", "") or die(mysql_error()); 
 mysql_select_db("dbsystem") or die(mysql_error()); 
$todo=$_POST['todo'];
if(isset($todo) and $todo=="search"){
$search_text=$_POST['search_text'];
$type=$_POST['type'];

$search_text=ltrim($search_text);
$search_text=rtrim($search_text);

if($type<>"any"){
$query="select * from users where name = '$search_text'";
}else{
$kt=split(" ",$search_text);//Breaking the string to array of words
// Now let us generate the sql
while(list($key,$val)=each($kt)){
if($val<>" " and strlen($val) > 0){$q .= " name like '%$val%' or ";}

}// end of while
$q=substr($q,0,(strlen($q)-3));
// this will remove the last or from the string.
$query="select * from users where $q ";
} // end of if else based on type value
echo $query;
echo "<br><br>";
$nt=mysql_query($query);
echo mysql_error();
while($row=mysql_fetch_array($nt)){
echo "$row[name]<br>";
}
// End if form submitted


}else{
echo "<form method='post' action=''><input type='hidden' name='todo' value='search' />
<input type='text' name='search_text' /><input type='submit' value='Search' /><br>
<input type='radio' name='type' value='any' checked />Match any where <input type='radio' name='type' value='exact' />Exact Match

</form>
";
}


I will be grateful if you can help with this.

Im trying to create a website where users login, and then when they add a new entry to the database there name is put as the author. This is how my tables are set up. One table is named job and has the columns id, jobtext, jobdate, and authorid. Another table is called author. This table contains the columns id, username, password, and name. Authorid from the job table matches with id from the author table. When a user logins in this code is used to register the name...session_start();
$_SESSION['myusername'] = $_POST['myusername'];
$_SESSION['mypassword'] = $_POST['mypassword'];
header("location: index.php");
}
else {
echo "Wrong Username or Password";
}

This is the form users use to add a new entry...
if (isset($_GET['add']))
{
$pagetitle = 'New Job';
$action = 'addform';
$text = '';
$authorid = '';
$id = '';
$button = 'Add job';

include $_SERVER['DOCUMENT_ROOT'] . '/jobs/includes/db.inc.php';

// Build the list of authors
$sql = "SELECT id, name FROM author";
$result = mysqli_query($link, $sql);
if (!$result)
{
$error = 'Error fetching list of authors.';
include 'error.html.php';
exit();
}

while ($row = mysqli_fetch_array($result))
{
$authors[] = array('id' => $row['id'], 'name' => $row['name']);
}

// Build the list of categories
$sql = "SELECT id, name FROM category";
$result = mysqli_query($link, $sql);
if (!$result)
{
$error = 'Error fetching list of categories.';
include 'error.html.php';
exit();
}

while ($row = mysqli_fetch_array($result))
{
$categories[] = array(
'id' => $row['id'],
'name' => $row['name'],
'selected' => FALSE);
}

include 'form.html.php';
exit();
}

if (isset($_GET['addform']))
{
include $_SERVER['DOCUMENT_ROOT'] . '/includes/db.inc.php';

$text = mysqli_real_escape_string($link, $_POST['text']);
$author = mysqli_real_escape_string($link, $_POST['author']);

if ($author == '')
{
$error = 'You must choose an author for this job.
Click &lsquo;back&rsquo; and try again.';
include 'error.html.php';
exit();
}

$sql = "INSERT INTO job SET
jobtext='$text',
jobdate=CURDATE(),
authorid='$author'";
if (!mysqli_query($link, $sql))
{
$error = 'Error adding submitted job.';
include 'error.html.php';
exit();
}

$jobid = mysqli_insert_id($link);

if (isset($_POST['categories']))
{
foreach ($_POST['categories'] as $category)
{
$categoryid = mysqli_real_escape_string($link, $category);
$sql = "INSERT INTO jobcategory SET
jobid='$jobid',
categoryid='$categoryid'";
if (!mysqli_query($link, $sql))
{
$error = 'Error inserting job into selected category.';
include 'error.html.php';
exit();
}
}
}

header('Location: .');
exit();
}


Form.html.php =
<?php include_once $_SERVER['DOCUMENT_ROOT'] .
'/includes/helpers.inc.php'; ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title><?php htmlout($pagetitle); ?></title>
<meta http-equiv="content-type"
content="text/html; charset=utf-8"/>
<style type="text/css">
textarea {
display: block;
width: 100%;
}
</style>
</head>
<body>
<?php session_start(); ?>

