PHP - Creating/using A Cookie To Remember User Preference

Im trying to make my form remember the last input made by user, so I wrote the following and I get a syntax error on the input line. The error is:

Parse error: parse error, expecting `T_STRING' or `T_VARIABLE' or `T_NUM_STRING' in C:\wamp\www\ezsynonym\index.php on line 90

Code: [Select]

                <form id="searchform" method="post" action="index.php">
                <input id="input" name="synonymsearch" type="text" value="<?php echo $_POST['synonymsearch']; ?>" maxlength="400px" />
                </form>

TIA

What I'm trying to accomplish is your average session login w/ a cookie-based "remember me" feature.

I can log in fine, I can set cookies, I can access those cookies, and I can use that data to log in just as if the user had logged in manually.

The problem is logging out. But the bigger problem is figuring out why.

You see, it works perfect. It logs in and it log out, so long as I am outputting data to the page. I was outputting a session variable and the cookies I set to make sure they were all working right; and they were. But then as soon as I disable those echoes, all of a sudden it won't log out anymore.

So then I turn them on to see what the data says and BAM, I'm logged out. I log back in fine, I log back out fine, so I turn em off again.

I log in fine. I can't log out. I try multiple times. I close my browser and open a new one. Still logged in. I try a few more times, still logged in. I turn the output back on, load the page again and I'm logged out.

So... WTF? (my code to follow)

Hi there, im hoping someone can help me with this. What i’m trying to do is prevent users from voting twice with cookies, ive tried to set several myself but none of them have worked. Any help would be amazing. Thanks.

EDIT: unsure why its formatted this way.  how to fix? 

 

<?php include 'functions.php'; // Connect to MySQL $pdo = pdo_connect_mysql(); // If the GET request "id" exists (poll id)... if (isset($_GET['id'])) { // MySQL query that selects the poll records by the GET request "id" $stmt = $pdo->prepare('SELECT * FROM polls WHERE id = ?'); $stmt->execute([$_GET['id']]); // Fetch the record $poll = $stmt->fetch(PDO::FETCH_ASSOC); // Check if the poll record exists with the id specified if ($poll) { // MySQL query that selects all the poll answers $stmt = $pdo->prepare('SELECT * FROM poll_answers WHERE poll_id = ?'); $stmt->execute([$_GET['id']]); // Fetch all the poll anwsers $poll_answers = $stmt->fetchAll(PDO::FETCH_ASSOC); // If the user clicked the "Vote" button... if (isset($_POST['poll_answer'])) { // Update and increase the vote for the answer the user voted for $stmt = $pdo->prepare('UPDATE poll_answers SET votes = votes +1 WHERE id = ?'); $stmt->execute([$_POST['poll_answer']]); // Redirect user to the result page header ('Location: result.php?id=' . $_GET['id']); exit; } } else { die ('Poll with that ID does not exist.'); } } else { die ('No poll ID specified.'); } ?> <?=template_header('Poll Vote')?> <div class="content poll-vote"> <h2><?=$poll['title']?></h2> <p><?=$poll['des']?></p> <form action="vote.php?id=<?=$_GET['id']?>" onSubmit="disable()" method="post"> <?php for ($i = 0; $i < count($poll_answers); $i++): ?> <label> <input type="radio" name="poll_answer" value="<?=$poll_answers[$i]['id']?>"<?=$i == 0 ? ' checked' : ''?>> <?=$poll_answers[$i]['title']?> </label> <?php endfor; ?> <div> <input type="submit" name="submit" value="Vote"> <a href="result.php?id=<?=$poll['id']?>">View Result</a> </div> </form> </div> <?=template_footer()?>

 

Edited July 1, 2020 by requinix
cleaning up post

I am trying to create a remember me checkbox for the login of my CMS.

What I am trying to achieve is that whenever a user logs in with the checkbox ticked and auth code is created and stored in a cookie and also the database under their user info row. When I user closes their browser without logging out and then returns to the CMS a few days later etc I am trying to run some code straight away if they get redirected to the login page. The code will check to see if the auth code cookie exists, if it does it gets checked against the database records, if a match is found then log that user in. If it doesn't do nothing until the user uses the login form.

I have written what I though was the perfect solution but it never seems to automatically log the user in, even if they haven't logged out. Some direction in this matter would be very helpful, thank you.

I would also like to know if there is a way of using php to stop my session getting cleared by the trash collector after some inactivity?



