PHP - Ajax Control Server Side Error Occure.

I have a web portal which is scripted using client side scripting language i.e HTML. I want to create a login page in .php and want the other pages to be in .hmtl.
Can i do so?
I want to do this because i want the login password to be stored in a database. Also I want the password to get encrypted (by either MD5 javascript or OpenSSL ) when user enters it inside the login form.

I cannot create the entire portal in php because my portal makes use of C code. And php doesn't have an interface with C language.

Can a user get directed to a .html page after a secure login from login.php page ?
My main aim is to secure the access to my web portal using a password.

I tried to authenticate the login using javascript where the password was stored in an array. But i feel any one having moderate knowledge can easily break that password.

Any help would be greatly appreciated!!

is it true that all the server side code runs before the client side code when accessing a webpage?  if that is true, what about PHP code that is embedded inside HTML tags?  wouldn't that result in an error a lot of times?

I wish to create validation rules once which are used both on the client and on the server.   For instance, I will start off with the following PHP object:

stdClass Object
(
    [rules] => stdClass Object
        (
            [email] => stdClass Object
                (
                    [required] => 1
                    [email] => 1
                    [remote] => stdClass Object
                        (
                            [url] => check-email.php
                            [type] => post
                            [data] => stdClass Object
                                (
                                    [username] => function() {return $( '#username' ).val();}
                                )
                        )
                )
        )

    [messages] => stdClass Object
        (
            [email] => stdClass Object
                (
                    [required] => an email is required
                )
        )
)

When the edit page is downloaded to the client, I will include this object in some format suitable to the client.   The client will then use the jQuery Validation plugin (http://jqueryvalidation.org/) along with the validation object, and client side validate the page.   When the form passes client side validation and is uploaded, PHP will use the same validation object to serverside validate the form (I have this part working as desired).   My question is how should I pass this data to the client?  Originally, I would just use PHP to write some JavaScript.

exit('var myObj='.json_encode($myObj));

Note that when I json_encode the object, the value of $myObj->rules->email->remote->data->username is a string with quotes around it, however, I can easily use PHP to strip these tags before sending it to the client.   As Jacques1 pointed out in http://forums.phpfre...ascript-client/, I should never ever use PHP to generate JavaScript, and should use AJAX to download the JSON directly.  I tried doing the later, but found that a callback function could not be included in the JSON.     Please advise on the best way to accomplish this.   Thank you

This part of the question is based off of php so I'll put it here of course.

The idea behind this is jquery/ajax is going to get passed an id (eventid) from a dropdown select box inside a form and it's going to run a query to find all the events in my database with that same id. After running the query it's going to list them out and find the highest number of another field (label) and its going to add one to its value and then what I would like for it to is send it back to the form in the jquery/ajax and and place that label inside of the existing input text field in the form.

So I'm asking is if my code is presented and is doing what I"m attempting it to do on the php side and if so if I can take out the print tag of the input text field.


$eventid = $_GET['eventid'];
$result = mysqli_query("SELECT * FROM `events` WHERE `event_id` = '$eventid'");
$list = mysqli_num_rows($result);
$label = $list + 1;
print '<input type="text" name="label" class="text" readonly="readonly" value="' . $list . '" />';

As the title say, I can not for the life of me get the "$bank" content to display, no matter HOW much I try...
Does anyone see any errors. I am sooooooo wiped out at this!


main page

<?
$body = '

<script type="text/javascript" src="change-content.js"></script>

<div id="addSold">
<form action="'.$_SERVER['REQUEST_URI'].'" method="post" name="form" autocomplete="off">

<fieldset id="Vehicle">
<legend>Vehicle</legend>
<ul>
<li><label for="Year">Year</label>'.$Year.'</li>
<li><label for="Make">Make</label>'.$Make.'</li>
<li><label for="Model">Model</label>'.$Model.'</li>
<li><label for="Trim">Trim</label><input type="text" name="Trim" id="Trim" size="10" value="'.$trim.'" disabled="disabled"></li>
</ul>
<ul>
<li><label for="Mileage">Mileage</label><input type="text" name="Mileage" id="Mileage" size="5" maxlength="6" value="'.$row['mileage'].'"></li>
<li><label for="VIN">VIN</label><input type="text" name="VIN" id="VIN" size="23" maxlength="17" value="'.$row['vin'].'" disabled="disabled"></li>
<li><label for="Color">Color</label>'.$Exterior.'</li>
</ul>
</fieldset>

