PHP - Pass Randomized Array To Other Users

I have a simple ajax that passes data to a php script using jquery serialize. This is working good but where I am getting stuck is trying to pass json array into mysql. The json is outputting the correct data, but when I insert into db, it just says Array in the field. How can I convert(if that is the right term) json array to use in mysql. In the code I have posted, $box is an array from jquery which I normally use foreach to loop through array. What I need to do is convert $box after is has been encoded. Thanks

Code: [Select]
$box = $_POST['BRVbrtrv_boxnumber'];

$list = array("activity" => $activity, "mobile" => $mobile, "company" =>
$company, "authorised" => $authorised, "service" => $service, "department" =>
$department, "address" => $address, "boxcount" => $boxcount, "box" => $box);

$c = json_encode($list);

echo $c;

I am working on search result page where all the thumbnail will display and its working fine.

but what my boss wants is when user click on any thumbnail a new window will open with the product image and next and prev button

so that user will navigate search result through new window

so how i can pass all the ID to new window so that this funtionality can be done


thanks in advance..

Hello All,


I have used a function to collect a users information from the database. This is then returned as an array.


Using this returned array, I wish to pass it into another function.


Here is the code:


The array is created in the collect() function and needs to be passed to the ipn_data function



Code: [Select]
/*


This script is responsible for handling all subscription payments. It will collect all information, insert data into the relevant databases and then forward the user to PayPal with the relevant transaction ID. On return, the IPN listener will
deal with all account changes whilst the user is held in a queue.


*/


/* ------------------------------------- */
/* DATABASE CONFIGURATION               */
/* ------------------------------------- */


include_once "../config/config.php";


/* ------------------------------------- */
/* COLLECT SESSION INFORMATION            */
/* ------------------------------------- */


session_start();
$id = "100000002"; // ID of logged in user
$next_year = date("Y-m-d", strtotime("+365 day", time())); //Date next year


/* ------------------------------------- */
/* SET VARIABLES                     */
/* ------------------------------------- */


$reason = $_GET["reason"];


/* ----------------------------------------- */
/* COLLECT USERS INFORMATION FROM DATABASE    */
/* ----------------------------------------- */


function collect($id) {
   
   //Select the subscriber from the database
   $query = "SELECT * FROM subscribers WHERE id='$id'";
   $query = mysql_query($query);
      //Collect the subscribers first name, last name and email address
      while($row=mysql_fetch_array($query)) {
         $fname = $row["fname"];
         $lname = $row["lname"];
         $email = $row["email"];
      }
   
   //Collate subscribers information into an array
   return array('fname' => "$fname", 'lname' => "$lname", 'email' => "$email");
   
}


/* ----------------------------------------- */
/* CREATE TIMESTAMP OF CURRENT TIME          */
/* ----------------------------------------- */


function mktimestamp() {
   
   //Set date variables
   $day = date("d");
   $month = date("m");
   $year = date("Y");
   
   //Make timestamp
   return mktime(0, 0, 0, $month, $day, $year);


}


/* ----------------------------------------- */
/* INSERT USERS DATA INTO ipn_data           */
/* ----------------------------------------- */


//Create random identifier
$ident = rand("1", "10000");


function ipn_data($info, $reason, $timestamp) {
   
   //WANT THE ARRAY TO BE PASSED INTO HERE!!
       //I TRIED PASSING THE $info VARIABLE INTO THE FUNCTION, WHICH IS WHAT I ASSIGNED TO THE COLLECT FUNCTION LATER IN THE SCRIPT
   
}


/* ----------------------------------------- */
/* Get ID of inserted ipn_data row           */
/* ----------------------------------------- */


function get_id($ident, $timestamp) {


   //Setup Query to find ID
   $query = "SELECT * FROM subscribers WHERE timestamp='$timestamp' AND identifier='$ident'";
   
   //Run Query
   $query = mysql_query($query) or mysql_error();
   
   //Using query find ID
   while($row=mysql_fetch_array($query)) {
      $ltj_txn_id = $row["id"];   
   }
   
   return $ltj_txn_id or mysql_error();
   
}



/* ------------------------------------- */
/* SWITCH REASON                     */
/* ------------------------------------- */


switch($reason) {


   case "subscribe":
   break;
   
   case "renew":
   
      //Collect array from user information array function
      $info = collect($id);
     
      //Get timestamp from our mktimestamp function
      $timestamp = mktimestamp();
     
      //Insert users data into ipn_data table
      $run_ipn = ipn_data($reason, $timestamp, $ident);
     
      //Collect ID of record just inserted
      $get_id = get_id($ident, $timestamp);
     
      echo "$run_ipn";
     
   
   break;
   
   case "upgrade":
   break;
   
   default:
   break;


}

Any ideas?