Login.php   (I am using PHpass for the password hashing)

Code: [Select]
<?php include ('functions.php'); ?>
<?php get_header('login'); ?>
    <div id="login-result">
    <?php
$redirect = htmlspecialchars(mysql_real_escape_string(addslashes($_GET['redirect'])));

if(isset($_COOKIE['authcode'])){

connect();

$authcookie  = htmlspecialchars(mysql_real_escape_string(addslashes($_COOKIE['authcode'])));

$sql         = "SELECT uid, username, firstname, lastname, role FROM usersT WHERE authcode='$authcode'";
$result      = mysql_query($sql);
$count       = mysql_num_rows($result);
$row         = mysql_fetch_array($result);

$uid         = $row['uid'];
$username    = $row['username'];
$fname       = $row['firstname'];
$lname       = $row['lastname'];
$role        = $row['role'];

   
if($count==1){
$sql2    = "UPDATE usersT SET status = '1' WHERE uid = '$uid'";
$result2 = mysql_query($sql2);

if($result2){

session_register("uid");
session_register("uname");
session_register("ulevel");
$_SESSION["uid"]       = $uid;
$_SESSION["username"]  = $username;
$_SESSION["uname"]     = $fname;
$_SESSION["ufullname"] = $fname . " " .$lname;
$_SESSION["urole"]     = $role;

if(!empty($redirect)) {
header( 'Location: '. $redirect ) ;
exit(); 
}
else {
header( 'Location: index.php' ) ;
exit();
}

}

}

}
?>
    <?php
if (isset($_POST['admin_login'])){

if(isset($_POST["username"]) && isset($_POST["password"])){

connect();

$username_p        = htmlspecialchars(mysql_real_escape_string(addslashes($_POST["username"])));
$password_p        = htmlspecialchars(mysql_real_escape_string(addslashes($_POST["password"])));

if (strlen($password_1) < 73) {

//Password hashing

$sql3          = "SELECT password FROM usersT WHERE username='$username_p'";
$result3       = mysql_query($sql3);
$row3          = mysql_fetch_array($result3);

require("inc/password-hash.php");
$hasher        = new PasswordHash(8, false);
$stored_hash   = "*";
$stored_hash   = $row3['password'];
$check         = $hasher->CheckPassword($password_p, $stored_hash);

if($check){

$sql4      = "SELECT uid, username, firstname, lastname, role FROM usersT WHERE username='$username_p'";
$result4   = mysql_query($sql4);
$row4      = mysql_fetch_array($result4);

$uid       = $row4['uid'];
$username  = $row4['username'];
$fname     = $row4['firstname'];
$lname     = $row4['lastname'];
$role      = $row4['role'];

$authcode  = random(30);
$sql5      = "UPDATE usersT SET status = '1', authcode = '$authcode' WHERE uid = '$uid'";
$result5   = mysql_query($sql5);

if($result5){

session_register("uid");
session_register("uname");
session_register("ulevel");
$_SESSION["uid"]        = $uid;
$_SESSION["username"]   = $username;
$_SESSION["uname"]      = $fname;
$_SESSION["ufullname"]  = $fname . " " .$lname;
$_SESSION["urole"]      = $role;

if(isset($_POST['remember'])) { 
setcookie("authcode", $authcode, time() + 86400 * 365 * 2); 
} // Check if the user wants to be remembered.

if(!empty($redirect)) {
header( 'Location: '. $redirect ) ;
exit(); 
} // Check if the user has been redirected from another page.
else {
header( 'Location: index.php' ) ;
exit();
}

} // Check if the users status has been updated.
else {
echo "<div class=\"error rounded5 shadow\">User status couldn't be updated!</div>";
}

} // Check the entered password against the stored hash.
else {
echo "<div class=\"error rounded5 shadow\">Invalid username or password!</div>";
}

} // Checked the character length of the password.
else {
echo "<div class=\"error rounded5 shadow\">Password must be 72 characters or less!</div>";
}

} // Check both fields have been filled in.

} // Check the user has submitted the data.