<h1><?php htmlout($pagetitle); ?></h1>
<form action="?<?php htmlout($action); ?>" method="post">
<div>
<label for="text">Type your job he </label>
<textarea id="text" name="text" rows="3" cols="40"><?php
htmlout($text); ?></textarea>
</div>
<div>
<label for="author">Author:</label>
<select name="author" id="author">
<option value="">Select one</option>
<?php foreach ($authors as $author):?>
<option value="<?php htmlout($author['id']); ?>"<?php
if ($author['id'] == $authorid)
echo ' selected="selected"';
?>><?php htmlout($author['name']); ?></option>
<?php endforeach; ?>
</select>
</div>
<fieldset>
<legend>Categories:</legend>
<?php foreach ($categories as $category): ?>
<div><label for="category<?php htmlout($category['id']);
?>"><input type="checkbox" name="categories[]"
id="category<?php htmlout($category['id']); ?>"
value="<?php htmlout($category['id']); ?>"<?php
if ($category['selected'])
{
echo ' checked="checked"';
}
?>/><?php htmlout($category['name']); ?></label></div>
<?php endforeach; ?>
</fieldset>
<div>
<input type="hidden" name="id" value="<?php
htmlout($id); ?>"/>
<input type="submit" value="<?php htmlout($button); ?>"/>
</div>
</form>
</body>
</html>


Right now, under authors, it displays all the authors in the database. I want it to just show/submit the authorid of the logged in user.

Alright, I've been assigned a project at work. I did not develop the application and the individual who did used CodeIgnited framework and mysql as the db.   Here's the problem, I'm not given much OT to do this and in our meeting the best way to proceed was to replicate the database for different parts of the organization. Basically we are a subsidiary and have been using an application that other groups within the organization want to use. Usually I would reconfigure the db schema and add org ids and in the user table add the appropriate organization to go to. However, they are not giving me enough time to do that.   So what I'm thinking is to just create a copy of the database we use (just the structure) and create a new database.   What I want to know is how to use mysql to check to see if a user exists in one database and if they don't then to go on to the next database. I understand this is a very sloppy way to do it, but it's the way we are moving forward.   I found the code to connect to the db in CodeIgnitor... how can I connect to a database, check to see if the user exists, then close that db connection and try the next database?  

    /**
     * Select the database
     *
     * @access    private called by the base class
     * @return    resource
     */
    function db_select()
    {
        return @mysql_select_db($this->database, $this->conn_id);
    }

  Thanks in advance.

ISSUE.
A User enters information into a form.
If the 'username' is already taken, a 'message' in Red and with larger font-size will be returned, for example,
"The username $username already exists."
If the username is 'mattd' then the message should say, "The username mattd already exists."

Within my php application, I have included 'inline html'.
Here is part of the code:   ....
if (mysql_num_rows($query_run)==1) {
// it will never = more than one because only
//one user will or will not exist
?>

<html>
</body>
<h1><font color="#FF0066">The username <?php echo $username; ?>already exists.</h1>
</body>
</html>

<?php
}else{
//start the registration process
$query = "INSERT INTO `Names` VALUES
....   1. At one point I did get this: "The username mattd already exists."
2. But now I only get "The username already exists."
I am not retrieving the $username variable.
  This screenshot is found he
http://imgur.com/lIwLZ1G


thanks.

While we're on the subject, is there a way to ensure that the first letter of a name is captalized, and the rest lowercase?  Or is this best handled later on, when the name is being used and called from the DB.

PS: some of us comment are code as to WHAT we are doing because we're just not that good yet, and we need to explain it to ourselves.

this is my first post so I hope someone can help find a solution to this problem. I created this website in wordpress www.porthopehealthcentre.com
It displayed correct in firefox but not ie.