Hi,  

/*

Output of the table will display the Suite based on the distinct date. The pass rate percentage calculate based on the Suite1 and app1 and the specific date.

For example at Apr 4 2011, I need to Sum the total passcount,failcount,errorcount of Bluetooth, GPSA, EMIReceiver($app1) of XA9 on Real MXE($suite1) , then calculate the passrate percentages.

But I fail to get the correct value of the passcount, failcount, errorcount value.Helps!


Output of the table


suite                          Date                       Percentages(pass rate)



XA9 on Real MXE            Apr 4 2011 9:47AM                 99.94%
 
XA9 on Real MXE            Apr 5 2011 10:48AM                99.94%

XA9 on Real MXE            Apr 6 2011 9:49AM                 99.95%

XA9.5 on Real EXA_B40      Apr 4 2011 7:06AM                 99.94%

XA9.5 on Real EXA_B40      Apr 5 2011 7:14AM                 99.93%

XA9.5 on Real EXA_B40      Apr 6 2011 7:29AM                 99.93%


*/




$suite1 --> array value (XA9 on Real MXE, XA9.5 on Real EXA_B40)


$app1 --> array value (Bluetooth, GPSA, EMIReceiver)




if(is_array($suite_type1)){
         

    foreach($suite_type1 as $suite1)
    {   
   

      $sql222="Select Distinct a.StopDTTM from Suite a,Test b where a.SuiteID=b.SuiteID and b.SuiteID=a.SuiteID and a.StopDTTM>='$fromdate' and a.StopDTTM<='$to_date' and a.SuiteFilePath like '%$Program%' and a.SuiteFileName='$suite1'";
      $result222=mssql_query($sql222,$connection) or die("Failed Query of".$sql222);
   

                while($row222 = mssql_fetch_array($result222))               
      {
               
                  
              $datetotest = $row222[0];
                        $days_to_add = 1;
                        $tilldate = fnc_date_calc($datetotest,$days_to_add);

                  
         //Query the result based on the date
         $sql223="Select Distinct a.SuiteFileName, a.SuiteID,a.StopDTTM from Suite a,Test b where a.SuiteID=b.SuiteID and b.SuiteID=a.SuiteID and a.StopDTTM>='$row222[0]' and a.StopDTTM<='$tilldate' and a.SuiteFilePath like'%$Program%' and a.SuiteFileName='$suite1' order by a.StopDTTM";
         $result223=mssql_query($sql223,$connection) or die("Failed Query of".$sql223);
                     
             
         while($row223 = mssql_fetch_row($result223)){
             
                     
            foreach($app_type1 as $app1)
                                {
                          

                                       $sql3="Select Sum(b.passcount),Sum(b.failcount),Sum(b.errorcount) from Suite a,Test b where a.SuiteID=b.SuiteID and b.SuiteID=a.SuiteID and a.StopDTTM>='$row222[0]' and a.StopDTTM<='$tilldate' and a.SuiteFilePath like '%$program%' and a.SuiteFileName = '$suite1' and b.Product='$app1'";   
                   $result3=mssql_query($sql3,$connection) or die("Failed Query of ". $sql3);
                        $row3 = mssql_fetch_row($result3);
                        $total_passcount+=$row3[0];
                   $total_failcount+=$row3[1];
                   $total_errorcount+=$row3[2];
                     
                     
                 }
               
                   $overall_total=$total_passcount+$total_failcount+$total_errorcount;   
               
                      
               
                      echo "<tr>";
                      echo "<td><a href='detailsreport.php?suiteID=".$row223[1]."&suitetype=".$row223[0]."&fromdate=".$fromdate."&to_date=".$to_date."&date=".$row222[0]."&tilldate=".$tilldate."&SuiteFilePath=".$Fprogram."'>" . $row223[0] . "</a></td>";     //Suite File Name
                           echo "<td>" . $row223[2] . "</td>";
                     