?>
    </div><!-- / login-results -->
    <div id="login" class="rounded5 shadow">
<form name="loginform" id="loginform" action="<?php $_SERVER['PHP_SELF']; ?>" method="post">
            <p>
                <label for="username">Username<br>
                <input type="text" name="username" id="username" class="rounded5" value="<?php echo $username_p; ?>" size="20" tabindex="10" /></label>
            </p>
            <p>
                <label for="password">Password<br>
                <input type="password" name="password" id="password" class="rounded5" value="<?php echo $password_p; ?>" size="20" tabindex="20" maxlength="72" /></label>
            </p>
            <p class="submit">
            Keep me logged in <input type="checkbox" name="remember" id="remember" <?php if(isset($_COOKIE['remembered'])){ echo "selected=\"selected\""; } ?>  /><br /><br /><a href="" class="left">Lost your password?</a>
                <input type="submit" name="admin_login" id="admin_login" class="btn rounded10 right" value="Log In" tabindex="100" />
            </p>
            <div class="cleaner"></div><!-- / cleaner -->
        </form>
    </div><!-- / login-->
<?php get_footer('login'); ?>




Logout.php

Code: [Select]
<?php
session_start();
include ('functions.php');
connect();
$uid    = mysql_real_escape_string($_SESSION['uid']);
$sql    = "UPDATE usersT SET status = '0', authcode = '' WHERE uid = '$uid'";
$result = mysql_query($sql);

if($result) {
session_unset(); 
session_destroy(); 
setcookie("authcode", $authcode, time() - 86400 * 365 * 2); 
header("location:" . get_option('home') . "/login.php");
exit();
}
else {
exit();
}
?>


Redirect Code

Code: [Select]
<?php 
session_start();
$url   = (!empty($_SERVER['HTTPS'])) ? "https://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'] : "http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
$uid   = $_SESSION['uid'];
if (!isset($uid)) {
header('location:login.php?redirect='.$url);
exit();
die();
}
?>

Hi everyone, I'm new here and really in need of some help with some script I've been trying to get right.

Basically I'm trying to write a function that will interface with Gravity Forms and Wordpress but this is NOT a GForms or Wordpress issue it's pure PHP honest!

The function will pull the post code a user has entered on the first page of a Gravity Form, and then take the spaces out of it and make sure it's in upper case.  This much I've got working.

Now I need it to add a hyphen and a three digit number starting at 001, so it'll look like AB12CD-001.  Now it will need to check if this is username has already been used by calling the Wordpress function username_exists (http://codex.wordpress.org/Function_Reference/username_exists) and if it does increase the suffix number by one and recheck until it finds the next available number.

This could result in the user living in the post code AB1 2CD ending up with the username AB12CD-021 if there are 20 others in the local area obviously.

Now this will then post back to the Gravity Forms registration form on the next page and fill in the username for the user, this I can also do.

So hopefully you can see it's the PHP bit I'm stuck on and I would really appreciate any help.

Cheers guys 

Hi all,   I'm working on a hobby project to improve my skills and learn PHP and MySQL. Don't know if this is the right place to ask this question, so please let me know if it isn't.   I already created a single user site. It has a simple PHP login and after login information (like personal information and messages) is pulled from the database and shown. The personal information is stored in a table called settings and the messages are stored in a table called messages.   I like to go to the next level and create a multi-user login, but I have no idea were to start. I think I have to switch to another login type were both PHP and MySQL are used. How has the database be designed? Can I use the same structure as in the single user site I created? How can the right (belonging to the user) information be retrieved from the database?   Thanks in advance !    

I've started a to-do app, and everything works fine. Every user has his own unique to-do items that he can add. The only issue is that when I log-in with a user, ALL the items of all users are displayed when I'm redirect to my main page. I want to make it as so every user has his own page where only the to-do items he has created are visible, not every item from every user. I'm a total beginner with PHP so I'm sorry if this is a stupid question.

This is my todomain.php code

<?php
require 'db_conn.php';
require 'config.php';
session_start(); 
   
// If the session variable is empty, this  
// means the user is yet to login 
// User will be sent to 'login.php' page 
// to allow the user to login 
if (!isset($_SESSION['id'])) { 
    $_SESSION['msg'] = "You have to log in first"; 
    header('location: login.php'); 
} 
   
// Logout button will destroy the session, and 
// will unset the session variables 
// User will be headed to 'login.php' 
// after loggin out 
if (isset($_GET['logout'])) { 
    session_destroy(); 
    unset($_SESSION['id']); 
    header("location: login.php"); 
} 