There was an extra closing </div> tag in my header php. I deleted this and now it displays correct in ie but not firefox.

Can I somehow link to two different header files one for ie and one for firefox? if so how do I do this?

Or is there an easier solution to this. I would really appreciate someones help as this is the final thing that needs adjusting to finish the job.

Hi,
Im building a management web application that can contain sensitive information for people, allow for cheques to be printed, amoung other things. Im wondering what are some extra security features that could be added as some users may not want to have the web application available outside their business. I would preffer doing this without having to run the server locatlly on thier machine. i was thinking something like only allowing certain ip address's to access the sites login.

Anyone have any other/better ideas?

For some reason this only allows one SQL to be added...

// SQL Connection
$username="monstert_admin"; $password="admin"; $database="monstert_admin";
$connection = mysql_connect("localhost", $username, $password) 
or die("Connection Failure to Database");
// Select Database
mysql_select_db($database, $connection) or die ($database . "No Database" . $username);

//Select everything from the the table
$MyQuery = "SELECT * FROM photos";
$retrieve = mysql_query($MyQuery) or die(mysql_error());
if(mysql_num_rows($retrieve) != 0):
$row = mysql_fetch_assoc($retrieve);
else:
echo '';
endif;

if(isset($_POST['Submit']) && !$errors)
{
$url = $newname;

   include('img.php');
   $image = new SimpleImage();
   $image->load($url);
   $image->resize(500,315);
   $image->save($newname);

mysql_query("INSERT INTO photos (url) VALUES ('$url')");

echo "File Uploaded Successfully as <i> ";
echo $newname;
echo "</i>";
}

What would the issue be? I only have two columns - ID and url

Thanks in advance!

I hope that subject made sense!

I have a page where I want to generate page-specific keywords automatically. Actually I have some general keywords stored in a text file and then I add the page-specific ones after those. The problem is, however, solely caused by the keywords I pull from my text file. A "1" is added to my list of keywords. Consider a news page like so:

news.php
// ...
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta name="keywords" content="<?php require('php/generateKeywordList.php'); ?>" />
</head>
// ...

And then generateKeywordList.php
// I have omitted the part with the page-specific keywords, because it is not what causes the problem (commented it all out)
set_include_path('/mypath/');
$str = require_once('includes/websiteKeywords.txt');
echo $str; // For some reason, the number 1 is added at the end of this string


websiteKeywords.txt (it doesn't matter what I put in there)
Code: [Select]
these, are, my, keywords, for, my, website
In my meta tag, the above would be displayed as:
Code: [Select]
these, are, my, keywords, for, my, website1
I then tried to make a simple php page like this

$keywords = require('includes/websiteKeywords.txt');
echo $keywords;

... and it worked. At the moment I have absolutely no idea where the number 1 comes from.

So, basically if I include the keywords directly from the text file into my meta tag, it displays fine. If I make a simple php page where I echo out the keywords from the text file, it displays fine. But if I include my php script, which echos the keywords, into my meta tag, the number 1 is added at the end of the string.

Am I completely missing something here or is this extremely strange?


Thanks for any help!

I got two values from a form in a page by POST method. Now I want to add this values to a text file. The code of form1.htm is like this:
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Insert title here</title>
</head>
<body>
<form action="write1.php" method="post">
<fieldset>
<legend>Log In...</legend>
<input type="text" name="uname" /><br>
<input type="text" name="pass" /><br><br>
<input type="submit" name="button" value="Log In" />
</fieldset>
</form>
</body>
</html>

And the code of write1.php is like this:
<?php

function arr_func()
{
$name = $_POST['uname'];
    $pass = $_POST['pass'];
//trying to catch values in an array
    $arr[] = array("name"=>"$name", "pass"=>"$pass");
foreach ($arr as $val_arr)
{
foreach ($val_arr as $key=>$val)
{
echo "$key - $val<br>";
}
echo '<br>';
}
}

$arr1 = arr_func();
//values are printed, no problem
echo $arr1;
//trying to change the array into string, is it wrong approach?
$var1 = strval($arr1);

// set file to write
$file = 'student/dump.txt'; 
// open file 
$fh = fopen($file, 'w') or die('Could not open file!'); 
// write that variable into file 
fwrite($fh, "$var1\n") or die('Could not write to file'); 
// close file 
fclose($fh); 


?>

After log in in form1 I get two values of $name and $pass in write1.php but no values being added to the file mentioned in the path.