<fieldset id="Deal">
<legend>Deal</legend>
<ul>
<li>
<label for="soldDte1">Date</label>
<input type="text" name="soldDte1" id="soldDte1" size="1" maxlength="2" onkeyup="return autoTab(this, 2, event)" value="08"> / 
<input type="text" name="soldDte2" id="soldDte2" size="1" maxlength="2" onkeyup="return autoTab(this, 2, event)" value="30"> / 
<input type="text" name="soldDte3" id="soldDte3" size="1" maxlength="2" value="'.$year.'">
<a href="#"><img id="date_'.$row[stock].'" src="images/Icons/dateOff.png" onfocus="this.select();lcs(this)" onmouseover="MM_swapImage(\'date_'.$row[stock].'\',\'\',\'images/Icons/dateOn.png\',1)" onmouseout="MM_swapImgRestore()" alt="Choose Date"></a>
</li>
<li>
<label for="salesman">Salesman</label> 
<select name="salesman" id="salesman">
<option></option>
'.$salesmen.'
</select>
</li>
</ul>
<ul>
<li>
<label for="dealType">Deal Type</label>
<select name="dealType" class="select-content" onchange="getFile(this.value)">
<option></option>
<option value="AL">Auto Loan</option>
<option value="Cash">Cash</option>
<option value="CAC">Credit Acceptance</option>
<option value="IH">In House</option>
<option value="SAL">Sensible Auto</option>
</select>
</li>
<li>
<label for="tradeDrop">Trade</label> 
<select name="tradein" id="tradeDrop" onchange="show_hide_trade(this.value);">
<option value="No">No</option>
<option value="Yes">Yes</option>
</select>
</li>
</ul>
</fieldset>

<div id="Bank" class="view">'.$bank.'</div>
</form>
</div>
';
?>


get_Bank.php

<?
if ($_GET['dealType'] == "AL") {
$bank = '
<fieldset id="AL">
<legend>Auto Loan Figures</legend>
<ul>
<li><label for="price">Price</label><input type="text" name="price" id="price" class="price" size="7" onchange="currency(this)"></li>
<li><label for="down">Down</label><input type="text" name="down" id="down" class="price" size="6" onchange="currency(this)"></li>
<li><label for="tax">Tax</label><input type="text" name="tax" id="tax" class="price" size="6" onchange="currency(this)"></li>
<li><label for="reg">Plates</label><input type="text" name="reg" id="reg" class="price" size="4" onchange="currency(this)"></li>
<li><label for="gap">Gap</label><input type="text" name="gap" id="gap" class="price" size="4" onchange="currency(this)"></li>
</ul>
<ul>
<li>
<label for="pymtNum">--------------- Payment ---------------</label>
<input type="text" name="pymtNum" id="pymtNum" size="3" maxlength="3" onkeyup="return autoTab(this, 3, event)"> @ 
<input type="text" name="pymtAmnt" id="pymtAmnt" class="price" size="5" onchange="currency(this)"> per 
<select name="pymtType">
<option value="Weekly" selected="selected">Week</option>
<option value="Monthly">Month</option>
</select>
</li>
<li><label for="APR">APR</label><input type="text" name="APR" id="APR" class="rate" size="6" value="19.00"></li>
</ul>
</fieldset>
';
} elseif ($_GET['dealType'] == "CAC") {
$bank = '
Credit Acceptance stuff goes here
';
} else {
$bank = 'You must choose a bank before continuing';
}

?>


change-content.js
Code: [Select]
window.onload = init;

// finds all <select> tags will class="select-content" and activates function
function init() {
var sel = document.getElementsByTagName("select");
for (var i=0; i<sel.length; i++){
if (sel[i].className == "select-content") {
sel[i].onchange = getFile;
}
sel[i].selectedIndex = 0;
}
}

function getFile (url) {
var url = "AJAX/get_Bank.php?dealType="+ this.value;
if (window.XMLHttpRequest) {xmlhttp=new XMLHttpRequest();}
else {xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");}

xmlhttp.open("GET",url,false);
xmlhttp.send();

// a loop that looks through all <div>s on the page
// and then replaces the id with the value and gets that file
var divs = document.getElementsByTagName("div");
for (var i=0; i<divs.length; i++) {
if(divs[i].id == "bank") {
divs[i].id = this.value;
divs[i].innerHTML=xmlhttp.responseText;
}
}
}