?>

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset= "UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="IE=edge"> 
<link rel="stylesheet" href="css/bootstrap-grid.min.css">
<link rel="stylesheet" href="css/bootstrap.min.css">
<link rel="stylesheet" href="style.css">
<a href="index.php?logout='1'" style="color: black;"> 
                    Click here to Logout 
                </a> 
 <?php if (isset($_SESSION['success'])) : ?> 
            <div class="error success" > 
                <h3> 
                    <?php
                        echo $_SESSION['success'];  
                        unset($_SESSION['success']); 
                        echo $_SESSION["username"]
                    ?> 
                </h3> 
            </div> 
        <?php endif ?> 

<title>TODO App</title>
<script src="https://kit.fontawesome.com/d72928d9b9.js" crossorigin="anonymous"></script>
</head>
<body>
    <div class="container m-5 p-2 rounded mx-auto bg-light shadow">
    <!-- App title section -->
    <div class="row m-1 p-4">
        <div class="col">
            <div class="p-1 h1 text-primary text-center mx-auto display-inline-block">
                <i class="fa fa-check bg-primary text-white rounded p-2"></i>
                <u>My Todo-s</u>
            </div>
        </div>
    </div>
    <!-- Create todo section -->
  <form action="app/add.php" method="POST" autocomplete="off">
    <div class="row m-1 p-3">
        <div class="col col-11 mx-auto">
            
            <div class="row bg-white rounded shadow-sm p-2 add-todo-wrapper align-items-center justify-content-center">
                
                <div class="col">
                    <input class="form-control form-control-lg border-0 add-todo-input bg-transparent rounded" type="text" name="title" placeholder="Add new ..">
                </div>
                <div class="col-auto m-0 px-2 d-flex align-items-center">
                    <label class="text-secondary my-2 p-0 px-1 view-opt-label due-date-label d-none">Due date not set</label>
                    <i class="fa fa-calendar my-2 px-1 text-primary btn due-date-button" data-toggle="tooltip" data-placement="bottom" title="Set a Due date"></i>
                    <i class="fa fa-calendar-times-o my-2 px-1 text-danger btn clear-due-date-button d-none" data-toggle="tooltip" data-placement="bottom" title="Clear Due date"></i>
                </div>
                
                <div class="col-auto px-0 mx-0 mr-2">
                    
                    <button type="submit" class="btn btn-primary">Add</button>
                    
                    
                </div>
             
            </div>

            
        </div>
    </div>
    </form>

     
          <?php
            $todos=$conn->query("SELECT * FROM  todos ORDER BY id ASC");
          ?>

 
  <div class="row mx-1 px-5 pb-3 w-80">
        <div class="col mx-auto">

           <?php
           while($todo=$todos->fetch(PDO::FETCH_ASSOC)){ ?>
            <!-- Todo Item 1 -->

            
            <div class="row px-3 align-items-center todo-item rounded">

                <?php if($todo['checked']){ ?>
                
                <input type="checkbox" class="check-box" data-todo-id="<?php echo $todo['id'];?>" checked />
            <h2 class="checked"><?php echo $todo['title'] ?> </h2>
            <div class="col-auto m-1 p-0 todo-actions">
                    <div class="row d-flex align-items-center justify-content-end">
              
            </div>
          </div>
        
             

                      
            <?php } else{ ?>
                <input type="checkbox" class="check-box" data-todo-id="<?php echo $todo['id'];?>"/>
                 <h2><?php echo $todo['title'] ?></h2>
                   
                          

            <?php } ?>

                <div class="col-auto m-1 p-0 d-flex align-items-center">


                    <h2 class="m-0 p-0">
                        <i class="fa fa-square-o text-primary btn m-0 p-0 d-none" data-toggle="tooltip" data-placement="bottom" title="Mark as complete"></i>
                        
                    </h2>
                </div>
               
                
             
                <div class="col-auto m-1 p-0 todo-actions">
                    <div class="row d-flex align-items-center justify-content-end">

                        <h5 class="m-0 p-0 px-2">
                            <i class="fa fa-pencil text-info btn m-0 p-0" data-toggle="tooltip" data-placement="bottom" title="Edit todo"></i>
                        </h5>
                        <h5 class="m-0 p-0 px-2">
                          