I'm trying to make it so i can show the friends i added, or users that added a friend


<table border=2 width="250" height="125"><tr>
<?php
$userfinal = get_username($_SESSION['user_id']);
$Members = mysql_query("SELECT * FROM friends WHERE username='$userfinal' AND friendname");
$numRowsMembers = mysql_num_rows($Members);

for($count = 1; $count <= $numRowsMembers; $count++)
{
    $name = mysql_fetch_array($Members);


?>
<td width="150" height="125">
<a href="view_profile.php?username=<? echo $name['friendname']?>"><img src="<? echo $name['main_P']?>" width="100" height="100"/>
<? echo $name['friendname']?></a>

<?
if (isset($name['date']) && (time() - $name['date'] > 300)) {

echo 'offline =[';
} else {

echo "<font color=green>[Online Now!]</font>";
}
$name['date'] = time(); // update last activity time stamp
?>

</td>




<? } ?>
</tr></table>



database


id  friendname  username
12  kristybellexo  zhshero
13  demo  zhshero
14  zhshero  zhshero

So I ran into the most bizarre problem ever on my live server. For some odd reason something, somewhere is adding an extra character after every " mark I have. Now I am using zend framework but this can not be an issue involving them since everything works perfectly on my localhost. I am using 1and1 to host my application but for the love of me I can not narrow this down any more.

Ex of my problem, I type this into my text box: "This is a sentence" and it proceeds to saving this: \"This is a sentence\" 

Something is happening right after I submit my form because if I add the code directly in my database, it displays everything fine. Has any one ever ran into this problem before?

The script below used to work fine but the HTTP_REFERER was unreliable so i added a re-direct if the HTTP_REFERER was unavailable and now nothing is being added to the MySQL BD, the script runs ok ie it sends the user back to where they come from, any ideas what could be wrong? 



<?php
require("../include/mysqldb.php");
$uinwish = $_GET['uinwish'];
$wishrefer = $_SERVER['HTTP_REFERER'];
$wishdate  = mktime(0, 0, 0, date("m"), date("d")+3, date("Y"));
$rand_wish_cookie = $_COOKIE["wishtracking"];

$con = mysql_connect("$dbhost","$dbuser","$dbpass");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("$dbame", $con);

//DB Stuff start code below

//check if the uin and cookie have already been stored together.
$sql = "select * from Wish_list_guest where usercookie='$rand_wish_cookie' and uinwish='$uinwish'";
$result = mysql_query($sql);


$row = mysql_fetch_row($result);
if (mysql_num_rows($result)!= 1) {

$issetvar = "1";

if (!isset ($wishrefer)){

$host  = $_SERVER['HTTP_HOST'];
$extra = 'profile.php?uin=';
header("Location: http://$host/$extra$uinwish");
exit;
}

if (isset ($wishrefer)){

header("Location: $wishrefer");
exit;
}
}

if ($issetvar = 1) {

mysql_query("INSERT INTO Wish_list_guest (usercookie, date_delete, uinwish, referwish)
VALUES ('$rand_wish_cookie', '$wishdate', '$uinwish', '$wishrefer')");

mysql_close($con);


if (!isset ($wishrefer)){

$host  = $_SERVER['HTTP_HOST'];
$extra = 'profile.php?uin=';
header("Location: http://$host/$extra$uinwish");
exit;
}

if (isset ($wishrefer)){

header("Location: $wishrefer");
exit;
}
}


?>

I have a form that has this:

Code: [Select]
<input type="text" name="notes_date" size="10" value="<?php echo date("m/d/Y");?>" />
I enter into the database after processing the variable like this:
Code: [Select]
$notes_date=date ("Y-m-d H:i:s", strtotime($_POST['notes_date']));
However, it gets stored at 2012-03-15 00:00:00

How do I fix this so that the current time gets stored instead of 00:00:00?