                      //Pass percentage
                      if($total_passcount>0){
                           echo "<td bgcolor=00FF33>" . number_format((($total_passcount/$overall_total)*100),2)."%</td>";
                      }
                       else{
                           echo "<td bgcolor=00FF33>0%</td>";
                      }
               
                             }
         }
               
               
               
          
        }   

             echo "</table>";      
           
 }

In my view file, I instantiate User class and call two methods that have not been declared or initialized in the class:

$user = new Models\User();
$user->setFirstName('John');
$user->setLastName('Merlino');

echo $user->getFirstName() . " " . $user->getLastName();

However, I have two private members only available to instances:
   protected $first_name;
   protected $last_name;

Because I don't want to manually create privileged getters and setters for each of my private members, I use the call method:

   public function __call($name,$args){

      echo $name . "<br />";
      echo $args . "<br />";
      
   }   

Because my methods were not initialized, the interpreter calls the __call method as a last option resort, and passes the name of the method in local variable $name and if exists the arguments passed into the method in local variable $args. Ok so that makes sense. However, when I echo the values of the two variables, I see a blank array created:

setFirstName
Array
setLastName
Array
getFirstName
Array
getLastName
Array

See everytime I call it, there's an array being created. I don't see the purpose of this.


Also how often do you use __call() in your php applications, specifically when using MVC?

Thanks for response.

I am simply trying to insert a value generated from an array in a while loop, but it seems the value is not global and I can't pass it as I like. I did some research on this, but could not find an answer that solved my issue...

Here is my select box code which is working perfect:

<select name="city">
<?php
$sql = "SELECT id, city_name FROM cities ".
"ORDER BY city_name";
$results_set = (mysqli_query($cxn, $sql)) or die("Was not able to produce the result set!");
while($row = mysqli_fetch_array($results_set)) {
echo "<option value=$row[id]>$row[city_name]</option>";
}
?>
</select>

Are any variables defined in a while loop global to the while loop only?

Here is my SQL which you can see my $row[id] being passed thru field city_id... The value is being generated as supposed to based on value like: value="1", value="2" etc.. for the select options for each city name. So the values are there... But I CANNOT get that numerical id to pass to the database when submitting my form.

Any ideas for a workaround to get this value passing as normal?

if (isset($_POST['addPosting'])) {
      $query = "INSERT INTO Postings (id, city_id, title, description) VALUES
('','$row[id]','$_POST[title]','$_POST[description]')";

Hello   I am trying to work out how many regular users I have to my site and how long those users tend to be users..   So, I have a table that logs every time a user visits my site and logs in, it stores the date / time as a unix timestamp and it logs their user id.   I started by getting the id's of any user who logs in more than 5 times in a specified period, but now I want to extend that...  

 
SELECT userID as user, count(userID) as logins FROM login_history where timestamp > UNIX_TIMESTAMP('2014-06-01 00:00:00') and timestamp < UNIX_TIMESTAMP('2014-07-01 00:00:00') group by user having logins > 5;
 

I work with a large codebase and I have this situation come up fairly often:   the legacy class has large objects such as:

$design->motor->dimensions->a;
$design->motor->dimensions->bd;
$design->specifications->weight;
$design->data->height;
//etc

When I create a new class, that class sometimes operates on the specific data, so say:

class MyClass
{
    public function compute($weight, $height, $a)
    {
        //stuff
    }
}

//and I call this for example as such:
(new MyClass())->compute($design->specifications->weight, $design->data->height, $design->motor->dimensions->a);

CONS:  Potential issue:  if design specs change and I need to change things parameters in "compute" function, I need to "re-key" the variables I pass to the function, and adjust things accordinly in MyClass as wel. PROS:  only the exact data is being passed, and this data can come from anywhere it is viable, so in effect the function is fairly well separated, I think.   Alternative option for me is to pass the entire design object, i.e

class MyClass
{
    public function compute(&$design) //can also be done via DI through a setter or constructor.
    {
         print $design->specifications->weight;
         print ($design->data->height + $design->motor->dimensions->a);
        //stuff
    }
}

(new MyClass())->compute($design);

PROS:  In this case when things change internally in which variables are needed and how things are computed, I only need to change the code in compute function of the class itself. CONS:  MyClass now needs to be aware of how $design object is constructed.   When it comes to this parameter passing, and Dependency Injection like this in general, does Computer Science advocate a preference on this issue?  Do I pass the entire object, or do I pass only the bits and pieces I need?