                             
                        <i class="remove-to-do fa fa-trash-o text-danger btn m-0 p-0" data-toggle="tooltip" data-placement="bottom" title="Delete todo" id="<?php echo $todo['id']; ?>"></i>
                      </h5> 
                    </div>
                    <div class="row todo-created-info">
                        <div class="col-auto d-flex align-items-center pr-2">
                            <i class="fa fa-info-circle my-2 px-2 text-black-50 btn" data-toggle="tooltip" data-placement="bottom" title="" data-original-title="Created date"></i>
                            <label class="date-label my-2 text-black-50"><?php echo $todo['date_time'] ?></label>
                        </div>
                    </div>
                </div>
            </div>
        
        <?php } ?>

    

</div>


 <script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js" integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49" crossorigin="anonymous"></script>
    <script src="js/bootstrap.bundle.min.js"></script>
    <script src="js/myjs.js" ></script>
    <script src="js/jquery-3.3.1.min.js"></script>

    <script>
        $(document).ready(function(){

          $(".remove-to-do").click(function(e){
                const id = $(this).attr('id');
                 $.post('app/remove.php', 
                      {
                          id: id
                      },
                      (data) => {
                         if(data){
                            $(this).parent().parent().parent().parent().hide(300);
                         }
                      }

                );
                
               
            });
          


            $(".check-box").click(function(e){
                const id = $(this).attr('data-todo-id');
                
                $.post('app/checking.php', 
                      {
                          id: id
                      },
                      (data) => {
                         if(data!='error'){
                            const h2= $(this).next();
                            if(data === '1'){
                                h2.removeClass('checked');
                            }else{
                                h2.addclass('checked');
                            }
                         }
                      }

                );
            });
        });
    </script>


</body>
</html>

 

Please Help me on how to create a website using with code n a little bit explanation using PHP n phpmyadmin.
The mainthing that i need to do is using php create a simple site that logs on by connecting it to the phpmyadmin database such that i need to store the user details like name,mobile number,age,loaction,lattitude n longitude in database.Also i need to retrieve the database whenever required!!!
Can Any1 please help how to do this...It means a lot to me n i'm a new User n Beginner to learn these things!!!   

Thank u for reading this 

hi all,

does anyone know the name of the following
its a way to make a huge string than can have variables in it.

look a bit like this but couldnt remember the right syntax, nor the name so was kinda hard to look on google.

ABC>>>
   some stuff inside
ABC;

Hey guys not sure what this is called but does anyone have more information on it. Ok when you visit a part of a site or a profile or what ever??  :S:S and you redirect them to login how can u then send them back to where they was when they have logged in?

hope someone can help.

I want to save live data into file. My script fetch the data (one by one) and save it into file by amend method. The live data is not regular and every time it must be checked if the value has been updated or it is still the last value. One way to do so is to read the last line of the file and compare it with the fetched value. But in this case, I need to read the file for every check.

Is there a way to remember the last value and compare it with the coming value? to write only new value into the file.

Hi,

I'm creating a remember me feature for my site which obviously sets a cookie and when the visitors loads the site again,he would already be logged in.

This is a part of the code which is related :
Code: [Select]
$login_email = request_var('login_email', '');
$login_password = request_var('login_password', '');
$login_remember = (isset($_POST['remember']) && $_POST['remember'] == 1) ? true: false;

setcookie('login_email', $_POST['login_email'], time()+60*60*24*365, '/','localhost',false);
setcookie('login_password', md5($_POST['login_password']), time()+60*60*24*365, '/','localhost',false);
HTML:
Code: [Select]
<strong class="normal"><input type="checkbox" name="remember" value="1">Remember</strong>

Time to ask a stupid question. I have a remember me cookie being set for my login page but I'm wondering what I need to do so that the next time the user comes back to the login page it already has the checkbox checked and the username in the username field which is the cookie.

Hi guys,

I wonder if any if you could help me: I have created a login page with "remember me" function... The page will redirect either to Admin Page or User Page depends their 'level'.

But when I logged in as Admin and checked the box "remember me" and close all the browser to see IF the "remember me" work.

When I open a new browser - and go to the index page - it is okay, I can view the page.... but it redirect me to the USER page NOT Admin page.

Does anyone know why this happens?

Okay, this is a head scratcher for me...

About 10-15 years ago, there was this framework that seemed to be pretty popular in the LAMP work for quickly building websites.  (I think it was written in PHP.)

The thing I recall about it was that it you could create your own markup tags to markup up fields using curly brackets { }.

I wish I could be more specific but this is all that is coming to mind.

Any clues of what I might be thinking about?