I'm trying to get a simple table to display and am not sure how to make it happen.  Table will have just 2 columns.  A TIME and an EVENT.  What I want to have happen is for the first row to show the TIME and next to that, the EVENT.  If a TIME has more than one event going I want the next row to show an empty first cell and then the second event below the first.

If I set up the loop the only way I know how (so far) it would also output the TIME value again and again as many times as there were events for that same time.  For example what I don't want is:

9:15  Sunday School
9:15 Nursery Available

What I do want is:

9:15 Sunday School
        Nursery Available

Thanks.

I just discovered that I have a major security flaw with my website.
Anyone who logs in to the website can easily access other users information as well as delete and edit other users information just by changing the ID variable in the address bar.
I have user ID Session started on these pages but still people can do anything they like with other users information just by editing the address bar.
For example if your logged in in the address bar of www.mywebsite.com/delete_mystuff.php?id=5 and change the "5" say to a "9" then you will have access to user#9 information.

Every important page that I have has this code:
Code: [Select]
 session_start();

if (!isset($_SESSION['user_id'])) {
// Start defining the URL.
         $url = 'http://' . $_SERVER['HTTP_HOST'] . dirname($_SERVER['PHP_SELF']);
// Check for a trailing slash.
         if ((substr($url, -1) == '/') OR (substr($url, -1) == '\\') ) {
         $url = substr ($url, 0, -1); // Chop off the slash.
}
// Add the page.
$url .= '/index.php';
ob_end_clean(); // Delete the buffer.
header("Location: $url");
exit(); // Quit the script.
} else {
                //Else If Logged In Run The Script

if((isset($_GET['id'])) && (is_numeric($_GET['id']))) {
         $id = (int) $_GET['id'];
} elseif ((isset($_POST['id'])) && (is_numeric($_POST['id']))) {
         $id = (int) $_POST['id'];
} else {
         echo ' No valid ID found, passed in url or form element';
        
         exit();
}



What am I doing wrong?
Please help if you know how to correct this.

Many thanks in advance.

im new , and ... 

i hate tutorials .. books .. anything that does not make u part of the deal -  .. thats why i started by creating something and learning from my mistakes at the same time .. i like this way of learning ..

soo , while im building and trying things out .. i started thinking how the server know the person with this link is really U ? .. when u start just linking pages to each other its just a matter of finding out what is the link to do what ever u want with the users personal pages ! .. i know my questions r stupid but i just hate to go and write lessons without any effort

im confused with the concept of SESSIONS and COOKIES , r they the unswer to this security problem ? how u can work with them .. ?

im not asking for codes .. just general ideas about users and how they control their profiles and stuff with full security ?

ill be very thankful if i get any answer ^^

I would get the ip address of the user that is on the site. I used $ip = $_SERVER['REMOTE_ADDR']; and it doesn't show my actual ip. Is it because im using an apache server on my computer.

I have used 

$sql = "SELECT id, username FROM $tbl_name ORDER BY username";
$result = $con->query($sql);
while ($row = $result->fetch_assoc())
{
    echo "<a href='editUser.php?id={$row['id']}'>{$row['username']}</a><br><br>\n";
    echo "<style>a {color: blue; text-decoration: none;} a:hover {color: #ff0000} body {background-color: #000;} </style>";
}

in euser.php which echo's out all the users in the database via an anchor tag and includes their id in the url. but when i click on their name i want to have options like: - change password - ban user e.t.c and i have tried 

$sql = "SELECT id FROM $tbl_name";
$result = $con->query($sql);
while ($row = $result->fetch_assoc()) {

echo "<a href='editUser.php?id={$row['id']}'> Change Password  </a>

in my other page editUser.php it posts Change Password Change Password Change Password and each change password has the 3 ids of the users   this is confusing me.